Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97c79b9c-cf8d-3946-8ef4-1928bf64ec10.roa
File:                     97c79b9c-cf8d-3946-8ef4-1928bf64ec10.roa (raw, json)
Hash identifier:          8NBsMi9GWLs7xumxEvSmOIpk0GQWu8ckXl83ZUK/kdg=
Subject key identifier:   45:7B:57:2E:06:C8:59:0B:C0:5F:0C:9B:80:E4:EB:C9:E1:C1:D7:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A62908A18878FE53F3F5F0BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97c79b9c-cf8d-3946-8ef4-1928bf64ec10.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396603
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8a:18:87:8f:e5:3f:3f:5f:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=236c0003-d7cc-402d-9014-0807bfbc228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:1b:a4:84:77:cc:56:6d:22:eb:32:bf:3a:
                    91:56:7c:5b:3d:7f:ce:96:fc:53:b6:1e:91:23:e3:
                    64:ae:22:36:ae:0b:6c:b1:05:6a:ab:84:d3:62:b5:
                    bb:e7:43:37:f4:01:98:ed:d1:78:7a:ba:f4:97:33:
                    81:79:6c:7c:ff:37:81:b4:c4:01:dd:59:16:bd:a4:
                    a0:08:55:d7:82:d6:2c:9f:d6:f0:b4:05:ed:57:ad:
                    64:9f:b8:2a:96:8d:80:54:9a:9f:71:ec:03:70:d0:
                    ff:46:fe:e0:03:00:00:1f:85:ff:9f:c3:94:21:90:
                    48:a1:fb:92:4b:23:58:93:5e:04:56:34:c8:33:2e:
                    0b:0b:94:f2:11:2e:cf:e2:6d:ad:ee:2e:7a:68:7f:
                    9e:77:76:ce:1e:f5:ef:6f:fb:f7:ef:7d:f2:d2:15:
                    2c:b9:26:5c:2c:27:a8:cf:47:37:e0:21:e2:9f:c4:
                    1f:2e:82:ea:2e:27:38:7e:5a:59:6e:d5:72:c1:b6:
                    d9:53:9f:f9:a2:c1:f5:76:ad:3b:fd:b8:c0:98:b8:
                    bd:55:76:ab:37:1e:9e:42:ca:83:4f:6b:1e:0b:f2:
                    2d:fd:19:37:bf:b6:a8:b9:ba:c2:3e:d0:87:bb:aa:
                    f5:19:88:bb:fb:77:10:75:e9:7b:6b:12:ef:91:ea:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7B:57:2E:06:C8:59:0B:C0:5F:0C:9B:80:E4:EB:C9:E1:C1:D7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97c79b9c-cf8d-3946-8ef4-1928bf64ec10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5d:2d:6b:f0:0b:e5:46:44:a1:59:98:84:3d:1b:88:c5:15:
         05:d9:27:c7:07:66:e3:0d:a7:0f:30:64:7a:06:d3:e1:69:45:
         07:97:99:70:46:01:93:8f:40:20:6c:53:5e:57:a5:86:83:c6:
         e6:bb:bf:52:6c:45:f8:7d:86:bd:8c:3b:d1:7a:19:d4:f8:98:
         ec:18:aa:b5:aa:8a:37:b6:34:df:67:c4:a7:47:c9:8e:d8:e8:
         74:ca:7c:2c:b4:3f:50:4e:49:0e:cd:b2:ee:48:b8:90:ba:b2:
         f3:22:b0:fb:ea:61:05:fe:7c:f2:3e:55:6e:8d:8f:95:1d:ff:
         e7:00:94:0e:78:11:08:56:c0:57:e6:90:dd:c0:a4:d2:33:3b:
         97:9a:13:d4:04:87:75:da:58:a8:03:ed:79:aa:2e:a3:39:e2:
         31:12:f9:64:01:c6:a2:6e:63:a6:10:4d:db:b3:b1:ed:d0:f5:
         20:b0:e8:95:be:5c:44:37:49:27:f1:c0:4a:53:81:91:2e:c8:
         da:e3:09:0b:e9:6a:b0:78:b8:f6:b3:56:6c:f1:3e:e8:52:d9:
         7a:41:e8:14:7c:80:a3:b7:f7:df:53:7c:62:61:51:cd:df:ce:
         cd:b9:fb:f8:ed:9e:75:85:18:81:df:86:e6:75:c7:ad:ad:58:
         c7:04:45:36
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpikIoYh4/lPz9fC8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MjM2YzAwMDMtZDdjYy00MDJkLTkwMTQtMDgwN2JmYmMyMjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zAbpIR3zFZtIusyvzqRVnxbPX/OlvxTth6R
I+NkriI2rgtssQVqq4TTYrW750M39AGY7dF4err0lzOBeWx8/zeBtMQB3VkWvaSg
CFXXgtYsn9bwtAXtV61kn7gqlo2AVJqfcewDcND/Rv7gAwAAH4X/n8OUIZBIofuS
SyNYk14EVjTIMy4LC5TyES7P4m2t7i56aH+ed3bOHvXvb/v3733y0hUsuSZcLCeo
z0c34CHin8QfLoLqLic4flpZbtVywbbZU5/5osH1dq07/bjAmLi9VXarNx6eQsqD
T2seC/It/Rk3v7aoubrCPtCHu6r1GYi7+3cQdel7axLvkeqqJQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEV7Vy4GyFkLwF8Mm4Dk68nhwdfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTdjNzliOWMtY2Y4ZC0z
OTQ2LThlZjQtMTkyOGJmNjRlYzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCIXS1r8AvlRkShWZiEPRuIxRUF2SfHB2bjDacP
MGR6BtPhaUUHl5lwRgGTj0AgbFNeV6WGg8bmu79SbEX4fYa9jDvRehnU+JjsGKq1
qoo3tjTfZ8SnR8mO2Oh0ynwstD9QTkkOzbLuSLiQurLzIrD76mEF/nzyPlVujY+V
Hf/nAJQOeBEIVsBX5pDdwKTSMzuXmhPUBId12lioA+15qi6jOeIxEvlkAcaibmOm
EE3bs7Ht0PUgsOiVvlxEN0kn8cBKU4GRLsja4wkL6WqweLj2s1Zs8T7oUtl6QegU
fICjt/ffU3xiYVHN387Nufv47Z51hRiB34bmdcetrVjHBEU2
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:11:38 2025 by rpki-client