Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32b38995-a3c1-32ec-8fc3-12c8504d691e.roa
File:                     32b38995-a3c1-32ec-8fc3-12c8504d691e.roa (raw, json)
Hash identifier:          ynps82yMEMeK3NvCU4IVfc4IRyH0NMa/tewwZHImW1g=
Subject key identifier:   19:A0:D3:22:EA:FE:D9:F4:B6:31:B2:9A:E7:8F:D3:52:6A:83:94:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290CBBFD315FD9480F24AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32b38995-a3c1-32ec-8fc3-12c8504d691e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     397202
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cb:bf:d3:15:fd:94:80:f2:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=55bb56ba-b318-430f-8723-69f36a467b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:e1:40:28:59:af:bb:82:a2:53:69:a7:c1:
                    0b:be:60:e5:e1:82:32:7e:10:23:1c:2a:b7:24:83:
                    61:cd:98:a5:1f:d5:60:66:4d:95:ee:b3:24:c6:d6:
                    05:d4:25:62:c7:4f:5f:39:18:1a:d2:a2:c8:b2:b0:
                    28:24:5f:c9:1e:05:34:44:8e:a8:90:18:3f:a2:6c:
                    f2:22:e0:b0:ab:2f:b3:3e:24:8d:9d:b3:6c:6b:4a:
                    63:86:dd:5a:6a:fb:5d:3e:28:e8:4f:21:66:70:18:
                    18:82:34:df:d7:cf:ee:c8:65:17:c1:a9:ff:0f:f4:
                    96:e5:17:2c:74:41:40:78:ec:6c:43:50:5f:6f:81:
                    07:92:47:88:c1:b2:be:d7:fd:33:23:1e:a2:92:ac:
                    07:dd:cd:a7:e8:64:1a:67:be:de:65:6c:33:f5:bf:
                    b6:1b:be:a3:5e:38:3c:79:14:77:5c:5c:a6:56:fe:
                    d5:5f:34:f1:cb:bc:7f:39:5f:ca:41:58:c5:d0:dd:
                    6a:ea:07:a9:2e:80:56:8e:5d:d2:77:da:33:a9:65:
                    e2:23:58:02:34:d3:54:55:42:af:8e:d5:8b:d8:d8:
                    1f:82:b2:37:fb:ec:12:22:3c:c4:f7:11:ff:b6:b1:
                    1c:73:c0:3c:27:1d:6e:3a:4a:b2:c7:e9:19:94:86:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:D3:22:EA:FE:D9:F4:B6:31:B2:9A:E7:8F:D3:52:6A:83:94:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32b38995-a3c1-32ec-8fc3-12c8504d691e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:80:e2:e1:2d:84:24:10:2d:18:2f:39:14:45:03:f4:58:dc:
         31:e2:4d:c8:c8:b7:41:04:ff:5b:31:01:0a:4d:6b:21:b3:11:
         cc:73:c0:c6:1a:07:c4:e0:29:0e:d6:86:1a:42:37:72:77:b2:
         9a:46:16:ee:99:9f:72:2d:b3:a4:47:e1:55:6e:4e:c8:71:35:
         09:fd:95:b9:77:98:20:95:be:d3:71:22:e5:85:b8:f7:ad:b0:
         a1:9b:a3:0e:14:90:33:d4:e5:a1:90:28:3a:c1:e8:07:47:d9:
         98:6c:a4:8d:e7:c6:d2:9e:8b:66:13:cf:ca:68:29:6c:d8:2e:
         a9:4a:9a:a1:fe:78:85:8d:ac:ed:bc:3f:b0:fb:da:8c:c1:ea:
         79:6b:3c:22:29:79:c4:e9:75:d3:b0:c1:01:bd:33:4a:bd:8e:
         09:ea:90:fa:c0:ee:40:b6:74:4d:df:5e:3c:7f:2d:1e:5d:d8:
         7a:01:6c:f5:4a:4f:e5:74:40:3c:7e:86:7b:a5:01:5d:31:4b:
         5e:ae:00:c2:75:af:27:61:55:78:d7:e3:98:02:12:ab:b3:52:
         ac:ab:28:04:97:31:ef:b9:8f:6f:11:31:b5:c0:68:25:19:6b:
         eb:69:80:3d:9b:4e:aa:2b:2a:c8:8b:dd:41:d6:79:34:00:29:
         d9:ad:d2:97
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpikMu/0xX9lIDySsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NTViYjU2YmEtYjMxOC00MzBmLTg3MjMtNjlmMzZhNDY3Yjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGDhQChZr7uColNpp8ELvmDl4YIyfhAjHCq3
JINhzZilH9VgZk2V7rMkxtYF1CVix09fORga0qLIsrAoJF/JHgU0RI6okBg/omzy
IuCwqy+zPiSNnbNsa0pjht1aavtdPijoTyFmcBgYgjTf18/uyGUXwan/D/SW5Rcs
dEFAeOxsQ1Bfb4EHkkeIwbK+1/0zIx6ikqwH3c2n6GQaZ77eZWwz9b+2G76jXjg8
eRR3XFymVv7VXzTxy7x/OV/KQVjF0N1q6gepLoBWjl3Sd9ozqWXiI1gCNNNUVUKv
jtWL2NgfgrI3++wSIjzE9xH/trEcc8A8Jx1uOkqyx+kZlIZcdwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBmg0yLq/tn0tjGymueP01Jqg5S7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJiMzg5OTUtYTNjMS0z
MmVjLThmYzMtMTJjODUwNGQ2OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBEgOLhLYQkEC0YLzkURQP0WNwx4k3IyLdBBP9b
MQEKTWshsxHMc8DGGgfE4CkO1oYaQjdyd7KaRhbumZ9yLbOkR+FVbk7IcTUJ/ZW5
d5gglb7TcSLlhbj3rbChm6MOFJAz1OWhkCg6wegHR9mYbKSN58bSnotmE8/KaCls
2C6pSpqh/niFjaztvD+w+9qMwep5azwiKXnE6XXTsMEBvTNKvY4J6pD6wO5AtnRN
3148fy0eXdh6AWz1Sk/ldEA8foZ7pQFdMUtergDCda8nYVV41+OYAhKrs1KsqygE
lzHvuY9vETG1wGglGWvraYA9m06qKyrIi91B1nk0ACnZrdKX
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:46 2025 by rpki-client