Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/766a8627-d98f-33d5-ab2a-8059d4924ae3.roa
File:                     766a8627-d98f-33d5-ab2a-8059d4924ae3.roa (raw, json)
Hash identifier:          NHl3kFd7Xm8iYD4qe7KOKr7LrHY53OlFiwwvyk0LdH0=
Subject key identifier:   07:9C:F6:4B:7D:99:8C:8C:82:9E:18:3C:B4:A2:2E:E1:43:FB:29:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFB26778BDC11694ACE4D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/766a8627-d98f-33d5-ab2a-8059d4924ae3.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     396606
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:26:77:8b:dc:11:69:4a:ce:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=3a92cdf8-8fdb-4ea3-8f20-0990e451b169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:52:16:3c:71:c0:a6:dd:ec:4d:ab:c3:06:
                    76:18:5c:a3:ae:c4:2c:f3:b6:a9:da:55:4c:eb:1a:
                    74:1a:21:e6:86:10:77:52:5d:1d:64:a2:64:ba:7b:
                    a1:cc:ab:1c:68:09:b5:61:4f:58:68:b7:f7:7e:b1:
                    3f:0f:e0:e0:1e:9b:ef:8e:aa:0d:f2:e4:b7:24:58:
                    51:90:2b:06:3c:f3:9c:92:8b:0f:0f:91:4d:cb:b7:
                    cf:51:19:17:6b:ab:e4:ba:fd:7f:9c:e3:50:99:2a:
                    47:8d:60:2b:e4:bb:87:b5:93:59:cf:59:19:ad:25:
                    3b:45:17:b8:5c:e7:8b:de:11:8d:00:50:82:bd:f2:
                    bf:2e:ed:4c:ee:47:09:14:eb:95:fa:4d:31:f5:77:
                    a5:07:0c:c2:7c:7e:95:d0:24:9f:57:d3:f4:eb:eb:
                    03:1c:b8:eb:c0:42:17:71:fe:f1:06:51:81:42:f9:
                    e3:74:38:d3:e9:bc:7c:32:01:47:a3:03:7d:97:de:
                    0b:6f:5b:85:c7:d0:58:96:18:75:55:17:67:dd:49:
                    1a:73:c5:1e:9d:7b:5e:1d:64:69:11:1e:9e:2f:26:
                    45:ac:90:49:f6:67:ce:f0:fa:22:51:2e:e5:bf:45:
                    4e:cd:b3:5f:46:9e:a3:c9:01:76:ed:41:ac:0b:16:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9C:F6:4B:7D:99:8C:8C:82:9E:18:3C:B4:A2:2E:E1:43:FB:29:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/766a8627-d98f-33d5-ab2a-8059d4924ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:57:c1:ed:be:c0:30:1f:73:6c:b7:ce:87:56:31:fc:e5:3b:
         f6:90:e5:5b:2a:c4:a0:f3:62:5c:ec:95:da:86:38:4f:a6:3d:
         6f:a0:1c:7b:fa:91:d1:3e:f4:ad:1a:da:42:bd:4d:dc:54:9a:
         fa:84:a6:4b:39:1b:75:75:8b:8c:2f:ee:ac:d7:e5:9b:c1:49:
         f6:6a:ba:23:21:a0:de:6f:aa:01:f2:69:ab:66:5d:b3:00:4b:
         ab:9f:a7:e8:48:51:a4:22:b7:41:13:4b:ef:55:17:87:4a:7a:
         07:35:65:96:59:e5:0b:55:25:24:5b:73:71:a9:d9:e1:b6:a8:
         87:7e:a3:de:82:70:c9:1d:5f:47:a2:19:dc:36:21:f2:f4:fb:
         72:1f:30:db:29:2d:6b:56:d3:98:cc:87:eb:cd:94:ca:fb:ea:
         94:70:bc:a1:7e:4b:88:99:d3:c6:67:bf:b7:75:56:bc:b1:c3:
         dc:62:85:25:06:f9:ac:f0:fa:89:42:ae:e0:2b:58:ca:04:fb:
         ba:3e:cf:d8:3b:47:63:d0:94:78:93:7e:07:5f:95:fd:7b:69:
         41:ba:8a:1c:ef:a5:ec:43:d4:30:82:5a:d3:c3:ac:ea:ff:00:
         37:80:50:0c:ae:1e:9a:c4:fa:5b:f9:0e:75:6a:c0:7c:7c:04:
         b2:81:3d:cf
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpc+yZ3i9wRaUrOTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
M2E5MmNkZjgtOGZkYi00ZWEzLThmMjAtMDk5MGU0NTFiMTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8ZSFjxxwKbd7E2rwwZ2GFyjrsQs87ap2lVM
6xp0GiHmhhB3Ul0dZKJkunuhzKscaAm1YU9YaLf3frE/D+DgHpvvjqoN8uS3JFhR
kCsGPPOckosPD5FNy7fPURkXa6vkuv1/nONQmSpHjWAr5LuHtZNZz1kZrSU7RRe4
XOeL3hGNAFCCvfK/Lu1M7kcJFOuV+k0x9XelBwzCfH6V0CSfV9P06+sDHLjrwEIX
cf7xBlGBQvnjdDjT6bx8MgFHowN9l94Lb1uFx9BYlhh1VRdn3Ukac8UenXteHWRp
ER6eLyZFrJBJ9mfO8PoiUS7lv0VOzbNfRp6jyQF27UGsCxYbvwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAec9kt9mYyMgp4YPLSiLuFD+ylBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzY2YTg2MjctZDk4Zi0z
M2Q1LWFiMmEtODA1OWQ0OTI0YWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAWV8HtvsAwH3Nst86HVjH85Tv2kOVbKsSg82Jc
7JXahjhPpj1voBx7+pHRPvStGtpCvU3cVJr6hKZLORt1dYuML+6s1+WbwUn2aroj
IaDeb6oB8mmrZl2zAEurn6foSFGkIrdBE0vvVReHSnoHNWWWWeULVSUkW3Nxqdnh
tqiHfqPegnDJHV9HohncNiHy9PtyHzDbKS1rVtOYzIfrzZTK++qUcLyhfkuImdPG
Z7+3dVa8scPcYoUlBvms8PqJQq7gK1jKBPu6Ps/YO0dj0JR4k34HX5X9e2lBuooc
76XsQ9QwglrTw6zq/wA3gFAMrh6axPpb+Q51asB8fASygT3P
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:13:15 2025 by rpki-client