Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d22f878-4e63-3d46-8b31-b357287c9884.roa
File:                     1d22f878-4e63-3d46-8b31-b357287c9884.roa (raw, json)
Hash identifier:          SpGlRohQHyNCe1QfVizV05LS7cilroyBnRBGSzjjd8c=
Subject key identifier:   9B:AF:D1:F4:54:34:A5:C4:1B:8F:61:BC:9F:A8:46:DB:59:C3:89:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E8FB5D606ECDA98411A8E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d22f878-4e63-3d46-8b31-b357287c9884.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     10515
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:8f:b5:d6:06:ec:da:98:41:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=e0a134b0-ee8f-4444-a183-7d0de3a6d9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:3b:9f:60:12:82:f4:12:c1:a9:0d:17:51:
                    d7:f5:b4:b8:e8:d2:8c:92:5f:e6:2e:0a:1b:d0:88:
                    d4:7e:df:6e:b6:96:8c:52:1e:93:b4:7b:06:f1:12:
                    75:eb:ee:9a:b3:5f:25:50:3d:27:cc:99:d7:30:d9:
                    90:1d:2e:26:41:1f:33:1d:90:8a:6c:b4:f0:4b:26:
                    74:de:42:03:fa:12:bf:40:1e:1c:9d:ec:7d:73:0b:
                    1c:4a:fc:c9:9d:9e:43:e5:8d:c6:64:cb:fe:f1:ad:
                    26:3f:60:f4:0b:30:f2:80:ea:3a:7a:8c:ec:6f:6e:
                    6a:cb:7d:af:16:c3:ec:10:27:8d:df:74:49:fe:f9:
                    e9:18:04:8a:06:ef:74:7a:0a:e7:74:15:60:18:e7:
                    05:a2:ff:ed:8a:83:ef:e7:6e:4d:eb:8e:78:ce:67:
                    b5:9c:92:b4:52:25:5f:17:f6:a0:65:e1:6b:14:c5:
                    b6:de:0b:ab:34:1f:02:47:28:6f:b0:ee:4c:f7:75:
                    4b:50:76:cf:ce:0b:81:99:b4:c8:06:f2:5f:d1:7e:
                    ad:ab:c0:1c:4f:f8:b4:d9:24:e6:4c:db:df:b9:62:
                    d1:8a:8f:70:6b:80:35:ac:3d:22:0d:77:1b:c3:67:
                    1e:01:69:cc:f5:a9:52:e3:ef:51:01:3b:77:84:54:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:D1:F4:54:34:A5:C4:1B:8F:61:BC:9F:A8:46:DB:59:C3:89:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d22f878-4e63-3d46-8b31-b357287c9884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:55:51:3f:da:3e:ac:02:8c:73:53:b6:d8:dd:2b:2d:20:
         01:42:74:24:e7:0b:89:3b:6e:3b:8b:34:3f:c3:9e:72:16:0d:
         68:e5:62:32:84:7f:b9:83:8f:43:54:43:e8:65:02:54:ca:76:
         09:d1:d0:bc:81:32:c5:00:59:92:ae:a5:c1:a0:e8:4b:c0:1e:
         2b:32:5b:63:0e:14:3f:13:93:c2:00:4d:4e:c8:83:e3:1e:ba:
         db:66:10:95:1a:7d:15:9a:c9:9e:8a:6c:bf:d9:f1:35:e4:cd:
         72:49:96:33:fa:2d:5e:40:e4:89:5b:ef:7f:27:68:33:17:44:
         a6:a1:82:49:67:e7:c2:3f:e5:51:8b:64:0d:16:a6:78:17:e9:
         59:22:79:25:c5:9a:3c:d3:ae:e3:85:76:69:cf:55:10:27:fc:
         1b:e6:f0:92:0b:66:40:62:a8:26:73:fd:e6:ab:fa:8f:b3:b0:
         a6:39:cf:46:b8:be:02:72:8c:0d:fa:3a:41:6b:f0:bd:3b:20:
         b5:b0:26:db:b9:40:3d:5f:54:12:70:cc:e4:82:01:3d:78:26:
         28:0e:87:aa:8a:57:df:6f:63:b2:03:d0:7e:23:26:96:1d:85:
         05:88:b4:9a:b8:40:fd:97:49:b9:c8:84:6b:3b:06:9c:5b:27:
         43:12:e2:0d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5Po+11gbs2phBGo4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
ZTBhMTM0YjAtZWU4Zi00NDQ0LWExODMtN2QwZGUzYTZkOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkk7n2ASgvQSwakNF1HX9bS46NKMkl/mLgob
0IjUft9utpaMUh6TtHsG8RJ16+6as18lUD0nzJnXMNmQHS4mQR8zHZCKbLTwSyZ0
3kID+hK/QB4cnex9cwscSvzJnZ5D5Y3GZMv+8a0mP2D0CzDygOo6eozsb25qy32v
FsPsECeN33RJ/vnpGASKBu90egrndBVgGOcFov/tioPv525N6454zme1nJK0UiVf
F/agZeFrFMW23gurNB8CRyhvsO5M93VLUHbPzguBmbTIBvJf0X6tq8AcT/i02STm
TNvfuWLRio9wa4A1rD0iDXcbw2ceAWnM9alS4+9RATt3hFTo+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJuv0fRUNKXEG49hvJ+oRttZw4kAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWQyMmY4NzgtNGU2My0z
ZDQ2LThiMzEtYjM1NzI4N2M5ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBu/FVRP9o+rAKMc1O22N0rLSABQnQk5wuJO247
izQ/w55yFg1o5WIyhH+5g49DVEPoZQJUynYJ0dC8gTLFAFmSrqXBoOhLwB4rMltj
DhQ/E5PCAE1OyIPjHrrbZhCVGn0Vmsmeimy/2fE15M1ySZYz+i1eQOSJW+9/J2gz
F0SmoYJJZ+fCP+VRi2QNFqZ4F+lZInklxZo8067jhXZpz1UQJ/wb5vCSC2ZAYqgm
c/3mq/qPs7CmOc9GuL4CcowN+jpBa/C9OyC1sCbbuUA9X1QScMzkggE9eCYoDoeq
ilffb2OyA9B+IyaWHYUFiLSauED9l0m5yIRrOwacWydDEuIN
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:08 2025 by rpki-client