Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa
File:                     9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa (raw, json)
Hash identifier:          dtjzSDvgzs+RbR7xnsAo/BnU1k8l2pSK1+uBE6gVGkc=
Subject key identifier:   74:A4:AC:90:5D:3F:AE:45:AC:0B:C3:3F:B5:FD:BC:12:47:B4:C1:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307CBDE811F4857D2C7B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396580
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7c:bd:e8:11:f4:85:7d:2c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=df526282-2ab2-4d2e-98e3-6f5fa3d0ab11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:bc:d8:94:f8:ef:d2:51:22:c8:97:67:2b:
                    7f:c0:15:21:9b:22:13:cb:16:ce:2c:f3:e8:f5:44:
                    ee:fc:d2:db:5d:24:4f:9b:22:ce:19:e1:94:8e:da:
                    29:2b:a4:b9:0f:69:a1:b0:36:e5:b6:6c:37:7d:2c:
                    49:5a:07:7e:11:c4:3a:dd:0d:50:7b:58:71:82:ca:
                    8f:ba:8c:3a:41:32:4d:ef:56:0d:fe:8e:99:28:32:
                    fe:87:13:81:6b:d8:b5:3d:b7:dd:14:05:13:a5:d1:
                    aa:e2:bb:e5:18:46:da:e5:59:73:28:cc:67:64:50:
                    ed:5b:55:72:82:f9:ff:e5:d7:c4:66:df:d2:77:29:
                    9b:24:68:85:06:2a:db:19:78:bb:d1:02:46:b7:0f:
                    c6:a0:e3:71:11:bc:fa:5a:ae:51:48:85:09:20:47:
                    72:5c:96:ba:db:26:ae:1a:e4:13:55:0b:bd:0f:88:
                    e0:cf:a0:10:c8:e5:28:9d:bc:cd:71:b7:7f:20:9f:
                    8f:98:b3:15:42:d1:96:3f:05:00:bf:ed:c5:c9:ee:
                    70:34:54:df:89:57:ec:ea:7f:a4:7b:cf:75:5b:d7:
                    af:fb:1d:66:07:ba:81:4e:6b:b3:1f:04:b5:55:82:
                    53:1d:32:df:3a:cf:8c:00:12:3b:b6:49:ee:c9:b5:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A4:AC:90:5D:3F:AE:45:AC:0B:C3:3F:B5:FD:BC:12:47:B4:C1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9594f358-7f5c-3593-83f6-5fa15e1f6d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:64:4a:96:ad:49:18:ac:ea:55:e6:ab:92:dc:5c:7b:d0:
         8f:fa:17:08:d4:26:00:74:e8:4b:ff:1d:4e:b9:d4:8d:23:71:
         f3:b1:c2:0c:0c:31:62:71:48:0a:f6:aa:75:03:8f:01:5c:17:
         65:68:52:62:a0:6e:40:dc:f1:81:bd:3e:13:69:04:be:99:7f:
         34:94:6a:f9:4c:c5:fa:14:e3:53:4b:a5:f8:c2:a8:71:90:b5:
         46:68:8c:ce:fa:c1:d6:68:fa:94:22:d6:54:84:57:c9:27:f0:
         a5:8d:81:05:11:39:a7:a6:c6:65:18:47:00:63:9b:b2:20:c6:
         bb:c4:0f:c2:ab:a8:f3:4a:06:e5:38:4d:e2:cb:ca:e8:52:23:
         34:44:da:33:00:6c:d7:f9:69:40:13:8a:9a:45:6e:58:97:2a:
         c8:d0:38:9d:a1:0a:5a:2a:04:be:65:8c:92:28:db:0d:fe:46:
         53:80:a0:cd:54:7a:05:fb:12:70:92:95:1b:11:73:87:3e:c1:
         84:1c:96:3e:b6:60:39:bd:84:ce:7a:68:12:1e:5d:b9:69:95:
         76:32:74:ab:53:22:d0:fa:7a:0e:00:6a:1b:38:06:2b:22:2a:
         a9:20:b3:ce:12:38:49:2a:47:18:ab:9e:ad:3a:b8:0d:d4:36:
         30:2a:1e:b0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpaMHy96BH0hX0sewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZGY1MjYyODItMmFiMi00ZDJlLTk4ZTMtNmY1ZmEzZDBhYjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDG82JT479JRIsiXZyt/wBUhmyITyxbOLPPo
9UTu/NLbXSRPmyLOGeGUjtopK6S5D2mhsDbltmw3fSxJWgd+EcQ63Q1Qe1hxgsqP
uow6QTJN71YN/o6ZKDL+hxOBa9i1PbfdFAUTpdGq4rvlGEba5VlzKMxnZFDtW1Vy
gvn/5dfEZt/SdymbJGiFBirbGXi70QJGtw/GoONxEbz6Wq5RSIUJIEdyXJa62yau
GuQTVQu9D4jgz6AQyOUonbzNcbd/IJ+PmLMVQtGWPwUAv+3Fye5wNFTfiVfs6n+k
e891W9ev+x1mB7qBTmuzHwS1VYJTHTLfOs+MABI7tknuybV4XQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHSkrJBdP65FrAvDP7X9vBJHtMFUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU5NGYzNTgtN2Y1Yy0z
NTkzLTgzZjYtNWZhMTVlMWY2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA38GRKlq1JGKzqVearktxce9CP+hcI1CYAdOhL
/x1OudSNI3HzscIMDDFicUgK9qp1A48BXBdlaFJioG5A3PGBvT4TaQS+mX80lGr5
TMX6FONTS6X4wqhxkLVGaIzO+sHWaPqUItZUhFfJJ/CljYEFETmnpsZlGEcAY5uy
IMa7xA/Cq6jzSgblOE3iy8roUiM0RNozAGzX+WlAE4qaRW5YlyrI0DidoQpaKgS+
ZYySKNsN/kZTgKDNVHoF+xJwkpUbEXOHPsGEHJY+tmA5vYTOemgSHl25aZV2MnSr
UyLQ+noOAGobOAYrIiqpILPOEjhJKkcYq56tOrgN1DYwKh6w
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:21:20 2025 by rpki-client