Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7062973e-b1c4-3576-9391-7574cde8ceb1.roa
File:                     7062973e-b1c4-3576-9391-7574cde8ceb1.roa (raw, json)
Hash identifier:          i15zT3AEKN1vvggXSnj3owqIzVJAXXDFAY+C504ytHk=
Subject key identifier:   30:7B:4E:F2:AB:1D:E4:C4:44:BB:CD:62:B7:73:1F:61:E0:A4:B9:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1CEBBBA490F56BF06640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7062973e-b1c4-3576-9391-7574cde8ceb1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     40647
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1c:eb:bb:a4:90:f5:6b:f0:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7786fcd0-5485-4f96-aebb-23780f1baf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:fb:60:81:92:12:4d:80:c5:4e:ba:b9:43:
                    12:e2:55:ed:eb:9b:9d:1d:2f:66:50:16:2a:0b:23:
                    a5:85:2e:c3:e2:f2:86:d6:67:6f:cd:bc:c7:3b:ef:
                    c3:7c:60:a9:99:67:ac:e2:f8:5f:32:1d:18:84:00:
                    ad:0c:ab:4e:8d:96:7b:87:23:b6:e8:e5:a5:6c:ba:
                    af:11:f7:fe:35:1d:41:2a:bc:88:a6:6a:c4:fd:15:
                    72:88:4f:89:28:ff:f0:bb:00:4f:7e:42:b5:c4:bd:
                    fd:bb:c0:8d:74:1f:04:21:7e:fd:f1:a1:06:24:fd:
                    69:1f:e6:c5:7f:2d:18:46:52:4e:3b:bc:07:e9:a6:
                    10:de:8b:46:70:c9:10:a6:85:2b:a8:60:36:88:da:
                    d7:96:42:f2:0e:3f:88:11:0c:2f:6d:d6:3e:45:58:
                    0b:6d:d6:9c:96:16:39:8b:68:71:92:58:c7:9f:00:
                    91:d9:3c:02:f7:78:e6:94:fc:8f:81:af:f9:cc:b1:
                    25:2e:52:c1:8e:1a:62:eb:19:37:02:49:60:c5:cd:
                    a4:3b:b1:de:7c:0e:87:c8:13:79:b2:89:e6:22:66:
                    99:bf:c9:6c:67:8f:03:35:85:0f:8d:45:9a:dc:97:
                    8f:4e:21:fc:e4:14:bc:98:a3:bf:15:ec:e3:61:af:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:4E:F2:AB:1D:E4:C4:44:BB:CD:62:B7:73:1F:61:E0:A4:B9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7062973e-b1c4-3576-9391-7574cde8ceb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:b5:c6:f3:7b:33:a2:0e:67:69:ce:2b:e9:34:fc:21:36:
         6b:db:55:e1:bc:91:63:b1:8d:9b:40:a6:74:8b:32:3d:18:95:
         d0:a9:f7:f3:5e:c1:79:da:1b:98:af:93:d5:69:e8:3f:9e:bb:
         c6:70:75:b8:b2:41:e2:57:37:30:72:cd:04:1f:14:e8:04:6a:
         fa:f0:06:40:3d:0f:6a:1e:54:2b:9f:64:6c:09:77:5d:d2:47:
         f5:c9:a0:a9:18:60:f9:f6:08:f5:3c:73:49:19:e8:ba:9a:81:
         d5:fe:93:04:97:ef:c0:f7:b9:1d:76:b0:90:8d:d0:66:3d:1c:
         f3:c1:48:4f:17:c9:06:8a:8f:0c:19:91:8c:6e:2b:01:a8:f3:
         c4:f9:1e:19:9c:74:3a:a7:12:23:96:5a:55:da:50:ac:e8:58:
         2b:af:ab:b4:53:bd:a0:09:b5:18:0b:4b:4f:28:35:75:03:9e:
         31:83:45:68:68:33:d4:e7:08:35:2f:70:18:60:88:f2:bd:a4:
         17:92:a8:16:07:3b:74:20:90:9d:63:d5:c2:c9:e8:fb:e5:33:
         75:46:d1:c3:64:d6:e7:f2:e3:0f:bc:1c:59:69:eb:53:9a:0e:
         20:84:cd:df:f1:e6:e9:f2:4f:b0:4f:21:59:6f:50:de:96:e8:
         6c:95:17:a7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2xzru6SQ9WvwZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
Nzc4NmZjZDAtNTQ4NS00Zjk2LWFlYmItMjM3ODBmMWJhZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ij7YIGSEk2AxU66uUMS4lXt65udHS9mUBYq
CyOlhS7D4vKG1mdvzbzHO+/DfGCpmWes4vhfMh0YhACtDKtOjZZ7hyO26OWlbLqv
Eff+NR1BKryIpmrE/RVyiE+JKP/wuwBPfkK1xL39u8CNdB8EIX798aEGJP1pH+bF
fy0YRlJOO7wH6aYQ3otGcMkQpoUrqGA2iNrXlkLyDj+IEQwvbdY+RVgLbdaclhY5
i2hxkljHnwCR2TwC93jmlPyPga/5zLElLlLBjhpi6xk3Aklgxc2kO7HefA6HyBN5
sonmImaZv8lsZ48DNYUPjUWa3JePTiH85BS8mKO/FezjYa+OCwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDB7TvKrHeTERLvNYrdzH2HgpLkrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzA2Mjk3M2UtYjFjNC0z
NTc2LTkzOTEtNzU3NGNkZThjZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBLlbXG83szog5nac4r6TT8ITZr21XhvJFjsY2b
QKZ0izI9GJXQqffzXsF52huYr5PVaeg/nrvGcHW4skHiVzcwcs0EHxToBGr68AZA
PQ9qHlQrn2RsCXdd0kf1yaCpGGD59gj1PHNJGei6moHV/pMEl+/A97kddrCQjdBm
PRzzwUhPF8kGio8MGZGMbisBqPPE+R4ZnHQ6pxIjllpV2lCs6Fgrr6u0U72gCbUY
C0tPKDV1A54xg0VoaDPU5wg1L3AYYIjyvaQXkqgWBzt0IJCdY9XCyej75TN1RtHD
ZNbn8uMPvBxZaetTmg4ghM3f8ebp8k+wTyFZb1DeluhslRen
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:15 2025 by rpki-client