Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa
File:                     48124153-c8f1-322d-b6d8-f2f4a132d540.roa (raw, json)
Hash identifier:          6BFXh1z8h8X69/sJQOxVWyaBZTCdj5Cf5MI1V9Q43xU=
Subject key identifier:   5D:49:A7:5C:ED:8B:F3:5A:A9:E8:BE:2F:72:66:D6:23:E8:2E:E2:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA757328AFCC30D6E7F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36623
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a7:57:32:8a:fc:c3:0d:6e:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=2916eb5f-bd64-43de-b3a1-728b2a37888d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:e2:92:2f:92:c2:d8:f3:b8:eb:49:76:7d:
                    38:31:4d:9d:29:f6:8b:44:86:fc:94:74:bb:16:36:
                    b4:03:54:e7:89:4b:cf:a2:1e:90:1f:f3:81:bf:9e:
                    03:14:ef:b2:25:f2:6b:ef:ce:7d:00:a2:8f:03:0a:
                    d9:43:4c:bc:f8:c8:99:f8:fc:e9:48:b5:9e:e0:cc:
                    1f:bf:47:91:70:43:aa:c0:05:53:ef:89:1a:ae:89:
                    d5:61:39:39:e3:1c:01:74:bc:c2:ed:d3:c3:0a:32:
                    a7:0e:4f:7e:8e:d8:13:99:b0:ea:c3:ab:80:24:45:
                    f0:67:3f:96:a2:c8:1c:1c:76:76:3d:2c:d6:68:f2:
                    20:06:41:c1:9c:12:41:a6:78:3f:a3:38:55:5e:62:
                    46:be:d8:ba:f1:87:fa:8b:ac:77:3a:ab:4f:a9:7b:
                    08:ba:dc:bd:67:56:1a:d4:02:ee:44:ed:66:b9:06:
                    b6:bd:a8:dc:9a:e3:a5:d3:b4:a0:6c:64:aa:62:a6:
                    58:84:bd:4c:a3:c1:e9:93:30:89:83:aa:99:bc:e3:
                    b9:9d:2d:c9:fd:b5:5a:e2:94:44:3e:29:5b:59:55:
                    92:f5:d4:a7:95:c4:d3:75:ec:2d:b3:99:f2:b5:89:
                    21:d7:c9:f7:84:35:6f:00:24:ce:1b:74:11:ae:4d:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:49:A7:5C:ED:8B:F3:5A:A9:E8:BE:2F:72:66:D6:23:E8:2E:E2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:86:52:4f:66:6b:33:70:70:53:36:6a:27:d5:30:f5:36:42:
         d3:b9:79:7c:ed:14:39:63:b9:1a:4b:30:7b:34:52:5a:eb:47:
         e4:4a:23:6f:ad:1f:f7:f2:23:77:f6:cb:ea:4f:bd:83:ae:d0:
         e0:5b:a6:4c:b1:54:2d:69:2d:fe:90:55:2e:0d:95:ad:d0:88:
         f9:88:81:5c:bc:a2:79:aa:0c:f0:fd:40:01:f2:51:df:5f:14:
         16:34:dc:de:4c:78:30:09:d5:72:12:18:8e:48:0b:76:43:b8:
         fc:c8:75:a4:c1:ab:48:d4:42:d1:7e:d0:6a:1a:af:d0:b1:c3:
         36:32:eb:e1:aa:81:c7:e8:d9:aa:3c:27:cd:90:da:79:0f:c6:
         02:5e:04:07:87:6a:ea:9d:1e:77:03:d1:b5:8b:2c:19:6f:9b:
         dc:37:07:1a:da:9f:b8:2b:65:1c:ca:a5:18:df:b2:5c:30:79:
         46:7e:d5:b2:17:fc:dc:f6:69:e2:04:cd:ca:f4:b1:af:54:b3:
         7f:55:2b:e1:87:ad:62:ff:ce:eb:cd:b8:80:96:b2:df:68:24:
         12:c4:06:c0:5d:17:c3:06:ca:b9:d5:e1:a0:be:fb:68:6b:0f:
         af:8a:05:10:fb:17:77:1d:64:ec:81:2d:78:01:05:3f:6a:44:
         b6:e4:e7:41
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqdXMor8ww1ufwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
MjkxNmViNWYtYmQ2NC00M2RlLWIzYTEtNzI4YjJhMzc4ODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuabiki+SwtjzuOtJdn04MU2dKfaLRIb8lHS7
Fja0A1TniUvPoh6QH/OBv54DFO+yJfJr7859AKKPAwrZQ0y8+MiZ+PzpSLWe4Mwf
v0eRcEOqwAVT74karonVYTk54xwBdLzC7dPDCjKnDk9+jtgTmbDqw6uAJEXwZz+W
osgcHHZ2PSzWaPIgBkHBnBJBpng/ozhVXmJGvti68Yf6i6x3OqtPqXsIuty9Z1Ya
1ALuRO1muQa2vajcmuOl07SgbGSqYqZYhL1Mo8HpkzCJg6qZvOO5nS3J/bVa4pRE
PilbWVWS9dSnlcTTdewts5nytYkh18n3hDVvACTOG3QRrk2CjQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFF1Jp1zti/Naqei+L3Jm1iPoLuIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDgxMjQxNTMtYzhmMS0z
MjJkLWI2ZDgtZjJmNGExMzJkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYhlJPZmszcHBTNmon1TD1NkLTuXl87RQ5Y7ka
SzB7NFJa60fkSiNvrR/38iN39svqT72DrtDgW6ZMsVQtaS3+kFUuDZWt0Ij5iIFc
vKJ5qgzw/UAB8lHfXxQWNNzeTHgwCdVyEhiOSAt2Q7j8yHWkwatI1ELRftBqGq/Q
scM2MuvhqoHH6NmqPCfNkNp5D8YCXgQHh2rqnR53A9G1iywZb5vcNwca2p+4K2Uc
yqUY37JcMHlGftWyF/zc9mniBM3K9LGvVLN/VSvhh61i/87rzbiAlrLfaCQSxAbA
XRfDBsq51eGgvvtoaw+vigUQ+xd3HWTsgS14AQU/akS25OdB
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:51 2025 by rpki-client