Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b50656c-d814-3aea-a9c4-b4d8859859a3.roa
File:                     1b50656c-d814-3aea-a9c4-b4d8859859a3.roa (raw, json)
Hash identifier:          ufsqsncuM1Q7wBv3ogZ0ivEe/Jp+uXAP4FUwgBOxt3Y=
Subject key identifier:   3E:52:10:91:0D:AC:DD:DB:E3:66:CC:15:EF:AB:9C:CD:6C:B1:CA:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290D3D36659D67D2B2CE080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b50656c-d814-3aea-a9c4-b4d8859859a3.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     36622
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d3:d3:66:59:d6:7d:2b:2c:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=0fdcd4e2-f7cb-4177-89bf-68d3b03e7fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:ce:66:ce:1c:04:9a:2d:6f:71:fe:d1:73:
                    0c:9d:4f:e7:6f:f8:ba:c3:88:c8:ca:9c:7c:d6:4d:
                    bc:ef:c2:b5:87:61:3f:15:97:16:c7:2c:0f:6a:7f:
                    bb:84:9f:76:6e:66:e7:9f:65:a9:bf:03:06:14:ed:
                    d0:08:97:0f:28:e9:14:6b:d9:e4:f6:5c:0f:52:d2:
                    e1:d8:ca:aa:b5:b9:8d:e8:f0:55:1d:95:51:ad:86:
                    bb:33:01:f1:1d:e6:d2:e9:9a:72:96:34:74:32:c1:
                    8b:29:42:e0:18:f2:3c:c6:a7:dd:35:07:dc:58:c5:
                    c9:d0:7b:54:0d:20:ec:b1:12:c6:9a:2f:28:99:cf:
                    ba:2e:8f:15:d1:26:4a:54:b5:86:8b:6b:a2:dc:fa:
                    08:87:18:e9:bd:a2:21:97:42:b8:33:b0:28:6e:ec:
                    6c:78:1b:b5:5a:5d:50:e7:31:29:96:08:c1:ef:97:
                    2a:40:87:ce:93:3f:1a:4e:8d:65:7b:79:cc:a2:f1:
                    1e:41:7e:2b:bb:27:07:e5:91:56:c9:e1:11:e1:4f:
                    50:7d:bc:35:1d:a3:8c:1b:a9:e3:d3:f2:b5:a0:fe:
                    bd:8b:64:61:eb:02:1b:d0:d0:c4:fb:5b:5f:1c:61:
                    51:1e:16:01:4b:00:82:1a:39:83:f0:3c:20:2c:75:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:52:10:91:0D:AC:DD:DB:E3:66:CC:15:EF:AB:9C:CD:6C:B1:CA:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b50656c-d814-3aea-a9c4-b4d8859859a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:52:7f:4e:8a:15:99:75:97:4b:48:ed:f3:6f:d6:7a:82:
         64:08:37:27:5d:f2:0d:79:3d:64:7e:e8:92:03:73:cd:f7:96:
         b7:27:f0:5c:6e:82:0d:93:6e:24:47:08:53:f4:a4:17:0c:e9:
         52:c8:27:9d:cd:9c:7f:fc:7a:39:71:15:7f:99:e4:fd:b8:da:
         a2:65:ed:62:d5:31:e6:dc:0a:35:f3:72:83:9c:64:43:21:60:
         0c:8b:3c:ba:be:06:95:45:9f:af:c7:76:97:9d:76:54:72:08:
         2f:4e:c1:32:8f:ed:89:93:34:7a:e3:b9:e5:03:2c:f0:2c:34:
         e9:df:c9:46:69:2c:78:ab:61:89:1f:f0:d4:b4:97:7e:89:3b:
         c3:ea:a0:44:96:48:50:4d:e1:8c:7a:1a:e2:b8:e6:57:fa:98:
         ee:50:d9:90:e0:46:64:bd:6b:14:52:a8:be:68:95:79:75:b8:
         2e:a3:c6:f5:1f:0d:1a:a8:d1:4e:c8:72:8e:b9:94:ce:dd:02:
         6e:36:3a:69:19:e5:f4:6d:e1:5c:61:f9:31:90:e3:64:76:21:
         f6:a9:1e:82:30:27:e6:39:6b:ae:75:29:a2:c5:13:52:2e:7c:
         4a:54:a6:bf:29:a0:66:05:f8:80:da:9a:35:2b:be:02:02:cb:
         16:2d:8a:e5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpikNPTZlnWfSss4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MGZkY2Q0ZTItZjdjYi00MTc3LTg5YmYtNjhkM2IwM2U3ZmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPXOZs4cBJotb3H+0XMMnU/nb/i6w4jIypx8
1k2878K1h2E/FZcWxywPan+7hJ92bmbnn2WpvwMGFO3QCJcPKOkUa9nk9lwPUtLh
2MqqtbmN6PBVHZVRrYa7MwHxHebS6ZpyljR0MsGLKULgGPI8xqfdNQfcWMXJ0HtU
DSDssRLGmi8omc+6Lo8V0SZKVLWGi2ui3PoIhxjpvaIhl0K4M7AobuxseBu1Wl1Q
5zEplgjB75cqQIfOkz8aTo1le3nMovEeQX4ruycH5ZFWyeER4U9Qfbw1HaOMG6nj
0/K1oP69i2Rh6wIb0NDE+1tfHGFRHhYBSwCCGjmD8DwgLHW3iwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD5SEJENrN3b42bMFe+rnM1sscqHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWI1MDY1NmMtZDgxNC0z
YWVhLWE5YzQtYjRkODg1OTg1OWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApxlJ/TooVmXWXS0jt82/WeoJkCDcnXfINeT1k
fuiSA3PN95a3J/BcboINk24kRwhT9KQXDOlSyCedzZx//Ho5cRV/meT9uNqiZe1i
1THm3Ao183KDnGRDIWAMizy6vgaVRZ+vx3aXnXZUcggvTsEyj+2JkzR647nlAyzw
LDTp38lGaSx4q2GJH/DUtJd+iTvD6qBElkhQTeGMehriuOZX+pjuUNmQ4EZkvWsU
Uqi+aJV5dbguo8b1Hw0aqNFOyHKOuZTO3QJuNjppGeX0beFcYfkxkONkdiH2qR6C
MCfmOWuudSmixRNSLnxKVKa/KaBmBfiA2po1K74CAssWLYrl
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:10:45 2025 by rpki-client