Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
File:                     5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa (raw, json)
Hash identifier:          oH1CaIyhZWdIrnyERHF+xXu/WgkacgebP28T+xu6YRk=
Subject key identifier:   4C:FD:9C:03:8B:14:F9:3B:D4:0A:50:70:98:99:A2:A1:9C:B9:FC:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA465A2C3CFF83707464260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     19836
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:65:a2:c3:cf:f8:37:07:46:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=323d3357-1541-46db-a259-9e9e947e0c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:b3:fc:c7:ec:bd:16:1c:ec:21:3b:34:85:
                    38:f4:b4:f4:49:00:41:51:f6:a7:32:b1:c2:4f:59:
                    ed:97:e6:19:b1:24:87:8f:5b:0b:22:7c:44:bd:e7:
                    73:e2:d1:3f:f9:b8:56:b7:ef:c5:82:cf:d5:f7:ee:
                    5f:af:98:41:08:c5:5e:2e:6a:66:a8:71:46:8b:a5:
                    8b:47:dc:7a:19:6d:74:a5:23:9a:bc:49:30:08:9c:
                    a7:73:d8:0e:b9:c1:cb:3f:1b:3b:4f:e8:f5:75:88:
                    76:24:c8:b1:33:20:62:31:77:77:86:53:0d:6c:1a:
                    32:e5:ff:2d:38:d8:b8:d0:76:45:3e:39:30:00:58:
                    d3:33:c6:4c:86:24:c2:4a:cc:4b:31:56:c2:d9:ce:
                    44:1f:c7:3b:be:19:b1:27:f2:32:61:bc:8b:f2:3b:
                    ec:62:55:15:cf:8c:3a:e2:9d:83:4e:e5:ca:b1:2e:
                    77:40:96:19:ca:6c:df:cd:be:ea:ff:ff:20:21:bc:
                    43:e3:db:7b:37:bb:39:b0:af:b0:9a:6b:be:70:3d:
                    97:7b:a5:1f:70:d7:62:60:41:6b:bd:09:78:4d:10:
                    bc:8f:8b:74:33:06:61:10:93:c2:3e:0b:85:f9:60:
                    a6:09:96:67:90:55:bd:84:e1:d2:8a:d0:8a:ac:5f:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FD:9C:03:8B:14:F9:3B:D4:0A:50:70:98:99:A2:A1:9C:B9:FC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a1:32:9f:8e:e2:ef:22:b4:cb:b4:d0:78:f8:7c:f5:39:2a:
         b0:57:3e:35:57:38:ef:c0:6c:bc:c9:51:6b:e5:76:3d:9f:01:
         f4:ad:1d:25:f0:b1:b3:94:94:84:00:d9:d0:24:69:cf:38:9c:
         e2:65:38:86:5c:49:a9:0b:60:a1:2c:4a:e4:8a:8c:fe:d0:7a:
         76:92:97:8d:4e:bd:07:2e:bb:8f:b2:4f:bf:2d:e2:6c:21:68:
         0f:e8:04:cd:a4:62:87:0e:6f:68:47:43:b5:67:bb:5d:ab:71:
         ec:df:c3:0a:bc:e8:82:d8:32:ae:e5:21:a1:87:a7:f0:a1:ec:
         9c:15:a9:83:a9:d2:ff:87:fb:b9:77:c6:af:ad:65:f1:0f:74:
         92:6a:d7:a9:ef:36:48:d7:c0:e9:41:b4:c6:45:0a:f2:fc:f5:
         0c:e4:35:e2:a6:a4:03:95:04:af:1f:68:31:5c:5f:2a:94:de:
         61:2a:39:8f:16:29:54:a9:36:b0:01:79:52:29:fb:37:bb:dd:
         27:1e:7a:13:4a:65:b9:49:0d:99:b1:d7:f1:00:96:eb:2a:40:
         03:2d:69:b6:33:01:30:06:ab:60:1b:3b:d5:0d:1c:d1:bc:29:
         bb:9d:e3:39:9d:ba:e9:5f:38:6a:bb:7c:64:60:00:20:53:3d:
         87:bd:bf:07
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGWiw8/4NwdGQmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MzIzZDMzNTctMTU0MS00NmRiLWEyNTktOWU5ZTk0N2UwYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfWz/MfsvRYc7CE7NIU49LT0SQBBUfanMrHC
T1ntl+YZsSSHj1sLInxEvedz4tE/+bhWt+/Fgs/V9+5fr5hBCMVeLmpmqHFGi6WL
R9x6GW10pSOavEkwCJync9gOucHLPxs7T+j1dYh2JMixMyBiMXd3hlMNbBoy5f8t
ONi40HZFPjkwAFjTM8ZMhiTCSsxLMVbC2c5EH8c7vhmxJ/IyYbyL8jvsYlUVz4w6
4p2DTuXKsS53QJYZymzfzb7q//8gIbxD49t7N7s5sK+wmmu+cD2Xe6UfcNdiYEFr
vQl4TRC8j4t0MwZhEJPCPguF+WCmCZZnkFW9hOHSitCKrF8wJwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEz9nAOLFPk71ApQcJiZoqGcufwMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWU3OTJkZDgtNTlmMS0z
ODhjLWI4MzctMGJhMDE3YTZiZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBGoTKfjuLvIrTLtNB4+Hz1OSqwVz41VzjvwGy8
yVFr5XY9nwH0rR0l8LGzlJSEANnQJGnPOJziZTiGXEmpC2ChLErkioz+0Hp2kpeN
Tr0HLruPsk+/LeJsIWgP6ATNpGKHDm9oR0O1Z7tdq3Hs38MKvOiC2DKu5SGhh6fw
oeycFamDqdL/h/u5d8avrWXxD3SSatep7zZI18DpQbTGRQry/PUM5DXipqQDlQSv
H2gxXF8qlN5hKjmPFilUqTawAXlSKfs3u90nHnoTSmW5SQ2ZsdfxAJbrKkADLWm2
MwEwBqtgGzvVDRzRvCm7neM5nbrpXzhqu3xkYAAgUz2Hvb8H
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:19 2025 by rpki-client