Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa
File:                     85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa (raw, json)
Hash identifier:          h7iYU5Mb9wq+Fv4cs9dYe29ePsvP2+JwNz2MIBWh3rU=
Subject key identifier:   E4:D1:55:C9:91:D5:77:F5:27:89:02:DC:45:4D:90:91:AA:12:AC:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF9516468F22D99F27BE62340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     396596
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:64:68:f2:2d:99:f2:7b:e6:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=7b4f894a-5802-4ecb-aef1-de30682cd043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:00:c0:01:24:db:19:32:f5:6f:37:13:70:
                    da:87:6f:7b:c2:12:80:d6:51:51:3b:df:b5:ef:60:
                    76:5b:1d:3d:91:4c:ba:95:7c:45:c6:cb:df:e3:96:
                    34:13:a2:c5:73:57:2e:6f:40:94:27:8a:dd:65:93:
                    01:64:d4:5f:11:8a:63:bf:39:af:81:14:8c:c1:dd:
                    45:9a:20:29:92:a0:3d:8a:b5:0f:8b:a8:11:3e:ac:
                    97:1e:90:ad:b4:f5:d2:a8:cd:28:02:23:66:2d:66:
                    95:c6:09:60:ed:c2:4b:ab:13:bc:dc:f5:1b:fd:02:
                    0f:db:03:42:d6:b1:0f:ee:52:ea:f8:4f:e6:7d:af:
                    a1:a5:87:76:57:a6:f4:73:37:11:af:06:ca:b5:6e:
                    ef:1c:32:35:e8:70:a8:2e:b0:90:b9:ac:8a:42:cb:
                    08:fe:4b:7e:24:29:e6:5c:de:b4:36:d9:e9:82:0e:
                    40:cd:31:b1:f7:f1:46:82:89:94:b4:c2:6e:22:7d:
                    f0:f7:52:18:07:6f:c7:95:0f:bf:54:55:fc:3c:35:
                    56:b4:a6:58:dd:82:04:c8:1d:42:9e:89:12:11:a1:
                    d2:8f:40:70:da:63:2d:45:2a:14:ab:2f:36:ff:77:
                    9a:6f:a5:c9:f0:b7:cb:a8:93:c6:09:d0:50:87:de:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D1:55:C9:91:D5:77:F5:27:89:02:DC:45:4D:90:91:AA:12:AC:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:4f:a0:78:f4:55:1a:bc:bd:e4:53:47:1c:40:18:d2:52:
         f2:dc:25:c6:58:e8:da:58:6d:f9:64:5c:43:6a:47:f7:d1:d1:
         14:65:75:77:24:2a:84:d5:ca:2f:62:07:63:14:62:c9:84:a8:
         f6:a9:36:aa:7d:a5:f6:f0:4f:c1:5a:eb:77:6c:d1:80:9c:98:
         fc:85:79:f8:67:a3:2d:eb:d6:b3:8f:07:60:88:af:45:8a:98:
         d4:18:cd:f9:35:96:7d:ad:34:d8:25:c3:ce:cb:66:52:8d:9f:
         38:b5:dc:0e:53:28:14:91:ed:c1:34:c0:f1:f4:4f:f3:2d:55:
         b4:b6:07:cc:ab:cd:73:20:3c:8e:28:0d:be:fe:9e:f3:38:4e:
         dd:e3:40:ca:79:34:a7:37:2f:50:ce:9a:08:ca:3c:83:e3:0a:
         8d:95:02:4f:7e:41:dd:70:d7:e4:3d:41:53:21:11:2b:88:58:
         76:a7:e4:0f:ef:8c:47:cd:f6:ce:3d:73:c5:8c:8c:b3:c2:9a:
         eb:67:8e:e6:19:8b:51:be:07:02:35:6b:ee:8f:1a:a6:e6:b3:
         ce:da:b2:59:be:85:b0:cb:02:e4:ea:da:8b:94:80:19:08:91:
         01:ad:ac:14:b9:90:b4:c2:6f:97:41:e3:06:8f:9d:3d:99:08:
         d7:e3:27:37
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UWRo8i2Z8nvmI0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
N2I0Zjg5NGEtNTgwMi00ZWNiLWFlZjEtZGUzMDY4MmNkMDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2coAwAEk2xky9W83E3Dah297whKA1lFRO9+1
72B2Wx09kUy6lXxFxsvf45Y0E6LFc1cub0CUJ4rdZZMBZNRfEYpjvzmvgRSMwd1F
miApkqA9irUPi6gRPqyXHpCttPXSqM0oAiNmLWaVxglg7cJLqxO83PUb/QIP2wNC
1rEP7lLq+E/mfa+hpYd2V6b0czcRrwbKtW7vHDI16HCoLrCQuayKQssI/kt+JCnm
XN60Ntnpgg5AzTGx9/FGgomUtMJuIn3w91IYB2/HlQ+/VFX8PDVWtKZY3YIEyB1C
nokSEaHSj0Bw2mMtRSoUqy82/3eab6XJ8LfLqJPGCdBQh96E3QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOTRVcmR1Xf1J4kC3EVNkJGqEqzTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODVhNmYyYmYtN2FjOC0z
NDc4LWE0YzYtOTVjM2ZhZTliZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCfoE+gePRVGry95FNHHEAY0lLy3CXGWOjaWG35
ZFxDakf30dEUZXV3JCqE1covYgdjFGLJhKj2qTaqfaX28E/BWut3bNGAnJj8hXn4
Z6Mt69azjwdgiK9FipjUGM35NZZ9rTTYJcPOy2ZSjZ84tdwOUygUke3BNMDx9E/z
LVW0tgfMq81zIDyOKA2+/p7zOE7d40DKeTSnNy9QzpoIyjyD4wqNlQJPfkHdcNfk
PUFTIREriFh2p+QP74xHzfbOPXPFjIyzwprrZ47mGYtRvgcCNWvujxqm5rPO2rJZ
voWwywLk6tqLlIAZCJEBrawUuZC0wm+XQeMGj509mQjX4yc3
-----END CERTIFICATE-----
Generated at Wed Sep 10 18:00:58 2025 by rpki-client