Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa
File:                     844ff308-1930-3872-bc8c-12b8c0fd5864.roa (raw, json)
Hash identifier:          6DJP3TunMQFbfQe1ck1a6J3PDrMXaEsb01sMZk1e2kU=
Subject key identifier:   2A:64:4E:6B:61:20:9C:31:C7:F8:A9:C2:4B:7F:BE:40:1F:5F:41:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1895629AC0974293AFD8A200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     36621
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:62:9a:c0:97:42:93:af:d8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=9b52dd93-db17-4931-a3dd-4fb84a8f1d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:f0:e3:da:83:bf:2e:1d:fa:5c:0d:e5:29:
                    ab:84:3f:29:0c:cf:e7:94:07:8b:20:1b:55:58:00:
                    19:86:91:ae:26:59:4c:66:7c:16:a2:61:d8:62:75:
                    e5:b9:0d:9a:67:4b:65:df:7b:48:99:72:d8:03:de:
                    12:8b:79:34:25:4d:a0:bc:1e:ff:a8:bd:1e:e9:c3:
                    84:2c:c0:aa:f6:63:e4:9c:72:83:be:5f:16:19:59:
                    2f:41:38:a6:e6:96:e7:02:09:06:70:c4:07:06:09:
                    f5:22:2e:be:47:9e:08:dd:1e:2c:1d:92:15:c7:5a:
                    4f:8e:58:cf:a1:0b:3b:08:0f:0e:5d:19:b9:1b:1e:
                    e0:e3:21:46:e8:3b:12:45:e5:bd:22:db:1c:5e:7c:
                    29:70:67:26:98:f3:88:13:37:55:be:30:5a:04:54:
                    48:c3:f8:d9:7e:9b:26:7d:cd:63:15:1b:1d:1b:ce:
                    f5:f1:36:a6:66:72:39:5b:81:41:7e:b7:00:4b:c2:
                    7a:12:99:e3:e9:3a:70:34:8e:5d:b6:1c:0d:24:d9:
                    75:6c:bb:00:98:b5:f9:22:9a:6a:2a:d9:45:b4:cd:
                    1f:c7:8d:36:9c:df:3b:c0:90:60:5c:f4:ef:50:ea:
                    43:60:a1:ab:99:46:64:e7:7c:73:28:04:63:0e:ab:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:4E:6B:61:20:9C:31:C7:F8:A9:C2:4B:7F:BE:40:1F:5F:41:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:d1:e3:7a:ca:fe:68:82:e7:e3:9b:48:42:18:18:12:19:
         0f:67:fe:00:3d:ff:fd:c7:2a:6e:93:7f:48:14:57:d1:be:af:
         27:81:b6:2c:cb:02:32:25:ed:a8:f7:ed:4d:27:1d:7e:b9:b8:
         c7:e2:12:9a:15:56:9f:ca:7f:7a:4b:01:d0:5d:e7:26:ca:34:
         ed:ae:8a:7e:24:24:78:f5:3b:39:e6:26:6a:f3:a1:bc:0c:6a:
         dc:20:03:47:f2:f4:4d:d3:8f:60:a0:d5:66:9f:f2:96:bb:75:
         ef:56:ad:0f:5f:2c:f8:28:d7:e6:3d:7e:14:bf:18:dc:03:20:
         3f:d1:ae:be:72:ce:ee:11:c5:ea:0f:c2:e4:ba:13:d6:ee:34:
         5a:86:77:3a:b1:fa:f1:9c:07:bd:19:9a:cd:d4:7d:3b:53:6a:
         60:7c:35:b6:0b:23:82:a9:ec:e5:73:60:84:2d:5d:d6:7e:de:
         23:fa:8f:85:cf:bd:16:6d:15:c8:46:6d:d2:e1:1f:02:6f:3b:
         cb:83:da:43:23:ec:b8:42:c9:a3:f2:39:b6:4f:68:b7:0a:b6:
         ae:fb:2a:10:ac:02:42:14:12:9b:98:a9:08:32:c2:60:0f:89:
         d2:54:6b:f8:6b:a3:a2:87:e1:06:78:6e:6c:84:3b:67:15:c3:
         35:a6:6e:49
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWKawJdCk6/YogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
OWI1MmRkOTMtZGIxNy00OTMxLWEzZGQtNGZiODRhOGYxZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAvw49qDvy4d+lwN5SmrhD8pDM/nlAeLIBtV
WAAZhpGuJllMZnwWomHYYnXluQ2aZ0tl33tImXLYA94Si3k0JU2gvB7/qL0e6cOE
LMCq9mPknHKDvl8WGVkvQTim5pbnAgkGcMQHBgn1Ii6+R54I3R4sHZIVx1pPjljP
oQs7CA8OXRm5Gx7g4yFG6DsSReW9ItscXnwpcGcmmPOIEzdVvjBaBFRIw/jZfpsm
fc1jFRsdG8718TamZnI5W4FBfrcAS8J6Epnj6TpwNI5dthwNJNl1bLsAmLX5Ippq
KtlFtM0fx402nN87wJBgXPTvUOpDYKGrmUZk53xzKARjDqub6wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCpkTmthIJwxx/ipwkt/vkAfX0EKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ0ZmYzMDgtMTkzMC0z
ODcyLWJjOGMtMTJiOGMwZmQ1ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAvsdHjesr+aILn45tIQhgYEhkPZ/4APf/9xypu
k39IFFfRvq8ngbYsywIyJe2o9+1NJx1+ubjH4hKaFVafyn96SwHQXecmyjTtrop+
JCR49Ts55iZq86G8DGrcIANH8vRN049goNVmn/KWu3XvVq0PXyz4KNfmPX4Uvxjc
AyA/0a6+cs7uEcXqD8LkuhPW7jRahnc6sfrxnAe9GZrN1H07U2pgfDW2CyOCqezl
c2CELV3Wft4j+o+Fz70WbRXIRm3S4R8CbzvLg9pDI+y4Qsmj8jm2T2i3Crau+yoQ
rAJCFBKbmKkIMsJgD4nSVGv4a6Oih+EGeG5shDtnFcM1pm5J
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:00 2025 by rpki-client