Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af37c74-bbba-3e1b-bcbc-487bd0143f39.roa
File:                     3af37c74-bbba-3e1b-bcbc-487bd0143f39.roa (raw, json)
Hash identifier:          QnflBNqFcFLBlEb7BNHw//B8/KHdTlFls9l3wtHii2I=
Subject key identifier:   0F:B5:B7:8A:7B:B5:51:D2:4C:03:AF:60:52:44:DE:93:F5:0C:53:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAD0974D033D5201EE400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af37c74-bbba-3e1b-bcbc-487bd0143f39.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396591
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ad:09:74:d0:33:d5:20:1e:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=24ef595d-a233-4c13-b33f-dfc5f1c06876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:6b:8a:f1:e6:5a:61:26:fc:75:09:5a:31:
                    52:8d:ce:27:f0:3b:9c:35:fd:9f:26:66:c2:45:32:
                    55:41:49:9f:a8:8c:eb:cd:e4:db:2d:bd:42:8e:4e:
                    5e:10:f5:7b:48:4c:18:99:a3:aa:4e:6f:a0:67:08:
                    3d:f5:5b:67:1c:2a:cf:89:22:48:bd:2e:d6:f4:0b:
                    b6:1e:8e:15:9b:55:03:11:3e:7e:b4:e7:95:8c:83:
                    ac:f2:e6:63:9f:aa:36:93:5f:2a:d7:37:f7:44:2e:
                    41:c1:b1:a3:4c:72:00:f1:ff:2b:d0:54:15:31:7d:
                    5d:dc:1c:c3:00:c8:19:5b:68:50:cb:9f:b0:ee:ba:
                    69:da:18:8a:0c:5e:e0:7f:70:97:2c:11:ad:8c:8a:
                    a3:1d:4e:de:9d:fe:59:38:87:10:59:af:50:ff:70:
                    dc:61:0f:e2:95:bc:ae:81:5e:90:76:3e:94:3f:b9:
                    77:65:2a:c2:55:92:91:62:fc:b6:6d:28:be:24:87:
                    82:89:dd:3a:8e:24:52:c6:51:3d:d3:5c:0f:4e:63:
                    53:ec:2f:12:eb:cb:c4:bc:4d:7f:13:86:d9:8e:3d:
                    8a:3e:5d:73:b1:a7:31:98:36:e8:1b:2a:3b:f3:2a:
                    53:2d:f6:e1:a6:04:9b:5c:5c:fd:44:a8:a9:11:83:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:B7:8A:7B:B5:51:D2:4C:03:AF:60:52:44:DE:93:F5:0C:53:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af37c74-bbba-3e1b-bcbc-487bd0143f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:67:5b:3d:41:4a:26:3d:58:2e:dd:a7:63:0c:08:c4:d0:97:
         92:c1:2a:0a:63:7f:6a:e3:fc:d6:22:45:fe:10:56:1b:e7:f8:
         dd:0a:0f:50:17:e3:8d:3a:23:2e:2d:5e:50:10:69:65:d1:e7:
         d4:36:5c:a3:c9:97:d6:ce:3f:07:41:99:5d:9b:c1:4f:67:06:
         9f:19:ea:da:67:54:44:6f:cf:fe:c6:fb:94:f7:4c:4f:71:4d:
         32:37:75:03:fa:55:a6:9b:a3:f1:ec:6e:b2:43:15:2e:9f:d3:
         4c:22:47:bf:ac:57:9c:17:32:80:30:ce:3e:9e:f4:3f:5e:1b:
         01:e9:f3:e3:64:dc:e0:cf:1e:97:f1:0d:88:75:25:55:7e:c0:
         5f:21:b7:2d:b7:58:ce:c2:a1:87:36:e3:7d:5a:af:a4:c3:75:
         74:d7:73:9c:d7:96:d0:09:35:18:9b:09:aa:6f:bd:7f:96:ae:
         54:15:18:fb:ac:2e:21:a1:f3:20:06:a9:6b:3c:24:b8:06:b5:
         7f:bb:01:a3:5a:89:19:bb:73:a5:ed:35:6d:c8:3c:db:7e:29:
         47:85:d4:cf:21:bf:ea:2f:7f:da:45:45:3e:31:e6:93:26:91:
         79:3c:92:e4:e7:12:de:df:96:b3:68:2d:f1:16:08:b6:f0:1f:
         b0:b2:01:4b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOq0JdNAz1SAe5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
MjRlZjU5NWQtYTIzMy00YzEzLWIzM2YtZGZjNWYxYzA2ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPprivHmWmEm/HUJWjFSjc4n8DucNf2fJmbC
RTJVQUmfqIzrzeTbLb1Cjk5eEPV7SEwYmaOqTm+gZwg99VtnHCrPiSJIvS7W9Au2
Ho4Vm1UDET5+tOeVjIOs8uZjn6o2k18q1zf3RC5BwbGjTHIA8f8r0FQVMX1d3BzD
AMgZW2hQy5+w7rpp2hiKDF7gf3CXLBGtjIqjHU7enf5ZOIcQWa9Q/3DcYQ/ilbyu
gV6Qdj6UP7l3ZSrCVZKRYvy2bSi+JIeCid06jiRSxlE901wPTmNT7C8S68vEvE1/
E4bZjj2KPl1zsacxmDboGyo78ypTLfbhpgSbXFz9RKipEYNW1wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA+1t4p7tVHSTAOvYFJE3pP1DFM6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FmMzdjNzQtYmJiYS0z
ZTFiLWJjYmMtNDg3YmQwMTQzZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBfZ1s9QUomPVgu3adjDAjE0JeSwSoKY39q4/zW
IkX+EFYb5/jdCg9QF+ONOiMuLV5QEGll0efUNlyjyZfWzj8HQZldm8FPZwafGera
Z1REb8/+xvuU90xPcU0yN3UD+lWmm6Px7G6yQxUun9NMIke/rFecFzKAMM4+nvQ/
XhsB6fPjZNzgzx6X8Q2IdSVVfsBfIbctt1jOwqGHNuN9Wq+kw3V013Oc15bQCTUY
mwmqb71/lq5UFRj7rC4hofMgBqlrPCS4BrV/uwGjWokZu3Ol7TVtyDzbfilHhdTP
Ib/qL3/aRUU+MeaTJpF5PJLk5xLe35azaC3xFgi28B+wsgFL
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:31:52 2025 by rpki-client