Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa
File:                     7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa (raw, json)
Hash identifier:          JPXyEaoYmcbLsWTfpz+gcLI+UpLtCK0NvBNnxky1/rQ=
Subject key identifier:   DC:A5:08:79:78:02:D2:DA:23:7B:0C:A4:C7:EF:67:C1:17:FD:CC:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1895636E27EF51A59B3F66C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     20172
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:63:6e:27:ef:51:a5:9b:3f:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=8ca2108c-6dc0-4d4a-b965-4938ee640bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:0d:89:d4:3c:65:b1:83:6e:05:71:e2:cf:
                    88:46:c1:a0:71:be:bb:9d:d4:f5:1e:f6:cc:86:2b:
                    24:95:e7:57:2e:09:eb:3f:83:51:4a:ce:a3:34:17:
                    29:38:78:b6:11:49:61:07:fc:0a:e6:8a:e4:9b:db:
                    b1:e6:be:d9:44:c3:08:58:db:4e:fa:c8:a0:30:d7:
                    e5:67:7d:eb:b1:02:3f:a0:e6:47:44:96:41:e3:14:
                    2f:7a:96:45:e9:9f:67:b4:b0:cb:9e:ab:ee:eb:8d:
                    83:55:61:89:e9:95:ae:92:9d:33:25:a1:77:25:cb:
                    da:a0:03:19:8e:4e:6b:8f:46:8c:94:9c:cf:b6:a0:
                    b8:cb:e9:95:cf:83:6f:e8:7a:b7:a8:8e:5c:d3:21:
                    78:9d:d5:bf:d8:82:3c:a8:76:a4:72:97:e1:03:05:
                    db:00:63:07:ac:38:c0:96:d5:60:ef:4f:2a:07:cf:
                    22:0c:c8:0b:ae:4f:3e:77:26:bd:86:d6:4b:de:d6:
                    db:ed:58:42:d0:65:0e:23:41:ec:e7:15:a6:44:9b:
                    40:b7:58:2d:f0:dc:58:d1:f4:28:b1:10:24:c2:1d:
                    3f:a2:1e:5c:64:c3:ce:53:34:61:c7:f2:47:0d:ec:
                    0d:cb:5f:60:f1:28:53:37:bf:30:b3:87:a2:a9:c0:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A5:08:79:78:02:D2:DA:23:7B:0C:A4:C7:EF:67:C1:17:FD:CC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a3aaff1-3bb9-323e-96c6-27e1a340d668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:15:ce:97:72:f4:8b:2a:6a:34:6c:1c:be:4b:fa:38:0a:dd:
         65:40:67:39:d1:c8:0c:12:9a:25:32:27:06:7e:4f:e5:a1:23:
         0e:9c:72:3f:88:6b:81:8f:7d:9b:d6:1a:0a:97:6b:97:81:13:
         72:69:67:a0:9c:9f:58:3a:e4:62:d1:90:c4:9e:3d:55:c9:24:
         85:6b:ce:7a:05:da:34:b4:00:37:77:d8:24:92:0c:e5:8f:0a:
         9b:71:f4:f7:3a:04:34:6b:6a:0c:77:8f:fb:ce:3e:c7:40:93:
         11:0c:24:ab:af:33:ef:0e:6f:48:72:97:f3:ec:a0:dc:46:a8:
         40:cd:91:2e:13:a4:cf:c6:31:d3:24:5a:58:cb:70:4b:ba:d7:
         e6:52:92:25:a1:39:1f:01:52:8c:15:68:15:11:65:80:6c:9c:
         b5:e5:a5:33:50:9c:bc:ba:3e:0a:82:9c:36:5d:d7:3e:66:37:
         8f:c4:a1:ac:19:81:86:43:53:c0:62:e2:70:0f:0b:35:78:07:
         5b:c9:58:f4:4f:4b:85:03:5f:d2:86:e3:ea:d1:8d:37:92:e8:
         5a:d3:67:05:d3:a9:6a:f1:2c:8f:d9:23:15:6c:02:1e:1f:10:
         28:8d:88:c1:d8:bd:55:62:4a:07:cf:26:17:7e:08:5f:cf:84:
         c6:d4:bb:22
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWNuJ+9RpZs/ZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
OGNhMjEwOGMtNmRjMC00ZDRhLWI5NjUtNDkzOGVlNjQwYmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsNidQ8ZbGDbgVx4s+IRsGgcb67ndT1HvbM
hiskledXLgnrP4NRSs6jNBcpOHi2EUlhB/wK5orkm9ux5r7ZRMMIWNtO+sigMNfl
Z33rsQI/oOZHRJZB4xQvepZF6Z9ntLDLnqvu642DVWGJ6ZWukp0zJaF3JcvaoAMZ
jk5rj0aMlJzPtqC4y+mVz4Nv6Hq3qI5c0yF4ndW/2II8qHakcpfhAwXbAGMHrDjA
ltVg708qB88iDMgLrk8+dya9htZL3tbb7VhC0GUOI0Hs5xWmRJtAt1gt8NxY0fQo
sRAkwh0/oh5cZMPOUzRhx/JHDewNy19g8ShTN78ws4eiqcClPwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNylCHl4AtLaI3sMpMfvZ8EX/cyRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2EzYWFmZjEtM2JiOS0z
MjNlLTk2YzYtMjdlMWEzNDBkNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBhFc6XcvSLKmo0bBy+S/o4Ct1lQGc50cgMEpol
MicGfk/loSMOnHI/iGuBj32b1hoKl2uXgRNyaWegnJ9YOuRi0ZDEnj1VySSFa856
Bdo0tAA3d9gkkgzljwqbcfT3OgQ0a2oMd4/7zj7HQJMRDCSrrzPvDm9Icpfz7KDc
RqhAzZEuE6TPxjHTJFpYy3BLutfmUpIloTkfAVKMFWgVEWWAbJy15aUzUJy8uj4K
gpw2Xdc+ZjePxKGsGYGGQ1PAYuJwDws1eAdbyVj0T0uFA1/ShuPq0Y03kuha02cF
06lq8SyP2SMVbAIeHxAojYjB2L1VYkoHzyYXfghfz4TG1Lsi
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:54 2025 by rpki-client