Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ab7a93-a41c-3073-8629-dcd118075f26.roa
File:                     32ab7a93-a41c-3073-8629-dcd118075f26.roa (raw, json)
Hash identifier:          e/9hUR1ZDBbZ90LSC/ULJ7n362uvDyGz/LKD+uSX98k=
Subject key identifier:   79:0F:2F:72:0F:D5:C1:DD:74:66:C4:22:B9:64:89:D1:F9:94:2C:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A189561E984BA97D0BE66C700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ab7a93-a41c-3073-8629-dcd118075f26.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396561
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:61:e9:84:ba:97:d0:be:66:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=b686f6b3-8fd8-4d35-a8d0-6ef74e41b4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:6a:f9:8a:3e:07:d2:30:b6:25:fa:31:be:
                    f8:fe:1d:d7:b0:b2:b5:2c:95:99:89:25:81:76:ad:
                    18:0d:0a:bd:08:a0:27:5c:b9:66:08:9f:29:b7:64:
                    e9:2c:bb:bb:1c:bb:a6:31:18:2e:7e:41:3a:07:50:
                    3f:c1:29:31:ee:65:15:c3:56:d2:73:31:aa:ee:b6:
                    e1:41:3e:dd:ff:f8:ae:e0:29:be:37:88:cc:80:f2:
                    fe:ad:d8:cb:74:d8:16:ce:83:8c:3b:8e:e7:0f:43:
                    57:c5:b3:5d:f4:bf:55:44:a0:06:71:4c:43:94:8f:
                    1a:0c:45:9c:b4:5e:c5:e9:4d:ba:2e:3d:23:e0:a2:
                    dc:69:00:69:4f:b3:f7:ba:e9:40:e9:ba:1a:34:6e:
                    19:be:82:ce:97:0d:bb:25:0a:6d:82:5e:09:43:e0:
                    c9:53:08:bc:78:06:50:6a:94:38:8e:61:5f:d9:27:
                    f3:6f:1e:fd:f0:ac:45:7c:da:bd:34:d4:1f:7d:51:
                    17:f9:cd:ca:1c:3a:e9:3c:f9:aa:61:50:2c:91:05:
                    41:eb:ef:f1:d8:75:3e:04:64:39:ce:25:55:d8:4a:
                    1c:e1:6c:cf:e4:8d:ea:66:a1:b1:da:c3:d0:30:98:
                    8e:b3:66:38:e3:24:13:b4:4a:b8:37:cb:45:c0:5f:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0F:2F:72:0F:D5:C1:DD:74:66:C4:22:B9:64:89:D1:F9:94:2C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ab7a93-a41c-3073-8629-dcd118075f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:cb:8e:55:78:83:c5:20:ea:95:76:b0:21:e0:b5:99:bd:
         81:40:f4:1b:d1:37:5b:99:7b:8f:56:ba:ee:b1:50:e6:e0:93:
         70:f3:ca:66:d2:13:37:72:1b:ca:71:97:95:54:88:67:0d:d4:
         50:2e:94:74:d5:7d:65:ea:8b:51:24:b7:68:d3:1c:5c:0a:8c:
         ed:1f:0c:aa:0c:3d:68:4b:c1:26:9f:6d:00:5d:57:f7:41:ec:
         ed:f3:88:c6:62:a3:d5:55:ca:87:84:c1:d4:e3:bb:4f:3d:ed:
         40:81:47:aa:89:40:91:2e:4c:a5:f4:d4:49:f1:a2:6e:01:c8:
         6c:4b:3f:78:68:aa:c5:59:d0:d3:1e:8a:b1:64:11:0e:7e:04:
         f4:c4:78:f9:fa:2d:1b:75:34:bf:49:7b:24:95:3e:5f:99:cd:
         36:73:b8:a7:6a:7d:45:b4:07:65:a4:6b:ed:10:69:77:39:e3:
         83:7c:91:a7:c0:ca:8e:6d:2f:4b:55:c7:e8:65:fe:e1:1e:5b:
         5d:16:02:17:9e:56:c3:a1:bf:cc:8a:b2:14:27:1a:d3:e1:17:
         52:ff:b7:6c:87:df:ce:d6:e1:e8:b3:20:98:6d:8f:f6:7b:30:
         46:e6:45:af:13:0a:78:67:0a:53:06:a3:33:7e:92:b4:91:95:
         43:b2:a1:db
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWHphLqX0L5mxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
YjY4NmY2YjMtOGZkOC00ZDM1LWE4ZDAtNmVmNzRlNDFiNGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4Rq+Yo+B9IwtiX6Mb74/h3XsLK1LJWZiSWB
dq0YDQq9CKAnXLlmCJ8pt2TpLLu7HLumMRgufkE6B1A/wSkx7mUVw1bSczGq7rbh
QT7d//iu4Cm+N4jMgPL+rdjLdNgWzoOMO47nD0NXxbNd9L9VRKAGcUxDlI8aDEWc
tF7F6U26Lj0j4KLcaQBpT7P3uulA6boaNG4ZvoLOlw27JQptgl4JQ+DJUwi8eAZQ
apQ4jmFf2Sfzbx798KxFfNq9NNQffVEX+c3KHDrpPPmqYVAskQVB6+/x2HU+BGQ5
ziVV2Eoc4WzP5I3qZqGx2sPQMJiOs2Y44yQTtEq4N8tFwF+h7QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHkPL3IP1cHddGbEIrlkidH5lCyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJhYjdhOTMtYTQxYy0z
MDczLTg2MjktZGNkMTE4MDc1ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/J8uOVXiDxSDqlXawIeC1mb2BQPQb0TdbmXuP
VrrusVDm4JNw88pm0hM3chvKcZeVVIhnDdRQLpR01X1l6otRJLdo0xxcCoztHwyq
DD1oS8Emn20AXVf3Qezt84jGYqPVVcqHhMHU47tPPe1AgUeqiUCRLkyl9NRJ8aJu
AchsSz94aKrFWdDTHoqxZBEOfgT0xHj5+i0bdTS/SXsklT5fmc02c7inan1FtAdl
pGvtEGl3OeODfJGnwMqObS9LVcfoZf7hHltdFgIXnlbDob/MirIUJxrT4RdS/7ds
h9/O1uHosyCYbY/2ezBG5kWvEwp4ZwpTBqMzfpK0kZVDsqHb
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:44:16 2025 by rpki-client