Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07f7986b-6ce2-3795-87cd-d7c367c5da46.roa
File:                     07f7986b-6ce2-3795-87cd-d7c367c5da46.roa (raw, json)
Hash identifier:          HT4GpOSjQGfwMIhvY3HEhekHCSuJPxmDe/bNvG0SvKU=
Subject key identifier:   EA:B8:97:43:E6:F7:98:A3:FF:FA:B1:0F:EF:01:7F:20:17:5D:DE:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0F29B3FFBA64F9993340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07f7986b-6ce2-3795-87cd-d7c367c5da46.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396827
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0f:29:b3:ff:ba:64:f9:99:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=8fe1623a-dcf6-44af-ad90-f476f3f71b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:c7:b6:a5:5f:c7:d4:16:1e:7d:bb:30:c0:
                    ce:83:2b:4c:f4:f1:0b:d8:35:b8:e3:5d:4a:12:08:
                    7a:d8:01:1d:aa:2c:e8:86:28:d4:cd:d4:d9:4d:1c:
                    ac:6a:ae:07:e9:99:b4:13:ae:35:70:29:29:4c:b4:
                    0b:e6:47:cb:2a:b7:85:3b:98:c9:46:b4:f5:47:c8:
                    08:73:05:4b:06:1e:3e:b6:b9:59:76:db:f9:e6:5a:
                    3e:9a:74:9d:94:32:65:e6:2f:80:f6:75:d1:fa:7f:
                    22:d0:b7:5c:43:84:de:90:62:5e:2a:0d:b9:9b:52:
                    f8:06:df:e7:97:da:63:60:56:d4:7e:2b:1c:fa:25:
                    f8:5d:c2:6a:59:bf:1d:56:a2:e6:0f:c5:df:14:c3:
                    60:1e:04:30:6f:25:9e:6e:51:4e:3d:85:da:a9:28:
                    12:45:4e:f2:93:49:f3:63:17:47:c8:14:68:c7:a7:
                    08:86:06:cd:11:4e:d5:85:20:ec:b9:3c:60:b8:b3:
                    6c:16:cf:ff:a9:b7:67:ed:db:ee:a7:05:52:7b:66:
                    99:23:7d:42:1e:62:0b:da:e7:40:ae:89:02:8a:72:
                    e6:4a:1c:26:fd:a1:4c:e2:d0:9d:33:b1:f2:89:35:
                    9d:f3:ab:c9:05:ee:5a:35:46:c8:84:e5:f3:db:13:
                    a0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:97:43:E6:F7:98:A3:FF:FA:B1:0F:EF:01:7F:20:17:5D:DE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07f7986b-6ce2-3795-87cd-d7c367c5da46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:81:67:2a:69:94:9d:ac:a1:95:05:12:73:7f:c9:ee:61:
         62:85:c6:07:f2:6c:10:68:ff:b3:57:a0:0e:32:a5:7e:ed:e1:
         f4:52:69:38:e4:aa:06:c1:d9:44:c8:1d:54:78:80:13:17:53:
         4e:36:5c:c8:22:d3:81:db:60:67:bd:b5:c7:a1:48:1e:cf:50:
         35:dd:23:01:62:3b:4c:2e:aa:69:d0:12:53:e1:e3:a1:1b:d5:
         bd:ad:77:2a:0c:b8:f9:2a:a4:2d:cd:dc:98:9a:9c:db:ad:7e:
         2e:8c:cf:88:a8:ca:5b:9f:31:2e:af:51:37:50:08:9b:bf:de:
         02:dc:53:cc:09:5b:31:21:54:ea:e9:ba:78:79:b8:76:c1:ce:
         e7:5a:6e:d4:d7:e5:86:3f:a2:3f:91:7c:c7:6c:ed:34:56:e6:
         95:7c:0b:52:bc:9f:79:e3:9f:be:f2:1b:c4:64:ad:44:b5:85:
         5e:5b:ce:e8:28:cf:bd:84:55:cd:51:03:96:3a:42:f5:79:4e:
         94:9e:ff:ed:58:9e:dc:65:b9:61:36:34:66:5f:6a:1a:06:80:
         66:61:f2:59:58:d0:d2:d8:df:cf:92:c9:f3:e0:b3:39:b4:06:
         c3:b3:d6:54:3e:65:ad:b7:7c:44:92:c9:69:dc:43:4a:99:16:
         a0:97:96:8f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2w8ps/+6ZPmZM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
OGZlMTYyM2EtZGNmNi00NGFmLWFkOTAtZjQ3NmYzZjcxYjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCLHtqVfx9QWHn27MMDOgytM9PEL2DW4411K
Egh62AEdqizohijUzdTZTRysaq4H6Zm0E641cCkpTLQL5kfLKreFO5jJRrT1R8gI
cwVLBh4+trlZdtv55lo+mnSdlDJl5i+A9nXR+n8i0LdcQ4TekGJeKg25m1L4Bt/n
l9pjYFbUfisc+iX4XcJqWb8dVqLmD8XfFMNgHgQwbyWeblFOPYXaqSgSRU7yk0nz
YxdHyBRox6cIhgbNEU7VhSDsuTxguLNsFs//qbdn7dvupwVSe2aZI31CHmIL2udA
rokCinLmShwm/aFM4tCdM7HyiTWd86vJBe5aNUbIhOXz2xOgWQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOq4l0Pm95ij//qxD+8BfyAXXd54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDdmNzk4NmItNmNlMi0z
Nzk1LTg3Y2QtZDdjMzY3YzVkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYj4FnKmmUnayhlQUSc3/J7mFihcYH8mwQaP+z
V6AOMqV+7eH0Umk45KoGwdlEyB1UeIATF1NONlzIItOB22BnvbXHoUgez1A13SMB
YjtMLqpp0BJT4eOhG9W9rXcqDLj5KqQtzdyYmpzbrX4ujM+IqMpbnzEur1E3UAib
v94C3FPMCVsxIVTq6bp4ebh2wc7nWm7U1+WGP6I/kXzHbO00VuaVfAtSvJ9545++
8hvEZK1EtYVeW87oKM+9hFXNUQOWOkL1eU6Unv/tWJ7cZblhNjRmX2oaBoBmYfJZ
WNDS2N/Pksnz4LM5tAbDs9ZUPmWtt3xEkslp3ENKmRagl5aP
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:34 2025 by rpki-client