Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58a971bb-637d-35a9-b3fb-662bacd82513.roa
File:                     58a971bb-637d-35a9-b3fb-662bacd82513.roa (raw, json)
Hash identifier:          aX6G0+WWjIFfYNzGZIWb+1mOrTlFJpu7jr/nhut3oxQ=
Subject key identifier:   F2:B8:9A:63:0E:2E:70:9C:27:90:00:DB:86:91:4A:40:D9:0E:DF:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAB66F693C1A6AF708900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58a971bb-637d-35a9-b3fb-662bacd82513.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     20362
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ab:66:f6:93:c1:a6:af:70:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=c7e6620a-37e7-449e-afa8-5aab64ece079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:bc:d2:fb:46:8a:13:4d:44:07:b4:8e:40:
                    b0:df:34:1e:2f:2a:98:74:0b:e4:af:8f:f3:40:b2:
                    62:b6:35:76:7e:e0:7b:8e:a2:d6:b5:03:34:91:c7:
                    3b:56:d0:02:9e:71:00:77:cc:f6:f5:e0:a1:32:d8:
                    db:cd:03:f2:81:8e:7b:e3:a6:23:12:54:9d:c1:b5:
                    5f:23:10:2c:85:da:8e:3c:93:9c:39:3b:bc:c1:77:
                    cd:32:9d:29:e7:3b:54:48:e2:df:4c:d7:85:4b:68:
                    da:98:f9:b5:fd:4c:ea:10:c7:ad:45:5d:82:08:e2:
                    eb:db:d1:b7:95:87:35:17:f9:06:ce:b2:92:6a:6e:
                    77:46:d5:46:49:38:71:42:f7:8b:fd:d0:84:51:f6:
                    5e:65:16:35:0f:24:9d:42:e2:e1:a7:74:a4:87:47:
                    fe:49:36:aa:e3:6a:b1:9e:08:cd:59:c9:9d:a5:b0:
                    68:be:4e:cd:f2:8e:ae:c7:ce:6b:f6:c1:2f:5e:5e:
                    c7:e5:ce:ce:e4:5e:1a:a4:72:99:62:74:56:f2:05:
                    bc:6f:96:64:90:f6:86:47:a4:5b:3f:4e:bc:d5:06:
                    f7:0c:fa:71:c7:24:81:48:b4:5f:4a:19:5f:60:86:
                    85:5d:53:e3:5b:f9:66:e4:8f:7f:cd:3c:55:46:24:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B8:9A:63:0E:2E:70:9C:27:90:00:DB:86:91:4A:40:D9:0E:DF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58a971bb-637d-35a9-b3fb-662bacd82513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:67:4b:ae:6a:5f:a6:fa:a7:02:75:0b:9f:9b:42:4f:54:
         2a:f5:92:68:77:53:f6:af:5d:45:a3:dc:33:d5:0a:ca:fd:50:
         42:94:d9:fc:8e:42:00:34:c9:ca:26:6b:db:b5:c1:70:b2:0c:
         61:3e:ce:cb:85:e7:11:9d:63:a2:ae:fb:85:0b:90:5c:f8:b8:
         56:cf:45:e5:e8:b0:e7:1a:81:58:7f:3c:c0:ee:f1:55:c0:7e:
         1e:5d:03:58:af:0a:3c:6e:e7:66:70:f6:9c:c9:df:0c:c4:16:
         44:9d:c2:93:9a:0b:89:55:95:66:51:0f:4c:e0:61:e7:da:0c:
         eb:71:64:52:f0:18:6b:ad:ef:df:4c:d6:ee:bc:ec:30:9a:cc:
         7e:92:05:7d:e5:d9:38:46:ed:55:35:34:0e:f5:ce:15:87:7e:
         38:ec:0a:7d:ea:c8:5b:5c:21:46:ba:9e:ef:ba:f1:e1:7b:b5:
         ac:0c:8b:0c:5a:26:af:41:3f:ad:d0:e0:8b:9d:4d:82:ba:9c:
         43:0f:a1:4b:be:10:13:87:1f:d4:4b:33:e7:c5:31:05:5b:5d:
         34:e8:d9:1f:a5:b6:31:a7:7b:85:0a:e0:46:18:5d:4a:28:8f:
         ea:8e:6d:d5:f0:a0:db:e4:73:d5:68:cf:d7:b9:6e:30:92:d7:
         43:2a:64:13
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqtm9pPBpq9wiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
YzdlNjYyMGEtMzdlNy00NDllLWFmYTgtNWFhYjY0ZWNlMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8S80vtGihNNRAe0jkCw3zQeLyqYdAvkr4/z
QLJitjV2fuB7jqLWtQM0kcc7VtACnnEAd8z29eChMtjbzQPygY5746YjElSdwbVf
IxAshdqOPJOcOTu8wXfNMp0p5ztUSOLfTNeFS2jamPm1/UzqEMetRV2CCOLr29G3
lYc1F/kGzrKSam53RtVGSThxQveL/dCEUfZeZRY1DySdQuLhp3Skh0f+STaq42qx
ngjNWcmdpbBovk7N8o6ux85r9sEvXl7H5c7O5F4apHKZYnRW8gW8b5ZkkPaGR6Rb
P0681Qb3DPpxxySBSLRfShlfYIaFXVPjW/lm5I9/zTxVRiRT4QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPK4mmMOLnCcJ5AA24aRSkDZDt/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThhOTcxYmItNjM3ZC0z
NWE5LWIzZmItNjYyYmFjZDgyNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBcx2dLrmpfpvqnAnULn5tCT1Qq9ZJod1P2r11F
o9wz1QrK/VBClNn8jkIANMnKJmvbtcFwsgxhPs7LhecRnWOirvuFC5Bc+LhWz0Xl
6LDnGoFYfzzA7vFVwH4eXQNYrwo8budmcPacyd8MxBZEncKTmguJVZVmUQ9M4GHn
2gzrcWRS8Bhrre/fTNbuvOwwmsx+kgV95dk4Ru1VNTQO9c4Vh3447Ap96shbXCFG
up7vuvHhe7WsDIsMWiavQT+t0OCLnU2CupxDD6FLvhAThx/USzPnxTEFW1006Nkf
pbYxp3uFCuBGGF1KKI/qjm3V8KDb5HPVaM/XuW4wktdDKmQT
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:51 2025 by rpki-client