Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51723740-7c8f-3afa-b6cb-afb59490eb21.roa
File:                     51723740-7c8f-3afa-b6cb-afb59490eb21.roa (raw, json)
Hash identifier:          k62I4oKIaNVhtVReZMrbcPMfgkF5/XZ9ga/AxSahNi4=
Subject key identifier:   01:43:51:35:87:37:74:B8:31:96:48:14:7C:7E:83:02:FF:0C:CD:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC2A649CF4F710DD60480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51723740-7c8f-3afa-b6cb-afb59490eb21.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     397211
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c2:a6:49:cf:4f:71:0d:d6:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=ae3a4797-994c-413e-8635-23fe4f3712cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:ce:0e:f4:fd:da:53:6b:82:f2:eb:86:38:
                    64:99:5f:d4:37:6a:e3:f6:ac:4e:b7:9f:22:17:a1:
                    fa:39:f4:8e:81:5c:ee:b5:11:6d:8b:3a:53:88:2f:
                    bb:90:42:80:69:db:2c:7d:c3:08:41:76:39:4d:8d:
                    10:6f:86:b4:02:95:fc:f1:20:38:5a:35:09:60:c4:
                    19:97:d8:a1:41:6a:66:aa:62:0e:48:e9:66:9c:8b:
                    bd:4c:0a:a8:6f:17:43:29:44:3d:f4:a8:bd:f2:c7:
                    65:a1:81:7f:a4:f8:e0:e9:e9:16:6c:d1:a7:fb:a0:
                    b1:85:6f:3c:5b:a9:7f:cd:02:2d:f4:39:28:43:b1:
                    7d:92:05:8b:1d:a5:72:ab:80:fb:71:16:54:ad:51:
                    d5:7e:d3:ba:cd:b4:1f:11:b1:5f:b1:5f:a1:1c:de:
                    c0:e8:e3:39:06:b6:14:93:5a:20:f0:3d:4d:a1:c5:
                    a4:a5:1f:19:ed:47:42:44:2b:7d:a4:89:66:9e:83:
                    65:36:fe:a6:db:41:b1:c8:02:01:5b:53:b0:c6:38:
                    44:59:4a:3a:0f:e3:8a:81:be:ca:a0:ba:b7:29:85:
                    c4:ae:d1:1a:cf:7e:e2:ca:92:79:a5:15:4d:7a:d2:
                    53:94:f7:5b:b0:ce:42:3e:a7:00:37:70:86:fa:3a:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:43:51:35:87:37:74:B8:31:96:48:14:7C:7E:83:02:FF:0C:CD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51723740-7c8f-3afa-b6cb-afb59490eb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:08:42:e1:0a:0a:a5:1e:91:35:26:d6:5c:e0:fb:a3:22:13:
         91:8a:58:db:5e:df:18:5a:72:5a:06:a9:ae:d9:22:a8:51:6b:
         a7:34:05:e6:15:85:a5:d0:f8:8d:69:a9:02:0a:17:0a:2a:91:
         c3:d4:87:11:f3:5f:be:77:95:3b:1c:50:21:e2:30:e7:de:40:
         78:0f:a3:3a:9e:d7:87:43:c7:9a:ff:e6:7c:81:9d:df:36:7e:
         ea:5d:57:84:13:25:6a:22:bb:ea:1f:09:06:31:d9:65:6e:f8:
         cf:b5:35:e8:6c:6b:a0:77:57:a5:e3:61:b7:5b:f3:d0:9f:ab:
         72:51:dd:62:6d:8d:0c:dd:8d:98:38:3d:14:a5:f2:63:bd:50:
         6c:4e:3c:b5:2a:44:43:c4:11:0b:bc:a8:c8:5e:26:e2:8c:b6:
         36:c3:0f:e8:58:33:d0:5c:bc:a2:5d:38:a2:a0:7b:6e:d1:df:
         f0:bd:4e:ac:3e:cb:a0:01:2a:81:14:bc:fd:ad:dd:08:ab:99:
         7d:64:25:75:db:f8:94:97:ff:8a:f0:55:ec:9e:b7:0d:d0:3c:
         17:ee:7b:4f:9b:12:db:08:09:e6:65:16:f2:d7:6b:6d:7c:da:
         c8:2c:4d:99:60:83:71:aa:23:a8:0a:35:8c:33:b5:bf:31:a2:
         b6:d3:ef:cc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmsKmSc9PcQ3WBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
YWUzYTQ3OTctOTk0Yy00MTNlLTg2MzUtMjNmZTRmMzcxMmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFTODvT92lNrgvLrhjhkmV/UN2rj9qxOt58i
F6H6OfSOgVzutRFtizpTiC+7kEKAadssfcMIQXY5TY0Qb4a0ApX88SA4WjUJYMQZ
l9ihQWpmqmIOSOlmnIu9TAqobxdDKUQ99Ki98sdloYF/pPjg6ekWbNGn+6CxhW88
W6l/zQIt9DkoQ7F9kgWLHaVyq4D7cRZUrVHVftO6zbQfEbFfsV+hHN7A6OM5BrYU
k1og8D1NocWkpR8Z7UdCRCt9pIlmnoNlNv6m20GxyAIBW1OwxjhEWUo6D+OKgb7K
oLq3KYXErtEaz37iypJ5pRVNetJTlPdbsM5CPqcAN3CG+joRfQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAFDUTWHN3S4MZZIFHx+gwL/DM3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTE3MjM3NDAtN2M4Zi0z
YWZhLWI2Y2ItYWZiNTk0OTBlYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYCELhCgqlHpE1JtZc4PujIhORiljbXt8YWnJa
Bqmu2SKoUWunNAXmFYWl0PiNaakCChcKKpHD1IcR81++d5U7HFAh4jDn3kB4D6M6
nteHQ8ea/+Z8gZ3fNn7qXVeEEyVqIrvqHwkGMdllbvjPtTXobGugd1el42G3W/PQ
n6tyUd1ibY0M3Y2YOD0UpfJjvVBsTjy1KkRDxBELvKjIXibijLY2ww/oWDPQXLyi
XTiioHtu0d/wvU6sPsugASqBFLz9rd0Iq5l9ZCV12/iUl/+K8FXsnrcN0DwX7ntP
mxLbCAnmZRby12ttfNrILE2ZYINxqiOoCjWMM7W/MaK20+/M
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:44:55 2025 by rpki-client