Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da656df2-31b5-3388-8eb7-5bdb54c2f24c.roa
File:                     da656df2-31b5-3388-8eb7-5bdb54c2f24c.roa (raw, json)
Hash identifier:          CED38twM7lOxjO/OsO37XPeEOi4a1SS6cx2Yz6a/2l8=
Subject key identifier:   66:90:57:75:08:71:6A:2B:FD:1E:7E:4F:22:2D:40:A1:CB:C9:AF:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CE19FBE9CD7CDCB71640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da656df2-31b5-3388-8eb7-5bdb54c2f24c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396545
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ce:19:fb:e9:cd:7c:dc:b7:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=40a7f030-40c5-4063-80e9-af6d84f383f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dd:37:d0:d4:90:05:f9:39:c3:32:b8:a8:fc:
                    df:16:f5:00:86:51:9c:89:a0:54:47:1f:02:fc:91:
                    d9:7b:f8:3a:92:80:4d:fe:af:f4:4f:a4:0f:71:6c:
                    84:52:46:67:c1:d9:5c:80:a4:fd:67:03:69:7f:65:
                    be:49:55:d8:ae:72:53:97:4a:99:1f:19:10:65:a9:
                    e8:85:f9:cb:a4:1c:4d:10:e0:9e:73:0c:1f:4d:39:
                    fc:44:03:5c:97:e1:4b:53:24:c3:91:c7:af:1b:af:
                    77:b6:74:df:1e:a1:0b:24:a6:7d:47:fb:e7:7f:3a:
                    9f:1f:78:36:e2:bb:15:64:f6:c5:08:d3:73:25:a4:
                    15:2d:9a:8a:7a:75:57:ca:59:73:2a:7a:93:29:f7:
                    92:cf:e6:7d:bc:af:a3:c3:f0:b9:cb:b5:71:c9:70:
                    28:74:fb:04:e2:c5:58:d1:9b:9a:4c:8b:8c:e8:ce:
                    59:f9:0e:9e:8e:d0:bd:d9:cc:2f:78:aa:19:0f:ad:
                    df:87:28:6f:30:7a:6d:79:a0:b6:2b:b6:3b:d5:56:
                    46:39:81:6f:60:dc:26:d4:88:95:88:cc:1b:d3:15:
                    bd:79:16:90:d6:b7:c8:3d:96:d0:7f:3f:3a:ef:d6:
                    6f:6a:33:60:c7:c5:1d:c1:60:cb:7f:63:f2:3d:ae:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:57:75:08:71:6A:2B:FD:1E:7E:4F:22:2D:40:A1:CB:C9:AF:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da656df2-31b5-3388-8eb7-5bdb54c2f24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:98:b2:f8:bf:84:e9:fb:80:85:3b:ae:f2:79:87:86:72:03:
         5e:2f:4d:75:42:ab:3f:36:0a:be:01:09:e2:7e:84:e6:23:00:
         36:2b:f7:2f:4e:3a:84:63:6e:7e:44:6d:99:4a:c3:9a:d8:f3:
         69:e6:36:bf:9b:fe:e4:54:d6:7d:03:69:56:7a:01:91:4a:99:
         9d:7b:96:32:44:92:95:c2:93:fe:53:2a:8b:a7:09:0d:7f:bb:
         75:1a:45:21:64:7e:be:70:d8:ad:5c:ae:ae:32:bd:fa:38:61:
         9b:de:c0:24:ae:cf:76:41:85:56:e9:ce:b8:a6:2d:22:30:fc:
         03:d0:1e:97:56:1e:41:f8:58:e3:42:4a:f5:24:f4:8c:84:d6:
         a6:7a:f4:17:61:55:12:49:6e:29:a9:03:d1:af:8c:56:d6:44:
         55:83:d8:ed:b4:58:a2:74:68:7f:ff:4c:45:30:dd:2b:77:ac:
         02:cc:f2:06:9a:89:51:be:35:6e:58:a6:17:84:94:bc:7f:e5:
         f1:32:67:cf:49:d9:1c:20:ff:f6:d6:cf:d0:aa:37:8c:ab:30:
         5f:78:f4:5b:ee:e7:e2:4d:7f:38:f3:2a:8c:79:22:bc:ea:ef:
         08:e2:74:a5:c7:ea:fc:c3:39:c5:e1:61:24:cb:47:73:53:ab:
         45:9f:c1:a8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhls4Z++nNfNy3FkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NDBhN2YwMzAtNDBjNS00MDYzLTgwZTktYWY2ZDg0ZjM4M2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d030NSQBfk5wzK4qPzfFvUAhlGciaBURx8C
/JHZe/g6koBN/q/0T6QPcWyEUkZnwdlcgKT9ZwNpf2W+SVXYrnJTl0qZHxkQZano
hfnLpBxNEOCecwwfTTn8RANcl+FLUyTDkcevG693tnTfHqELJKZ9R/vnfzqfH3g2
4rsVZPbFCNNzJaQVLZqKenVXyllzKnqTKfeSz+Z9vK+jw/C5y7VxyXAodPsE4sVY
0ZuaTIuM6M5Z+Q6ejtC92cwveKoZD63fhyhvMHpteaC2K7Y71VZGOYFvYNwm1IiV
iMwb0xW9eRaQ1rfIPZbQfz8679ZvajNgx8UdwWDLf2PyPa74HQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGaQV3UIcWor/R5+TyItQKHLya8nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGE2NTZkZjItMzFiNS0z
Mzg4LThlYjctNWJkYjU0YzJmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAmmLL4v4Tp+4CFO67yeYeGcgNeL011Qqs/Ngq+
AQnifoTmIwA2K/cvTjqEY25+RG2ZSsOa2PNp5ja/m/7kVNZ9A2lWegGRSpmde5Yy
RJKVwpP+UyqLpwkNf7t1GkUhZH6+cNitXK6uMr36OGGb3sAkrs92QYVW6c64pi0i
MPwD0B6XVh5B+FjjQkr1JPSMhNamevQXYVUSSW4pqQPRr4xW1kRVg9jttFiidGh/
/0xFMN0rd6wCzPIGmolRvjVuWKYXhJS8f+XxMmfPSdkcIP/21s/QqjeMqzBfePRb
7ufiTX848yqMeSK86u8I4nSlx+r8wznF4WEky0dzU6tFn8Go
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:18 2025 by rpki-client