Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b192f03-b673-3e92-b698-91be9bfd5702.roa
File:                     3b192f03-b673-3e92-b698-91be9bfd5702.roa (raw, json)
Hash identifier:          99WHvrq0p9CKoqW0Ip9rXC2z35pMJT3i9bTSt0dpR8M=
Subject key identifier:   66:A9:48:0A:F6:EA:07:19:9F:07:0F:6B:5A:A2:33:EC:31:32:77:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB278948B44BBCE4808000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b192f03-b673-3e92-b698-91be9bfd5702.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396555
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:27:89:48:b4:4b:bc:e4:80:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=74ed6d3e-3141-4116-a129-5b8ac6e274ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:c0:86:c9:1b:96:f5:4a:99:31:f0:73:d2:
                    aa:28:50:67:5c:47:e0:f4:e8:32:4c:67:a0:26:03:
                    df:e8:a6:ac:24:41:7a:2b:04:d4:7e:98:91:96:03:
                    f4:53:94:06:9e:4d:09:1a:3d:b1:9b:ef:67:bc:33:
                    22:34:e8:0f:68:99:d5:35:d3:08:77:58:f1:84:e2:
                    38:38:68:d4:08:41:4f:49:ef:62:97:cc:d2:fb:bc:
                    c2:dc:ba:c9:88:27:bf:9b:cf:69:d1:c1:6d:30:2a:
                    8e:5b:cc:db:65:15:38:2b:03:b3:a7:9e:c8:ee:60:
                    69:5e:dd:35:40:27:cc:9c:d9:b2:24:c5:4c:4f:3e:
                    59:e0:65:53:e4:53:80:59:43:7c:01:39:c9:73:4d:
                    e2:f6:7b:04:ab:51:ca:a0:de:36:9e:98:71:8e:f0:
                    39:b4:fe:ff:38:68:47:29:ad:f4:b3:b7:c2:17:c5:
                    ac:40:0d:7b:34:2b:fb:29:bd:1f:ed:7c:10:bf:7b:
                    14:22:fc:bd:c7:d1:6c:a0:cb:23:26:59:33:e3:5d:
                    d7:55:0f:f5:ae:ec:63:6c:85:c4:eb:33:1e:2c:f1:
                    b1:fa:47:cb:a3:2f:94:f7:10:8e:03:50:aa:26:4d:
                    a7:c9:72:2a:0a:c5:04:1e:1e:7e:28:5a:82:14:6c:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:48:0A:F6:EA:07:19:9F:07:0F:6B:5A:A2:33:EC:31:32:77:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b192f03-b673-3e92-b698-91be9bfd5702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:d7:ea:eb:fa:f4:29:76:89:24:76:02:6e:e2:3f:00:3b:
         de:6c:3b:9d:1b:9b:5a:5d:a3:79:bd:1d:1e:8e:c4:46:8f:94:
         ea:e3:2d:77:27:0e:82:0c:7d:32:ca:c2:46:ec:80:0b:71:aa:
         41:21:d2:67:f2:1d:fd:82:9e:61:0c:af:f5:81:df:d5:d3:ad:
         cf:0b:1f:74:2d:66:67:f1:bb:68:42:9a:24:0a:bd:dc:15:c2:
         09:72:36:f1:06:ec:f0:4f:68:a0:02:53:b7:12:8d:10:af:f4:
         32:34:4d:12:d5:b7:79:35:02:de:46:44:a1:38:1c:42:2a:33:
         e1:6c:df:e1:e2:5b:63:dd:86:2e:46:6a:c0:6f:b9:71:f8:62:
         78:f1:38:16:0b:d5:70:b9:0a:a7:3c:95:bc:10:a9:bb:b3:ed:
         3e:fe:a1:b1:e4:1a:6f:f8:f7:09:d9:66:6b:d1:9b:c0:de:bf:
         06:34:46:1f:92:da:dd:8e:82:19:06:df:c8:71:48:72:e7:2c:
         c5:b1:05:b8:7a:ea:db:e8:d4:ac:11:00:de:67:75:56:c1:8e:
         68:dd:e2:38:f1:97:9b:50:5c:66:02:e9:d8:93:2b:dd:a9:1c:
         87:37:4a:de:3f:77:16:70:f8:2b:e5:9e:2e:b3:ae:9c:4b:5f:
         bb:7b:31:35
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yeJSLRLvOSAgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NzRlZDZkM2UtMzE0MS00MTE2LWExMjktNWI4YWM2ZTI3NGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYLAhskblvVKmTHwc9KqKFBnXEfg9OgyTGeg
JgPf6KasJEF6KwTUfpiRlgP0U5QGnk0JGj2xm+9nvDMiNOgPaJnVNdMId1jxhOI4
OGjUCEFPSe9il8zS+7zC3LrJiCe/m89p0cFtMCqOW8zbZRU4KwOzp57I7mBpXt01
QCfMnNmyJMVMTz5Z4GVT5FOAWUN8ATnJc03i9nsEq1HKoN42nphxjvA5tP7/OGhH
Ka30s7fCF8WsQA17NCv7Kb0f7XwQv3sUIvy9x9FsoMsjJlkz413XVQ/1ruxjbIXE
6zMeLPGx+kfLoy+U9xCOA1CqJk2nyXIqCsUEHh5+KFqCFGycuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGapSAr26gcZnwcPa1qiM+wxMne8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IxOTJmMDMtYjY3My0z
ZTkyLWI2OTgtOTFiZTliZmQ1NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBX79fq6/r0KXaJJHYCbuI/ADvebDudG5taXaN5
vR0ejsRGj5Tq4y13Jw6CDH0yysJG7IALcapBIdJn8h39gp5hDK/1gd/V063PCx90
LWZn8btoQpokCr3cFcIJcjbxBuzwT2igAlO3Eo0Qr/QyNE0S1bd5NQLeRkShOBxC
KjPhbN/h4ltj3YYuRmrAb7lx+GJ48TgWC9VwuQqnPJW8EKm7s+0+/qGx5Bpv+PcJ
2WZr0ZvA3r8GNEYfktrdjoIZBt/IcUhy5yzFsQW4eurb6NSsEQDeZ3VWwY5o3eI4
8ZebUFxmAunYkyvdqRyHN0reP3cWcPgr5Z4us66cS1+7ezE1
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:08 2025 by rpki-client