Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb925b8-9472-38ed-9531-a4d848bdb685.roa
File:                     ebb925b8-9472-38ed-9531-a4d848bdb685.roa (raw, json)
Hash identifier:          EYpwftpopdfb9Qa/GHjHst4LndlDZo0moyuL+JuOjFQ=
Subject key identifier:   EA:65:40:C6:B2:4D:89:50:4C:C8:F2:9D:30:64:A1:32:56:C9:A2:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D3088D91B9C2A8EFBB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb925b8-9472-38ed-9531-a4d848bdb685.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396610
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d3:08:8d:91:b9:c2:a8:ef:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e15ea830-4e5a-4ca6-b4bf-45ce4a159ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:ff:50:07:54:1a:3d:b9:09:2b:f9:08:4a:
                    14:c4:ad:05:db:4f:3c:ff:f7:4a:72:19:12:70:46:
                    5b:9e:64:d4:89:ba:9f:e3:75:cd:c6:60:08:81:33:
                    a4:1d:42:ac:28:4a:fb:d2:1f:d9:7e:d5:47:a8:e9:
                    e7:7b:71:e4:8d:2a:57:74:df:48:04:ea:90:d0:68:
                    d0:03:89:d7:ad:75:e9:b1:40:7e:b3:50:49:6b:30:
                    10:e7:d4:06:ef:48:ea:a9:d1:c1:d4:c7:9b:be:c3:
                    a9:79:2a:c9:f3:7c:65:88:1c:5a:c1:47:54:e0:e2:
                    24:39:93:7c:9c:23:4d:8f:b8:39:d6:2e:7d:7f:e5:
                    c9:ba:e4:ac:df:02:d9:e6:06:9b:a4:48:9e:53:93:
                    3d:cf:33:71:08:86:aa:96:ee:b6:36:bb:00:e3:01:
                    1d:dd:c2:e2:cd:c1:3a:69:ca:42:d6:16:6f:b3:d5:
                    c8:d4:4e:c2:7e:a9:25:8b:bf:5b:70:c6:dd:1a:dc:
                    e7:f0:52:8e:35:eb:e0:3e:41:f2:93:15:42:ad:ed:
                    01:03:2b:37:c7:85:b6:61:33:ef:49:60:04:62:c3:
                    9f:27:31:d2:8a:6c:cc:59:35:52:cb:d1:d6:f9:06:
                    c9:a8:f3:e6:66:1f:36:32:43:a1:71:87:6a:4b:38:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:65:40:C6:B2:4D:89:50:4C:C8:F2:9D:30:64:A1:32:56:C9:A2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb925b8-9472-38ed-9531-a4d848bdb685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:1c:71:13:b5:28:b5:89:2e:33:4b:9e:62:9e:96:9b:0e:
         4f:3c:db:a6:e4:e7:fb:9f:d9:f6:66:5d:ef:6d:b4:6b:ee:a5:
         6a:00:95:40:8b:6a:df:62:a0:bb:f6:7e:af:69:bc:61:d7:5c:
         95:9b:26:62:82:4d:e3:da:73:13:23:32:45:3d:3a:40:4d:42:
         f7:09:f3:98:8f:d2:c4:08:eb:ef:59:7a:c2:8b:50:a1:10:90:
         a0:54:27:b5:25:6d:15:65:56:61:90:a9:6a:04:9f:c5:ab:ce:
         5c:6d:a8:4d:b9:63:9d:5b:1d:2e:ee:34:b4:ab:b6:0d:33:8a:
         a4:af:22:95:21:19:c8:b4:f3:64:40:83:d8:86:7c:8e:3d:6f:
         fe:55:a8:2a:af:d2:a9:23:6d:00:dd:21:21:34:12:de:44:0b:
         9f:ba:9a:da:8e:85:4c:16:d6:ba:e5:0e:69:e3:2c:4c:9d:3e:
         9a:31:19:2b:78:28:7a:df:b3:82:08:ab:0f:cc:ca:5b:6f:8c:
         f9:88:65:ca:91:bd:76:78:85:b6:4f:46:cd:16:86:f0:de:ee:
         84:c6:4f:72:19:f7:60:4a:c2:6d:71:ab:67:cc:94:9d:bb:b2:
         a8:86:7f:9a:54:d7:61:9c:5c:64:eb:9d:56:bc:dd:26:aa:a2:
         78:da:05:b8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhltMIjZG5wqjvu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTE1ZWE4MzAtNGU1YS00Y2E2LWI0YmYtNDVjZTRhMTU5ZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3n/UAdUGj25CSv5CEoUxK0F2088//dKchkS
cEZbnmTUibqf43XNxmAIgTOkHUKsKEr70h/ZftVHqOnne3HkjSpXdN9IBOqQ0GjQ
A4nXrXXpsUB+s1BJazAQ59QG70jqqdHB1MebvsOpeSrJ83xliBxawUdU4OIkOZN8
nCNNj7g51i59f+XJuuSs3wLZ5gabpEieU5M9zzNxCIaqlu62NrsA4wEd3cLizcE6
acpC1hZvs9XI1E7Cfqkli79bcMbdGtzn8FKONevgPkHykxVCre0BAys3x4W2YTPv
SWAEYsOfJzHSimzMWTVSy9HW+QbJqPPmZh82MkOhcYdqSzjCSQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOplQMayTYlQTMjynTBkoTJWyaIJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWJiOTI1YjgtOTQ3Mi0z
OGVkLTk1MzEtYTRkODQ4YmRiNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCjuhxxE7UotYkuM0ueYp6Wmw5PPNum5Of7n9n2
Zl3vbbRr7qVqAJVAi2rfYqC79n6vabxh11yVmyZigk3j2nMTIzJFPTpATUL3CfOY
j9LECOvvWXrCi1ChEJCgVCe1JW0VZVZhkKlqBJ/Fq85cbahNuWOdWx0u7jS0q7YN
M4qkryKVIRnItPNkQIPYhnyOPW/+Vagqr9KpI20A3SEhNBLeRAufuprajoVMFta6
5Q5p4yxMnT6aMRkreCh637OCCKsPzMpbb4z5iGXKkb12eIW2T0bNFobw3u6Exk9y
GfdgSsJtcatnzJSdu7Kohn+aVNdhnFxk651WvN0mqqJ42gW4
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:04 2025 by rpki-client