Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa
File:                     0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa (raw, json)
Hash identifier:          AV5GvJlhNJVvJnjyxX40T825P8qGIoyTdckgVOafeJc=
Subject key identifier:   F2:FE:AF:87:46:95:CF:4F:C9:B4:93:76:21:77:A2:F7:D9:1D:AE:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1FA68A37B480F3DF3400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396578
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1f:a6:8a:37:b4:80:f3:df:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=146b9925-2338-41f8-a724-a1925a7a8b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:9f:fe:de:bc:ab:c3:1e:27:bf:f8:70:72:
                    c0:6a:4e:66:44:ad:74:cf:ec:e5:ae:fb:fc:36:58:
                    5a:bf:24:75:55:a8:e0:c7:8e:92:23:52:4c:7a:39:
                    df:83:d2:cc:21:dc:2f:03:31:b4:59:f4:3e:08:93:
                    14:68:be:6f:8e:ff:c9:51:9d:66:54:9a:e8:41:fe:
                    34:22:00:d9:c5:17:34:73:b9:a3:85:62:db:a4:82:
                    69:78:8b:ad:4a:e5:ce:2c:3c:be:2f:49:78:23:bc:
                    56:35:a6:65:68:2d:16:8c:39:52:f1:74:74:7e:77:
                    2c:7d:8e:d0:52:ef:dc:67:d2:d7:97:2f:ee:15:a4:
                    23:9f:d4:72:76:2e:2b:c4:34:38:46:cb:d9:bb:71:
                    b9:9d:d5:db:f2:f1:f8:7d:d6:9a:56:ba:48:48:fd:
                    0d:a1:a7:43:f5:62:12:0d:99:e3:be:2f:84:d2:46:
                    c8:64:1b:56:f4:f2:b6:64:0f:73:74:03:8c:10:f4:
                    87:2c:dc:09:f0:fe:34:07:58:ba:11:36:53:0e:c4:
                    65:8b:79:9f:4f:db:85:fd:5f:91:81:51:f6:b0:d3:
                    b8:53:70:9d:ce:85:b1:d0:b6:31:2f:33:56:37:7c:
                    bf:5c:a9:ce:8c:62:24:27:63:74:54:b4:9b:d3:7c:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:AF:87:46:95:CF:4F:C9:B4:93:76:21:77:A2:F7:D9:1D:AE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b6e03e3-435e-3cd2-87c0-71be4a395e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:16:68:7b:06:a0:29:fb:11:64:76:95:d4:cb:24:be:f1:54:
         88:f9:f7:c7:13:47:28:96:c2:d4:57:77:64:23:29:d7:3d:f2:
         82:bb:e2:ab:bd:5d:c0:e8:2a:5b:c6:ca:45:a8:13:a8:52:c1:
         75:f5:1c:ed:94:f8:2f:cf:27:16:f4:76:c4:4f:ce:e0:c6:bb:
         92:c4:20:9d:9d:4f:0a:0d:f7:27:d1:fc:c6:73:a7:31:49:fd:
         8f:fc:30:da:19:59:bd:98:58:1a:56:ae:aa:ea:13:03:04:3f:
         ec:af:29:a5:33:6d:91:f6:2d:3b:82:e0:f3:5d:09:41:c4:08:
         12:b4:fb:58:9c:99:f1:9f:e6:5d:2b:8b:df:82:a2:4f:b4:46:
         68:d0:47:32:b1:9b:ad:98:07:54:ef:c9:6c:7d:cd:04:7b:dc:
         f1:bd:cc:c7:65:f4:98:63:37:32:26:83:dc:45:ad:9a:8a:ec:
         c8:71:ab:77:de:1f:e6:6d:1a:b1:48:5e:03:a1:fd:b1:69:72:
         7e:11:3d:5e:98:ae:b2:7d:be:3f:9f:82:a1:4e:4c:ac:9e:a8:
         69:f1:a1:09:9b:85:03:f2:91:b4:12:d7:3d:8d:08:74:52:5f:
         29:b4:3a:72:c2:ca:26:77:5c:d3:bd:2e:37:3e:71:d3:13:1c:
         64:1a:c7:91
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2x+mije0gPPfNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MTQ2Yjk5MjUtMjMzOC00MWY4LWE3MjQtYTE5MjVhN2E4YjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Kf/t68q8MeJ7/4cHLAak5mRK10z+zlrvv8
NlhavyR1Vajgx46SI1JMejnfg9LMIdwvAzG0WfQ+CJMUaL5vjv/JUZ1mVJroQf40
IgDZxRc0c7mjhWLbpIJpeIutSuXOLDy+L0l4I7xWNaZlaC0WjDlS8XR0fncsfY7Q
Uu/cZ9LXly/uFaQjn9Rydi4rxDQ4RsvZu3G5ndXb8vH4fdaaVrpISP0NoadD9WIS
DZnjvi+E0kbIZBtW9PK2ZA9zdAOMEPSHLNwJ8P40B1i6ETZTDsRli3mfT9uF/V+R
gVH2sNO4U3CdzoWx0LYxLzNWN3y/XKnOjGIkJ2N0VLSb03yoKwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPL+r4dGlc9PybSTdiF3ovfZHa72MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI2ZTAzZTMtNDM1ZS0z
Y2QyLTg3YzAtNzFiZTRhMzk1ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBCFmh7BqAp+xFkdpXUyyS+8VSI+ffHE0colsLU
V3dkIynXPfKCu+KrvV3A6CpbxspFqBOoUsF19RztlPgvzycW9HbET87gxruSxCCd
nU8KDfcn0fzGc6cxSf2P/DDaGVm9mFgaVq6q6hMDBD/srymlM22R9i07guDzXQlB
xAgStPtYnJnxn+ZdK4vfgqJPtEZo0EcysZutmAdU78lsfc0Ee9zxvczHZfSYYzcy
JoPcRa2aiuzIcat33h/mbRqxSF4Dof2xaXJ+ET1emK6yfb4/n4KhTkysnqhp8aEJ
m4UD8pG0Etc9jQh0Ul8ptDpywsomd1zTvS43PnHTExxkGseR
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:31:58 2025 by rpki-client