Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
File:                     420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa (raw, json)
Hash identifier:          ZxF2uI6A3fvv5OQicVtE1B8Sp/xPqaddJ5YPDFCdNYw=
Subject key identifier:   AB:54:19:0B:20:62:9D:54:64:98:FA:39:AF:E3:00:D1:6D:9D:B2:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA88A0655C9A199FD4400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     397200
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a8:8a:06:55:c9:a1:99:fd:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=3c56a494-703d-4e18-9521-f6ad2e85818c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:84:94:5e:70:07:8f:1a:e2:1b:e3:c1:7a:
                    68:24:61:c2:40:53:36:df:9f:41:90:28:8f:2b:7f:
                    4c:1d:9c:f3:59:b3:76:0c:84:27:6a:74:5f:bc:3d:
                    ec:34:e6:43:c6:fe:9c:fe:ef:df:23:3a:5e:27:66:
                    bb:6e:c2:11:9d:4a:42:22:06:40:33:23:7f:d2:7e:
                    64:2a:6e:1f:8b:2d:02:75:1d:b2:48:c4:92:48:81:
                    60:af:da:17:b4:43:ab:2d:cf:54:95:fb:d8:60:4c:
                    e3:a2:43:0b:67:03:85:e6:81:78:06:c8:40:6e:b0:
                    76:db:41:11:6c:fb:dd:54:47:ba:18:49:d8:a0:49:
                    be:b1:99:ed:83:e5:19:e3:29:8e:dd:a2:60:93:87:
                    94:eb:8a:49:67:e3:c8:eb:eb:8a:3a:46:19:ec:81:
                    43:f0:2b:68:d1:0e:19:a8:9a:2b:07:74:ac:2b:f6:
                    4e:39:b1:13:0a:29:10:21:d7:ac:26:d0:52:00:a4:
                    91:58:1e:2d:4b:b7:5c:42:e7:63:ea:91:e6:47:fd:
                    9f:9b:17:18:6e:de:89:04:fe:f3:08:04:5e:2e:36:
                    7d:eb:a2:89:6e:82:d5:b3:fc:75:cf:9a:93:4e:27:
                    0b:d6:71:31:f0:9a:51:b8:b7:3a:ae:02:42:a8:3b:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:54:19:0B:20:62:9D:54:64:98:FA:39:AF:E3:00:D1:6D:9D:B2:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f1:10:e2:b2:cf:5c:4e:42:b0:79:fd:c0:ee:0b:8e:27:df:
         7f:77:b3:45:27:d2:72:a7:5b:31:70:32:ce:9e:7c:ab:f6:11:
         86:bf:7e:8a:e6:6a:f7:06:cf:53:f0:70:75:5e:37:51:99:fd:
         fc:55:f7:bb:42:b0:f9:bd:b0:06:0a:c2:64:03:90:73:8f:55:
         87:0c:06:76:b0:1f:f4:bd:a8:ec:94:f1:cf:ce:3a:f1:a0:86:
         93:32:95:3b:d7:00:1b:54:6e:b9:53:4a:17:36:0d:49:9c:fe:
         8c:c2:20:f6:5b:df:de:7f:06:d2:c3:8e:41:9d:fd:0e:ab:16:
         aa:a9:3d:3d:a8:ee:00:11:09:e0:a8:31:c6:15:5b:43:14:a9:
         a3:d9:39:76:f9:d4:08:47:3f:cc:5e:25:43:41:e9:32:c5:cd:
         d8:d7:48:ba:a0:14:74:7e:38:ce:ed:04:04:6c:19:18:54:a4:
         8d:27:42:a7:76:dc:99:8e:ba:a2:07:d9:c5:fa:98:72:a1:5f:
         f5:71:ba:c1:c3:24:34:f1:d2:19:b9:64:c9:ab:63:1f:60:2d:
         a8:8c:a3:73:2f:cc:a5:24:9a:83:4a:9f:12:75:da:67:a1:39:
         41:7b:ac:f2:8a:72:6f:c2:fe:bd:65:fd:a2:d0:ef:3d:95:87:
         a5:19:f0:31
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqiKBlXJoZn9RAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
M2M1NmE0OTQtNzAzZC00ZTE4LTk1MjEtZjZhZDJlODU4MThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGElF5wB48a4hvjwXpoJGHCQFM2359BkCiP
K39MHZzzWbN2DIQnanRfvD3sNOZDxv6c/u/fIzpeJ2a7bsIRnUpCIgZAMyN/0n5k
Km4fiy0CdR2ySMSSSIFgr9oXtEOrLc9UlfvYYEzjokMLZwOF5oF4BshAbrB220ER
bPvdVEe6GEnYoEm+sZntg+UZ4ymO3aJgk4eU64pJZ+PI6+uKOkYZ7IFD8Cto0Q4Z
qJorB3SsK/ZOObETCikQIdesJtBSAKSRWB4tS7dcQudj6pHmR/2fmxcYbt6JBP7z
CAReLjZ966KJboLVs/x1z5qTTicL1nEx8JpRuLc6rgJCqDvgKQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKtUGQsgYp1UZJj6Oa/jANFtnbKpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDIwZTc4OGQtNDJjNC0z
NGZhLTg0NWEtYzdmNmMxZDQ1ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBu8RDiss9cTkKwef3A7guOJ99/d7NFJ9Jyp1sx
cDLOnnyr9hGGv36K5mr3Bs9T8HB1XjdRmf38Vfe7QrD5vbAGCsJkA5Bzj1WHDAZ2
sB/0vajslPHPzjrxoIaTMpU71wAbVG65U0oXNg1JnP6MwiD2W9/efwbSw45Bnf0O
qxaqqT09qO4AEQngqDHGFVtDFKmj2Tl2+dQIRz/MXiVDQekyxc3Y10i6oBR0fjjO
7QQEbBkYVKSNJ0KndtyZjrqiB9nF+phyoV/1cbrBwyQ08dIZuWTJq2MfYC2ojKNz
L8ylJJqDSp8SddpnoTlBe6zyinJvwv69Zf2i0O89lYelGfAx
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:26:04 2025 by rpki-client