Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3da728f0-1645-3bbf-8faf-ded106d4509d.roa
File:                     3da728f0-1645-3bbf-8faf-ded106d4509d.roa (raw, json)
Hash identifier:          Iw3UD6YZG7MGlF2fHhdMOi03bZW9g+bodW+DyDcm5Oo=
Subject key identifier:   7C:E5:B1:19:AB:CA:45:C2:03:FD:AE:4B:37:EC:EE:23:CE:E3:87:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A62909C7E49B700020C05D640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3da728f0-1645-3bbf-8faf-ded106d4509d.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     36618
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9c:7e:49:b7:00:02:0c:05:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=599dcd66-b67a-4629-b047-25d02d8dcd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:fb:bc:bf:35:36:27:d6:0f:5a:3c:01:b7:
                    5e:34:ca:be:0f:e8:2a:0e:00:83:48:70:a8:07:59:
                    ce:a8:60:f3:a3:68:7d:5d:3c:4f:32:42:0a:4a:2c:
                    5c:88:68:fd:ef:b7:4c:0c:ac:25:44:4e:49:c1:21:
                    8e:52:d9:05:24:28:71:be:32:9d:26:8a:86:96:cd:
                    b2:9b:09:dc:5c:47:83:18:e7:f0:f9:86:36:1b:1f:
                    73:3f:c5:1a:a3:d7:5d:b8:7b:71:c2:41:98:b7:83:
                    ef:41:2c:cc:e8:9c:06:8e:9a:73:d2:ca:d0:ec:4a:
                    ce:a1:36:38:93:3f:9d:4a:f9:cf:64:bb:f2:a6:19:
                    ae:aa:34:d1:61:a7:e2:40:92:da:69:2a:a3:3c:21:
                    76:05:24:a0:5f:5f:e0:35:b9:65:07:30:50:3d:d8:
                    d4:6c:39:17:8d:df:57:d9:50:23:bf:10:0b:2a:00:
                    ab:64:c4:37:2d:a8:d5:b0:0f:09:cb:6f:99:98:72:
                    74:6c:ab:66:cf:e0:ff:dd:3b:af:cf:cd:96:06:91:
                    21:0d:b8:05:c3:3e:22:e9:29:2c:e4:45:31:ed:ff:
                    32:62:d1:8a:24:fe:88:ef:46:6d:cb:b6:81:40:8f:
                    38:f0:4b:3c:2a:f1:0e:85:b2:8e:ac:24:1c:0e:5f:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:B1:19:AB:CA:45:C2:03:FD:AE:4B:37:EC:EE:23:CE:E3:87:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3da728f0-1645-3bbf-8faf-ded106d4509d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c8:b5:35:31:52:c0:6d:3d:6a:eb:84:cd:5e:02:1f:98:cd:
         c2:8c:e2:20:14:75:be:78:91:3c:9f:33:71:b2:3e:14:aa:bd:
         b1:04:93:46:85:c3:4d:a6:16:92:bf:7e:88:58:0a:01:4e:df:
         d5:7a:fd:10:a0:9b:ad:61:bc:2c:a8:e0:17:c1:50:fb:1c:90:
         9c:d8:9b:b0:2d:d9:f8:b8:f8:dc:75:42:19:f5:c9:c4:58:d9:
         7a:10:f2:ad:cf:ff:57:35:1d:97:9b:f2:9d:c7:0f:ad:cc:0f:
         45:91:87:69:d6:3b:71:b4:74:27:00:6b:d7:1e:53:20:b7:5a:
         d8:06:34:2c:6b:53:ae:9d:59:b5:4e:bd:11:d5:6a:03:f4:2e:
         30:af:e2:35:3b:29:83:e5:46:0e:d6:0a:bc:ae:fe:35:5f:c2:
         d9:0b:74:c1:32:54:cd:d8:3e:80:4b:8d:95:a5:54:33:70:c8:
         34:f4:20:12:18:59:14:32:ae:05:4d:3a:5f:2a:67:ed:79:80:
         6e:48:33:de:30:2c:a4:7d:1f:25:2c:42:62:e6:d7:25:34:f9:
         34:44:f8:e0:9e:4e:c1:09:f0:69:18:4c:5a:24:45:4f:0c:1d:
         60:d1:ab:c3:35:4b:47:db:9a:db:a4:d0:01:24:82:e3:a7:c5:
         83:12:73:9f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpikJx+SbcAAgwF1kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NTk5ZGNkNjYtYjY3YS00NjI5LWIwNDctMjVkMDJkOGRjZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiL7vL81NifWD1o8AbdeNMq+D+gqDgCDSHCo
B1nOqGDzo2h9XTxPMkIKSixciGj977dMDKwlRE5JwSGOUtkFJChxvjKdJoqGls2y
mwncXEeDGOfw+YY2Gx9zP8Uao9dduHtxwkGYt4PvQSzM6JwGjppz0srQ7ErOoTY4
kz+dSvnPZLvyphmuqjTRYafiQJLaaSqjPCF2BSSgX1/gNbllBzBQPdjUbDkXjd9X
2VAjvxALKgCrZMQ3LajVsA8Jy2+ZmHJ0bKtmz+D/3Tuvz82WBpEhDbgFwz4i6Sks
5EUx7f8yYtGKJP6I70Zty7aBQI848Es8KvEOhbKOrCQcDl/mvQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHzlsRmrykXCA/2uSzfs7iPO44dIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RhNzI4ZjAtMTY0NS0z
YmJmLThmYWYtZGVkMTA2ZDQ1MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAPyLU1MVLAbT1q64TNXgIfmM3CjOIgFHW+eJE8
nzNxsj4Uqr2xBJNGhcNNphaSv36IWAoBTt/Vev0QoJutYbwsqOAXwVD7HJCc2Juw
Ldn4uPjcdUIZ9cnEWNl6EPKtz/9XNR2Xm/Kdxw+tzA9FkYdp1jtxtHQnAGvXHlMg
t1rYBjQsa1OunVm1Tr0R1WoD9C4wr+I1OymD5UYO1gq8rv41X8LZC3TBMlTN2D6A
S42VpVQzcMg09CASGFkUMq4FTTpfKmfteYBuSDPeMCykfR8lLEJi5tclNPk0RPjg
nk7BCfBpGExaJEVPDB1g0avDNUtH25rbpNABJILjp8WDEnOf
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:30 2025 by rpki-client