Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa
File:                     22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa (raw, json)
Hash identifier:          XQFpFU20Edd3O6waVN7ANJTz9Pkd27UoX53zuQKyWuc=
Subject key identifier:   B8:3E:31:5E:E4:C3:1A:DA:ED:C6:8D:9B:E8:E0:5B:43:5F:F3:19:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A629096F5C767343CBCF9EBA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     397197
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:96:f5:c7:67:34:3c:bc:f9:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=15feaf79-e648-48fd-9a34-edc46c8c9950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:2b:ba:4c:14:cd:71:fe:bb:9f:b2:c0:0e:
                    42:9d:c6:d9:71:d7:a4:1c:01:64:1e:af:2a:a9:4a:
                    15:a7:3e:ac:ee:e5:68:fc:af:cd:5b:cb:e7:99:ac:
                    83:92:db:31:87:14:cb:9e:22:6c:d2:5c:52:94:01:
                    45:0d:be:4b:ab:0c:83:bd:80:3c:6a:61:ba:ad:b2:
                    ab:57:0f:16:1f:fa:44:d2:91:bc:dd:49:3d:52:ef:
                    fc:ad:6f:8b:e5:56:09:63:28:93:55:5e:27:50:f6:
                    04:2e:2e:bb:92:9f:d4:19:e4:f8:45:0f:79:67:13:
                    53:98:0a:91:00:d0:c1:1c:f6:93:97:d5:52:d6:7e:
                    46:36:c5:1c:0c:ed:1a:ad:f8:10:16:5b:2f:67:df:
                    a8:4f:74:cd:81:f3:38:7f:f7:91:e9:b4:d5:dd:36:
                    c6:b7:7d:61:56:bf:33:9e:c6:0e:46:14:8b:a7:95:
                    c6:02:19:2e:ae:1f:7f:fd:76:c0:79:0f:32:ee:7f:
                    04:6d:3c:12:f6:c6:ec:09:80:94:c0:bb:49:2f:8e:
                    4b:ab:36:1b:59:44:21:62:64:07:07:bd:21:85:cc:
                    3e:b4:e0:de:b3:fe:8b:09:bf:c1:9a:1d:60:8a:1b:
                    13:65:42:b6:07:f5:96:5b:1e:4d:3e:1f:78:46:77:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:31:5E:E4:C3:1A:DA:ED:C6:8D:9B:E8:E0:5B:43:5F:F3:19:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22584b11-e2e7-3a1d-b578-31495eb9d5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:af:4d:18:cd:dc:15:77:33:09:7c:79:2c:66:e7:0f:a3:
         17:dc:b5:59:8d:7b:ef:e1:e5:6a:ef:89:fb:fa:e9:ea:8d:b0:
         3c:9e:45:ff:47:33:dc:b6:d0:8b:3e:9b:3f:43:64:15:04:7f:
         d6:0c:7c:05:44:47:44:8f:cc:ea:c1:0e:de:f5:c4:1b:eb:49:
         58:57:f5:c8:64:86:91:61:ab:40:e4:99:5c:8b:47:02:29:05:
         df:c2:a8:16:3a:a1:92:7a:e2:96:91:13:e1:3a:19:30:66:ed:
         ab:1f:77:48:e5:4a:80:d7:8f:4a:c8:8b:5b:6c:7d:bf:23:3b:
         0a:8d:61:01:4d:b4:8a:38:59:20:ac:5c:74:d0:01:d2:fb:99:
         92:00:85:ba:f9:72:3b:66:60:fb:84:83:a8:f9:98:30:29:b4:
         1e:d7:fc:85:4c:34:31:37:9e:17:36:92:7e:fd:b4:06:6c:40:
         2f:37:af:9b:57:56:ee:a4:28:cb:b1:4c:25:be:a0:9a:18:77:
         0d:01:fa:a9:70:df:6a:8d:2c:8c:87:61:ae:29:3f:f0:d2:24:
         70:37:07:d9:e0:53:c5:c6:ab:4f:15:28:66:22:76:d3:94:a5:
         b1:fc:a9:3c:09:12:47:22:c5:7a:fd:49:e5:e8:f0:c4:5a:9b:
         f3:d9:cc:1b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpikJb1x2c0PLz566AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MTVmZWFmNzktZTY0OC00OGZkLTlhMzQtZWRjNDZjOGM5OTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO0rukwUzXH+u5+ywA5CncbZcdekHAFkHq8q
qUoVpz6s7uVo/K/NW8vnmayDktsxhxTLniJs0lxSlAFFDb5LqwyDvYA8amG6rbKr
Vw8WH/pE0pG83Uk9Uu/8rW+L5VYJYyiTVV4nUPYELi67kp/UGeT4RQ95ZxNTmAqR
ANDBHPaTl9VS1n5GNsUcDO0arfgQFlsvZ9+oT3TNgfM4f/eR6bTV3TbGt31hVr8z
nsYORhSLp5XGAhkurh9//XbAeQ8y7n8EbTwS9sbsCYCUwLtJL45LqzYbWUQhYmQH
B70hhcw+tODes/6LCb/Bmh1gihsTZUK2B/WWWx5NPh94RneQsQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLg+MV7kwxra7caNm+jgW0Nf8xlkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjI1ODRiMTEtZTJlNy0z
YTFkLWI1NzgtMzE0OTVlYjlkNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAb869NGM3cFXczCXx5LGbnD6MX3LVZjXvv4eVq
74n7+unqjbA8nkX/RzPcttCLPps/Q2QVBH/WDHwFREdEj8zqwQ7e9cQb60lYV/XI
ZIaRYatA5Jlci0cCKQXfwqgWOqGSeuKWkRPhOhkwZu2rH3dI5UqA149KyItbbH2/
IzsKjWEBTbSKOFkgrFx00AHS+5mSAIW6+XI7ZmD7hIOo+ZgwKbQe1/yFTDQxN54X
NpJ+/bQGbEAvN6+bV1bupCjLsUwlvqCaGHcNAfqpcN9qjSyMh2GuKT/w0iRwNwfZ
4FPFxqtPFShmInbTlKWx/Kk8CRJHIsV6/Unl6PDEWpvz2cwb
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:59:03 2025 by rpki-client