Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa
File:                     e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa (raw, json)
Hash identifier:          Bfht8AUvP3NAanIVJjdrfT8uSRuaZJRFUk3mF4GTN1w=
Subject key identifier:   8E:4B:6F:B8:2C:DB:02:BA:6E:F8:2C:4E:8C:0B:03:09:DB:E5:AB:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AD7D1451DB3D46C72B0078B90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     396595
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:45:1d:b3:d4:6c:72:b0:07:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8a35db0d-c38c-466f-8868-04eb4ed72045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:49:94:bd:ba:c1:12:d8:bc:30:c7:ae:0a:b6:
                    84:e0:ce:e9:ee:c7:e1:0e:e5:c2:ef:64:e8:c2:ed:
                    ed:09:87:45:12:67:a7:22:03:e6:ba:44:f0:35:13:
                    40:fe:41:6c:24:59:2a:5c:ec:07:37:67:80:01:0d:
                    fe:16:da:1e:77:de:26:43:a1:0f:b2:be:1c:3e:c6:
                    fc:98:4f:8a:e5:60:4c:bf:5f:af:06:32:7e:64:18:
                    17:d6:cd:0b:b0:e0:ab:3c:17:98:52:ca:81:37:62:
                    b7:c6:d0:f1:fb:6b:0d:85:74:76:d6:67:28:ee:9b:
                    9a:1f:a7:ff:6a:ed:c1:49:3f:e9:8a:ce:13:c6:0f:
                    d8:3b:a0:df:dd:1f:37:2f:28:24:21:ca:5d:7d:71:
                    31:e2:9a:f2:55:f4:8b:f7:54:6a:e3:e0:20:4b:7b:
                    bc:77:7a:53:8b:ae:fc:4c:ac:51:2b:e9:e7:e3:44:
                    e1:de:ae:37:34:11:e1:ac:21:cf:a7:a1:39:36:f6:
                    5c:16:19:23:7b:eb:ba:7f:4b:92:2e:c2:7d:91:fa:
                    90:ea:bd:87:90:2a:14:65:5e:0a:00:75:65:1f:97:
                    72:d3:4c:37:a0:46:bb:4d:13:67:7b:83:b8:f4:ad:
                    df:e2:d4:7e:c3:c4:4b:5a:ef:89:7d:84:f6:d1:de:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4B:6F:B8:2C:DB:02:BA:6E:F8:2C:4E:8C:0B:03:09:DB:E5:AB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:ee:99:97:2a:92:10:d7:06:19:45:97:93:b3:40:24:72:
         2b:ac:80:d7:48:c2:84:bf:dc:31:d5:8d:c3:08:28:9b:ce:fe:
         98:32:94:2e:a0:1e:9c:2b:32:cb:ba:3b:02:ae:2b:fb:e9:3e:
         89:4f:0c:25:ef:96:eb:17:c5:7c:32:b5:9c:d2:04:bd:e7:06:
         d3:ce:f6:dc:38:7a:b1:33:d9:90:f0:8f:23:14:82:7a:1f:ab:
         78:97:bb:f9:73:1d:d8:68:2f:cd:d4:f3:72:45:6c:5f:d7:37:
         31:9d:97:b8:3d:9d:32:2b:3d:78:21:e4:27:5d:55:fa:f7:9b:
         9f:40:2e:95:ef:c0:97:f9:32:0d:f9:e1:a5:8a:9e:0d:11:98:
         fe:25:71:65:4d:c2:a4:9a:5a:77:af:0b:31:25:37:62:43:40:
         88:26:f7:d5:1d:c8:58:11:ad:58:6c:04:1d:bf:1d:82:d7:c1:
         e1:1d:bc:79:48:bb:29:5a:7b:35:8f:af:af:27:df:ac:7b:ae:
         f3:a3:4b:1d:47:19:c1:3a:6a:ce:b0:93:cc:41:3e:2f:1d:20:
         a1:ac:32:3e:72:bf:dc:8e:82:06:b5:39:83:f1:d7:b4:df:07:
         ec:df:b5:6a:ae:a8:f8:0d:99:2b:b6:d4:54:38:ef:5a:e0:e8:
         86:06:8c:35
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0UUds9RscrAHi5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
OGEzNWRiMGQtYzM4Yy00NjZmLTg4NjgtMDRlYjRlZDcyMDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50mUvbrBEti8MMeuCraE4M7p7sfhDuXC72To
wu3tCYdFEmenIgPmukTwNRNA/kFsJFkqXOwHN2eAAQ3+Ftoed94mQ6EPsr4cPsb8
mE+K5WBMv1+vBjJ+ZBgX1s0LsOCrPBeYUsqBN2K3xtDx+2sNhXR21mco7puaH6f/
au3BST/pis4Txg/YO6Df3R83LygkIcpdfXEx4pryVfSL91Rq4+AgS3u8d3pTi678
TKxRK+nn40Th3q43NBHhrCHPp6E5NvZcFhkje+u6f0uSLsJ9kfqQ6r2HkCoUZV4K
AHVlH5dy00w3oEa7TRNne4O49K3f4tR+w8RLWu+JfYT20d5++QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI5Lb7gs2wK6bvgsTowLAwnb5ashMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTYyYmUzMGMtZTk2Zi0z
Y2JmLWFiMGQtNmY2YTcxNTJiYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAsQu6ZlyqSENcGGUWXk7NAJHIrrIDXSMKEv9wx
1Y3DCCibzv6YMpQuoB6cKzLLujsCriv76T6JTwwl75brF8V8MrWc0gS95wbTzvbc
OHqxM9mQ8I8jFIJ6H6t4l7v5cx3YaC/N1PNyRWxf1zcxnZe4PZ0yKz14IeQnXVX6
95ufQC6V78CX+TIN+eGlip4NEZj+JXFlTcKkmlp3rwsxJTdiQ0CIJvfVHchYEa1Y
bAQdvx2C18HhHbx5SLspWns1j6+vJ9+se67zo0sdRxnBOmrOsJPMQT4vHSChrDI+
cr/cjoIGtTmD8de03wfs37Vqrqj4DZkrttRUOO9a4OiGBow1
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:46 2025 by rpki-client