Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1d6eb1b-0845-311f-ae4c-83ef212f2192.roa
File:                     c1d6eb1b-0845-311f-ae4c-83ef212f2192.roa (raw, json)
Hash identifier:          dJyntDEXE5pwdHvyos5XRzlLczCX79TZddLZVnE8rFw=
Subject key identifier:   97:74:B7:F2:3A:70:0E:77:13:90:58:EF:08:FF:67:4D:AC:BD:5C:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290CD36FC218E7A81E02600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1d6eb1b-0845-311f-ae4c-83ef212f2192.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396604
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cd:36:fc:21:8e:7a:81:e0:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=c5b2dbeb-7b69-4b8c-8a4d-f3db3abd45f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:13:49:a9:1f:25:ff:ea:19:76:f5:52:71:
                    4a:42:3e:8a:62:c6:c2:97:32:cc:89:6a:ba:02:2f:
                    cb:02:64:f6:a7:1f:81:86:eb:cd:da:4d:94:c7:9b:
                    8a:b9:b3:50:89:f6:3c:ad:fd:1a:04:1f:83:80:98:
                    36:a5:ae:a2:bc:60:7a:ff:ae:ef:68:61:bf:79:3e:
                    17:4c:85:1d:b8:10:be:19:af:46:d4:c8:f0:90:43:
                    6b:e9:4d:ab:69:ab:3c:53:d7:ea:54:fe:ad:30:9a:
                    f0:05:bc:b0:16:b3:0b:25:57:f1:08:6c:ed:a3:97:
                    ff:f6:06:85:f7:55:c2:59:a1:00:ec:4f:17:71:8e:
                    c7:ab:b0:66:95:57:39:ef:19:94:90:f8:6a:22:ef:
                    f4:94:d2:29:87:ff:48:b7:a1:1d:40:33:ea:16:18:
                    30:94:65:79:56:b9:95:e2:f6:2c:0d:75:52:df:87:
                    87:45:1a:f3:8f:f4:28:d4:dc:b5:5a:4b:73:fe:c1:
                    0c:57:3e:b8:b2:e3:7d:f5:78:97:84:15:99:5b:f1:
                    a8:0a:24:58:3e:17:48:b4:a4:81:d2:8e:ed:46:58:
                    03:47:60:b5:7c:71:71:dc:80:1f:b1:d9:7c:85:a3:
                    66:12:49:99:f5:db:96:86:a3:d1:d9:9a:2f:1b:9a:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:B7:F2:3A:70:0E:77:13:90:58:EF:08:FF:67:4D:AC:BD:5C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1d6eb1b-0845-311f-ae4c-83ef212f2192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:82:e9:22:bb:9d:53:1a:ed:8f:5b:0b:06:05:db:0c:49:
         90:9e:54:fd:fc:ea:c6:e6:e0:a8:df:39:9d:66:e7:12:6e:4f:
         2d:5f:f5:0c:ea:f7:2f:4a:d4:cf:75:6b:fb:3e:90:86:ed:e9:
         ad:08:15:79:4e:ba:cb:2f:1f:43:1d:60:39:67:a1:c8:0a:c6:
         ee:6e:bd:b7:60:f4:21:c5:50:5b:2a:ba:e4:46:34:43:ca:2d:
         ff:2f:6b:7d:1a:33:44:93:61:51:85:59:40:09:39:0a:46:4a:
         4a:a8:63:e4:6a:fd:07:07:29:c2:56:e8:c0:13:37:5e:44:c2:
         df:57:a6:af:79:e8:0e:3d:78:1c:fd:a7:db:95:c2:dc:94:3c:
         53:66:5f:92:98:44:1c:c8:36:c7:b7:fa:93:43:ed:63:b7:81:
         37:63:ff:88:37:87:91:10:e1:e5:7e:48:bd:90:05:09:4e:44:
         4a:35:22:f6:ad:6e:9a:ba:85:da:dc:97:99:5f:6d:70:80:46:
         ac:35:1f:4e:ac:3c:8d:7b:02:75:fa:1e:13:2b:4f:ac:a8:23:
         ad:f3:33:62:5d:56:a5:c0:aa:8b:1f:70:ee:58:c4:b2:2f:ee:
         99:29:0c:ad:05:d6:37:39:f3:eb:5d:5e:80:ce:51:04:4b:5a:
         98:b3:13:34
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpikM02/CGOeoHgJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
YzViMmRiZWItN2I2OS00YjhjLThhNGQtZjNkYjNhYmQ0NWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUTSakfJf/qGXb1UnFKQj6KYsbClzLMiWq6
Ai/LAmT2px+BhuvN2k2Ux5uKubNQifY8rf0aBB+DgJg2pa6ivGB6/67vaGG/eT4X
TIUduBC+Ga9G1MjwkENr6U2raas8U9fqVP6tMJrwBbywFrMLJVfxCGzto5f/9gaF
91XCWaEA7E8XcY7Hq7BmlVc57xmUkPhqIu/0lNIph/9It6EdQDPqFhgwlGV5VrmV
4vYsDXVS34eHRRrzj/Qo1Ny1Wktz/sEMVz64suN99XiXhBWZW/GoCiRYPhdItKSB
0o7tRlgDR2C1fHFx3IAfsdl8haNmEkmZ9duWhqPR2ZovG5qqKwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJd0t/I6cA53E5BY7wj/Z02svVwHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFkNmViMWItMDg0NS0z
MTFmLWFlNGMtODNlZjIxMmYyMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAO/YLpIrudUxrtj1sLBgXbDEmQnlT9/OrG5uCo
3zmdZucSbk8tX/UM6vcvStTPdWv7PpCG7emtCBV5TrrLLx9DHWA5Z6HICsbubr23
YPQhxVBbKrrkRjRDyi3/L2t9GjNEk2FRhVlACTkKRkpKqGPkav0HBynCVujAEzde
RMLfV6aveegOPXgc/afblcLclDxTZl+SmEQcyDbHt/qTQ+1jt4E3Y/+IN4eREOHl
fki9kAUJTkRKNSL2rW6auoXa3JeZX21wgEasNR9OrDyNewJ1+h4TK0+sqCOt8zNi
XValwKqLH3DuWMSyL+6ZKQytBdY3OfPrXV6AzlEES1qYsxM0
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:36 2025 by rpki-client