Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3250d07f-9b0d-3ed1-9825-8d65ff849250.roa
File:                     3250d07f-9b0d-3ed1-9825-8d65ff849250.roa (raw, json)
Hash identifier:          taFWaVGtFdAcXnFxMZZMz1uCnzt4AFCnzB0y6H3n2SM=
Subject key identifier:   23:BA:9B:49:DB:77:31:62:BA:48:D8:40:26:A9:4B:65:08:54:86:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A189562F6EE95F29C57122A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3250d07f-9b0d-3ed1-9825-8d65ff849250.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396568
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:62:f6:ee:95:f2:9c:57:12:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=13661226-dccb-4651-81b6-35e1937c3063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:ff:c3:06:3d:5b:c7:26:36:76:55:89:06:
                    35:05:6e:3c:4b:bd:e7:6b:34:1f:7a:79:8f:50:de:
                    2c:ba:d4:0e:2f:31:e9:69:e4:6c:f5:26:eb:3a:a7:
                    0d:95:72:b3:d8:c5:64:bc:49:21:2d:a5:64:c3:bf:
                    bd:94:52:a9:f5:e1:7a:2e:fa:ce:f4:75:72:f8:e0:
                    15:cb:00:7c:08:6a:f5:f8:54:b4:3b:58:03:ba:54:
                    89:2e:30:6f:a5:38:3f:94:df:f4:39:4f:31:cb:4f:
                    96:a8:c9:5b:ec:ca:1b:32:6b:5a:bf:87:a9:b5:9e:
                    3a:aa:07:6e:a9:6f:de:dc:dc:84:9f:0e:fb:ca:d5:
                    f5:b5:fc:b8:84:bf:55:e9:dc:12:c7:f8:e0:a9:7f:
                    b0:59:69:93:3c:54:61:49:ae:d4:02:18:27:72:49:
                    99:00:ae:08:23:01:ad:fd:99:27:1e:89:19:3a:37:
                    72:ab:e9:79:7c:8d:f4:5a:bf:e4:d9:57:d0:e5:14:
                    99:e6:9c:12:1f:a1:6b:2c:69:6c:0b:e0:2c:d0:d1:
                    29:b2:12:e3:9a:e4:c0:38:42:bb:8c:a4:99:6d:40:
                    04:0a:a1:c6:40:f0:f0:99:4f:cb:7c:3e:4e:70:c3:
                    ec:84:ff:28:5f:5a:62:7f:d5:50:a6:db:50:48:98:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:9B:49:DB:77:31:62:BA:48:D8:40:26:A9:4B:65:08:54:86:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3250d07f-9b0d-3ed1-9825-8d65ff849250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:ec:00:c5:1e:2c:49:8d:2a:57:9a:30:b5:04:d5:b2:85:
         f7:93:2d:2a:4b:f2:00:13:5e:5a:76:0f:31:80:38:f5:9b:8d:
         05:25:70:7f:4b:38:16:af:38:79:c6:a9:a9:11:df:fd:c5:b5:
         56:96:6f:b6:b8:25:d4:55:70:ca:84:96:60:1c:25:ad:8d:b3:
         92:9f:c1:25:6e:2d:79:c3:01:c8:e4:7b:9f:93:ad:b5:be:fa:
         ba:28:ba:32:ec:01:43:be:6f:0d:f7:73:97:c0:a8:8c:d4:2d:
         f6:95:92:32:25:c7:b0:75:5f:22:70:e9:8e:36:14:ae:2e:47:
         2d:70:28:80:8b:f7:2d:61:39:55:aa:80:01:a2:cc:49:ef:92:
         4f:63:7b:8e:ee:92:65:a0:dd:00:eb:c3:f5:8e:41:99:19:fb:
         e6:43:bd:85:58:06:eb:ff:40:39:81:e3:80:c8:7a:f4:f0:36:
         8e:fc:28:e1:e2:20:dd:95:39:f8:ce:63:4e:41:7c:87:d6:91:
         fb:99:51:31:20:95:59:b7:82:4b:4e:11:55:37:78:15:0b:e8:
         f1:44:e6:64:f1:3e:b4:52:d0:2a:bb:e0:36:75:64:df:0a:d6:
         31:ee:05:b4:45:3a:85:8a:52:56:65:3a:01:87:3d:0f:ba:16:
         0d:0e:82:5c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWL27pXynFcSKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
MTM2NjEyMjYtZGNjYi00NjUxLTgxYjYtMzVlMTkzN2MzMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog7/wwY9W8cmNnZViQY1BW48S73nazQfenmP
UN4sutQOLzHpaeRs9SbrOqcNlXKz2MVkvEkhLaVkw7+9lFKp9eF6LvrO9HVy+OAV
ywB8CGr1+FS0O1gDulSJLjBvpTg/lN/0OU8xy0+WqMlb7MobMmtav4eptZ46qgdu
qW/e3NyEnw77ytX1tfy4hL9V6dwSx/jgqX+wWWmTPFRhSa7UAhgnckmZAK4IIwGt
/ZknHokZOjdyq+l5fI30Wr/k2VfQ5RSZ5pwSH6FrLGlsC+As0NEpshLjmuTAOEK7
jKSZbUAECqHGQPDwmU/LfD5OcMPshP8oX1pif9VQpttQSJi3/QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCO6m0nbdzFiukjYQCapS2UIVIaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI1MGQwN2YtOWIwZC0z
ZWQxLTk4MjUtOGQ2NWZmODQ5MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCpZewAxR4sSY0qV5owtQTVsoX3ky0qS/IAE15a
dg8xgDj1m40FJXB/SzgWrzh5xqmpEd/9xbVWlm+2uCXUVXDKhJZgHCWtjbOSn8El
bi15wwHI5Hufk621vvq6KLoy7AFDvm8N93OXwKiM1C32lZIyJcewdV8icOmONhSu
LkctcCiAi/ctYTlVqoABosxJ75JPY3uO7pJloN0A68P1jkGZGfvmQ72FWAbr/0A5
geOAyHr08DaO/Cjh4iDdlTn4zmNOQXyH1pH7mVExIJVZt4JLThFVN3gVC+jxROZk
8T60UtAqu+A2dWTfCtYx7gW0RTqFilJWZToBhz0PuhYNDoJc
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:17 2025 by rpki-client