Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cc85406-510b-3034-a6c9-8b35ee0248b3.roa
File:                     1cc85406-510b-3034-a6c9-8b35ee0248b3.roa (raw, json)
Hash identifier:          iUq1x60c537x/k8XN1klO+e6Bkdxfostb+xENSlz2WE=
Subject key identifier:   D7:05:0A:0C:91:9F:60:70:3C:EF:24:CE:A7:00:AF:3B:0B:D9:5F:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFDEAF3EF47EFF35C4F9A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cc85406-510b-3034-a6c9-8b35ee0248b3.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     396583
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:ea:f3:ef:47:ef:f3:5c:4f:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=26d26a9b-8157-4ab2-ae6d-95ddd4ac17f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:14:08:26:98:dc:82:78:dd:78:d5:6e:fc:07:
                    64:4e:14:53:31:45:fb:43:8b:76:4a:7f:eb:97:0d:
                    1d:b5:1d:07:80:2d:3e:31:ab:80:bd:bc:2a:c6:36:
                    f7:d8:4d:db:02:01:19:33:93:3f:dd:89:f8:8c:89:
                    e7:f4:54:c3:e5:09:2d:c2:23:60:41:e4:76:32:9e:
                    b6:b9:54:b3:f6:37:66:ed:87:b1:86:b5:70:3b:fc:
                    66:45:86:89:a6:49:f5:fc:2a:44:5d:63:8d:c0:58:
                    69:eb:44:04:3c:09:2d:cb:28:89:0c:21:af:7a:95:
                    51:8f:4e:ba:81:b2:1d:b2:5f:4b:62:e3:f0:40:ce:
                    2f:3a:6d:54:51:b4:a9:c4:6d:76:3c:00:b9:bc:08:
                    e6:81:32:a8:48:ef:06:35:c5:6c:d4:53:be:33:0e:
                    6a:2a:68:48:f4:2d:73:ba:13:6a:9a:f0:a8:a2:e7:
                    9b:f5:52:05:66:4b:3c:0f:cf:81:f1:02:b1:66:5a:
                    32:d5:65:20:1b:f2:cd:4e:84:f4:24:b0:4f:45:35:
                    41:a0:5a:7b:b2:52:ef:29:be:3b:5f:3e:cb:b6:0c:
                    42:2b:d0:82:54:af:da:87:bc:9b:ad:e6:ae:82:a8:
                    6e:f0:16:26:38:14:6c:3e:00:db:95:1f:a3:d0:ea:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:05:0A:0C:91:9F:60:70:3C:EF:24:CE:A7:00:AF:3B:0B:D9:5F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cc85406-510b-3034-a6c9-8b35ee0248b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:be:20:ce:49:3e:54:81:fa:38:89:ad:d9:d8:ec:50:55:4e:
         0a:7e:37:e8:9e:69:11:af:69:95:b9:3d:68:08:2c:c9:16:72:
         b7:75:22:4a:ed:dd:36:2e:3b:9b:13:5a:b7:89:08:a7:54:fa:
         fd:bf:e9:8c:7a:81:7a:54:5e:e9:3d:cd:fa:fb:32:57:5a:67:
         b8:4e:83:af:d8:1b:f8:4f:11:bb:30:b9:6a:b9:91:46:04:73:
         90:3f:26:99:ae:4a:20:02:74:5e:de:6e:21:a2:33:d0:a7:66:
         6f:89:fd:27:45:cf:62:b6:6d:a7:83:d5:d0:57:46:d3:2f:15:
         15:d1:a7:a6:36:38:0c:13:ff:35:ff:73:1f:8c:20:73:ab:1a:
         2d:19:60:c4:30:d0:f7:4e:0a:23:93:0b:0a:cf:4d:c1:8c:34:
         4b:47:15:d7:33:03:8c:39:f4:34:00:5d:2d:18:2a:23:dc:41:
         17:a3:9e:2a:69:73:90:97:28:ac:fa:50:d2:79:37:30:10:40:
         c0:cd:9f:b0:1b:50:8b:21:dc:75:32:d7:f1:1c:0f:a7:fc:5b:
         bd:ff:f5:bb:cb:a9:ed:a9:7e:2d:29:6d:30:40:88:f8:97:dc:
         27:b4:ea:1e:5a:e5:8b:2f:6a:e0:80:82:04:8c:f3:cd:4e:9f:
         7e:eb:d0:f2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpc/erz70fv81xPmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MjZkMjZhOWItODE1Ny00YWIyLWFlNmQtOTVkZGQ0YWMxN2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RQIJpjcgnjdeNVu/AdkThRTMUX7Q4t2Sn/r
lw0dtR0HgC0+MauAvbwqxjb32E3bAgEZM5M/3Yn4jInn9FTD5QktwiNgQeR2Mp62
uVSz9jdm7YexhrVwO/xmRYaJpkn1/CpEXWONwFhp60QEPAktyyiJDCGvepVRj066
gbIdsl9LYuPwQM4vOm1UUbSpxG12PAC5vAjmgTKoSO8GNcVs1FO+Mw5qKmhI9C1z
uhNqmvCooueb9VIFZks8D8+B8QKxZloy1WUgG/LNToT0JLBPRTVBoFp7slLvKb47
Xz7LtgxCK9CCVK/ah7ybreaugqhu8BYmOBRsPgDblR+j0OrCqwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNcFCgyRn2BwPO8kzqcArzsL2V8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNjODU0MDYtNTEwYi0z
MDM0LWE2YzktOGIzNWVlMDI0OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYviDOST5Ugfo4ia3Z2OxQVU4KfjfonmkRr2mV
uT1oCCzJFnK3dSJK7d02LjubE1q3iQinVPr9v+mMeoF6VF7pPc36+zJXWme4ToOv
2Bv4TxG7MLlquZFGBHOQPyaZrkogAnRe3m4hojPQp2Zvif0nRc9itm2ng9XQV0bT
LxUV0aemNjgME/81/3MfjCBzqxotGWDEMND3TgojkwsKz03BjDRLRxXXMwOMOfQ0
AF0tGCoj3EEXo54qaXOQlyis+lDSeTcwEEDAzZ+wG1CLIdx1MtfxHA+n/Fu9//W7
y6ntqX4tKW0wQIj4l9wntOoeWuWLL2rggIIEjPPNTp9+69Dy
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:16 2025 by rpki-client