Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa
File:                     68cf3020-58c7-389f-9be5-7ba3837a00bc.roa (raw, json)
Hash identifier:          s3fKKQAFEEpTXQssqHVvMd6fTWP+ysIx8ORQI9E/Ylg=
Subject key identifier:   5A:93:44:67:CD:63:BA:62:28:51:B5:F3:07:76:6F:16:DD:FF:A6:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183C7FE9A29CC927094D080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     36624
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:c7:fe:9a:29:cc:92:70:94:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ce077783-a9ae-40bc-a707-32145ad595ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:fa:a7:00:c7:68:60:c9:5c:43:ff:89:21:
                    5d:38:23:f4:16:d0:94:bb:d1:04:77:ea:4e:49:42:
                    31:94:0a:07:18:0c:01:d3:1e:e1:50:82:64:df:7a:
                    c1:4d:de:83:1e:b0:4c:b8:38:2e:e9:54:f5:6e:2c:
                    87:42:cf:46:8f:02:07:c6:8d:a5:68:32:f2:47:01:
                    d5:2e:b8:a8:63:4a:2a:32:aa:19:0d:74:10:c3:ec:
                    5e:05:ac:7f:a5:c7:96:0e:8e:18:9c:87:39:0d:41:
                    0f:bb:e4:ec:d8:8c:91:50:31:d9:fb:1c:e4:d7:93:
                    8f:4b:12:b7:3c:f0:75:da:53:f9:d9:39:03:80:64:
                    e8:fb:a1:23:cc:93:ce:2f:e3:d7:14:0f:c2:1b:73:
                    c7:03:38:c0:f7:68:84:5e:c9:b1:49:4d:72:47:9a:
                    ed:d9:b0:6e:da:dc:37:c1:a6:88:df:64:0c:5c:ac:
                    54:d9:8f:f4:0a:5c:23:53:44:e3:fa:05:5c:64:90:
                    a5:f5:70:08:88:00:a0:d0:70:36:78:55:56:4b:53:
                    94:b3:34:6f:b6:f1:4b:62:ae:d0:ad:41:8c:7c:ae:
                    30:fa:97:f7:74:0b:e9:1c:da:ff:81:e1:b7:11:4f:
                    96:b4:d5:1c:4a:b2:75:b1:8c:73:cb:63:51:23:04:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:44:67:CD:63:BA:62:28:51:B5:F3:07:76:6F:16:DD:FF:A6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:0f:ec:83:5f:6e:b4:68:9e:b8:ae:41:b2:7d:8c:2a:84:
         f6:fa:c1:0f:38:78:ca:49:73:ff:bc:5d:e0:66:1f:b0:0f:b9:
         42:77:8f:21:77:5b:fe:2d:44:3c:fa:19:52:08:2d:0b:f9:37:
         c9:3d:8b:e7:b6:f0:38:18:93:b5:47:23:8f:ad:4e:f5:2a:99:
         6a:40:f2:ae:37:c0:fd:26:79:88:d8:8a:c8:3e:53:24:2b:15:
         9a:77:df:3d:3f:7a:5e:06:01:5a:6b:21:6d:65:d3:59:45:a4:
         36:67:f3:bc:11:e3:82:e4:67:bc:a4:54:32:99:53:0f:b6:ae:
         2e:9d:df:81:2d:40:8d:41:28:d8:2d:d9:95:58:ef:cb:8a:21:
         48:1c:18:4b:a3:7e:49:d1:81:da:c2:62:aa:c3:ed:54:5f:c8:
         58:16:a6:29:0a:9c:d1:dc:a9:ad:18:b8:f7:d7:30:df:28:43:
         e1:72:44:b2:4f:46:b7:ef:81:16:ae:b8:95:77:ff:da:2e:20:
         07:38:aa:a4:35:d2:de:d7:79:8f:0b:73:2b:4e:6a:df:20:20:
         9a:34:4b:b8:37:1d:3e:67:57:e4:28:0d:bb:9a:c9:a6:b7:e1:
         07:da:72:4d:d5:cc:3d:11:a7:4c:45:2b:67:70:0c:20:b6:ee:
         ea:18:68:40
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8f+minMknCU0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2UwNzc3ODMtYTlhZS00MGJjLWE3MDctMzIxNDVhZDU5NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYf6pwDHaGDJXEP/iSFdOCP0FtCUu9EEd+pO
SUIxlAoHGAwB0x7hUIJk33rBTd6DHrBMuDgu6VT1biyHQs9GjwIHxo2laDLyRwHV
LrioY0oqMqoZDXQQw+xeBax/pceWDo4YnIc5DUEPu+Ts2IyRUDHZ+xzk15OPSxK3
PPB12lP52TkDgGTo+6EjzJPOL+PXFA/CG3PHAzjA92iEXsmxSU1yR5rt2bBu2tw3
waaI32QMXKxU2Y/0ClwjU0Tj+gVcZJCl9XAIiACg0HA2eFVWS1OUszRvtvFLYq7Q
rUGMfK4w+pf3dAvpHNr/geG3EU+WtNUcSrJ1sYxzy2NRIwRmOwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFqTRGfNY7piKFG18wd2bxbd/6bVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhjZjMwMjAtNThjNy0z
ODlmLTliZTUtN2JhMzgzN2EwMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBotg/sg19utGieuK5Bsn2MKoT2+sEPOHjKSXP/
vF3gZh+wD7lCd48hd1v+LUQ8+hlSCC0L+TfJPYvntvA4GJO1RyOPrU71KplqQPKu
N8D9JnmI2IrIPlMkKxWad989P3peBgFaayFtZdNZRaQ2Z/O8EeOC5Ge8pFQymVMP
tq4und+BLUCNQSjYLdmVWO/LiiFIHBhLo35J0YHawmKqw+1UX8hYFqYpCpzR3Kmt
GLj31zDfKEPhckSyT0a374EWrriVd//aLiAHOKqkNdLe13mPC3MrTmrfICCaNEu4
Nx0+Z1fkKA27msmmt+EH2nJN1cw9EadMRStncAwgtu7qGGhA
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:47 2025 by rpki-client