Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa
File:                     878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa (raw, json)
Hash identifier:          AXOlAPFnbGr1AUj6+8SWcmIWFAfodixSvHQJDcQrxeI=
Subject key identifier:   D0:16:BA:2D:DF:E1:83:04:00:54:EB:58:55:6D:8F:D6:B4:15:E3:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A189561DC7590822695C6D710
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396585
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:61:dc:75:90:82:26:95:c6:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=c3f43996-4edc-4f0e-954e-9396077b2b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:13:58:7a:82:28:5a:c8:0a:2a:17:83:2b:
                    04:f6:29:55:3e:bc:bd:70:8a:19:87:2c:e0:84:ba:
                    32:b0:b9:9a:e2:76:d5:59:15:fb:66:59:dc:c5:3d:
                    37:09:10:37:8f:cf:78:e2:8c:f2:1c:aa:c5:85:64:
                    fa:f8:8a:70:5d:d4:b4:97:d7:94:5c:a6:ae:ee:e1:
                    98:b7:00:72:fc:8f:f8:41:19:b2:3f:fe:e4:55:f4:
                    19:6b:6b:38:a8:09:b4:9d:25:de:3c:8e:0e:c2:3d:
                    1b:17:b1:ea:03:db:82:76:53:57:17:f2:20:11:b6:
                    12:5d:04:0f:d7:fa:be:5d:c8:ad:87:8b:f6:06:26:
                    96:bb:38:45:fc:23:f9:7d:ec:50:14:81:05:5a:8a:
                    33:d7:cc:9c:61:19:c8:f1:91:af:25:af:2d:1b:9e:
                    b7:c5:51:13:e5:46:04:9a:92:8e:4e:f3:c2:a0:4a:
                    a9:38:85:38:07:ad:7d:3a:7e:d1:c7:53:0f:cc:20:
                    eb:16:8b:29:6b:90:17:36:ce:3b:7f:ae:50:2c:df:
                    39:d8:c6:58:8e:bf:b0:bf:52:1e:cb:8a:b6:d1:35:
                    06:18:69:ee:7a:a8:e2:c3:0a:c0:52:a5:29:ba:1e:
                    6f:3b:7a:d0:fb:93:f5:da:cb:85:56:4c:5d:b7:f7:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:BA:2D:DF:E1:83:04:00:54:EB:58:55:6D:8F:D6:B4:15:E3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878ba0e7-5a08-3613-8a70-018b2a9fbc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:37:2d:2b:19:a3:20:51:b8:d1:3c:5b:5a:d2:cf:a9:ed:bd:
         dd:df:c6:70:49:9a:bc:68:8d:00:07:45:e1:85:36:2a:f8:fd:
         d9:32:97:e7:61:2e:eb:7e:08:5a:fb:00:9f:36:08:3a:a2:7a:
         b0:ac:22:1b:92:64:e6:8d:5c:6a:5e:ba:86:75:b7:d2:94:e4:
         4b:cc:24:b8:1c:36:7c:ac:df:94:05:33:27:18:07:c7:2a:dc:
         38:6a:4a:7b:23:f0:e7:1c:81:38:9a:c2:79:d3:c8:3e:45:91:
         fb:b9:c2:8f:49:35:5b:34:8c:67:ba:b4:04:3f:6c:8f:75:6b:
         46:32:7e:03:d7:93:5d:22:5b:47:ce:d3:27:21:db:5b:ac:86:
         79:7a:28:bc:04:2d:c4:db:13:db:d1:11:44:73:ea:b8:ec:09:
         5a:41:cb:a4:db:ca:7a:68:4b:7b:d4:c3:26:26:94:93:76:2e:
         5a:42:b5:11:5e:ce:35:02:3f:b4:c4:dd:a7:75:e2:61:c8:cc:
         c5:65:c3:21:60:a6:d5:f4:c4:e2:f1:9f:77:49:56:c2:ae:ff:
         87:8b:32:de:4c:f9:60:18:7c:10:a4:ed:eb:82:a4:d2:a8:45:
         0c:2c:c4:2f:57:d1:2f:37:64:40:14:9e:b0:86:bb:8d:17:1d:
         16:33:50:8b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWHcdZCCJpXG1xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
YzNmNDM5OTYtNGVkYy00ZjBlLTk1NGUtOTM5NjA3N2IyYjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrQTWHqCKFrICioXgysE9ilVPry9cIoZhyzg
hLoysLma4nbVWRX7ZlncxT03CRA3j8944ozyHKrFhWT6+IpwXdS0l9eUXKau7uGY
twBy/I/4QRmyP/7kVfQZa2s4qAm0nSXePI4Owj0bF7HqA9uCdlNXF/IgEbYSXQQP
1/q+Xcith4v2BiaWuzhF/CP5fexQFIEFWooz18ycYRnI8ZGvJa8tG563xVET5UYE
mpKOTvPCoEqpOIU4B619On7Rx1MPzCDrFospa5AXNs47f65QLN852MZYjr+wv1Ie
y4q20TUGGGnueqjiwwrAUqUpuh5vO3rQ+5P12suFVkxdt/cfMwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNAWui3f4YMEAFTrWFVtj9a0FeMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc4YmEwZTctNWEwOC0z
NjEzLThhNzAtMDE4YjJhOWZiYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA3Ny0rGaMgUbjRPFta0s+p7b3d38ZwSZq8aI0A
B0XhhTYq+P3ZMpfnYS7rfgha+wCfNgg6onqwrCIbkmTmjVxqXrqGdbfSlORLzCS4
HDZ8rN+UBTMnGAfHKtw4akp7I/DnHIE4msJ508g+RZH7ucKPSTVbNIxnurQEP2yP
dWtGMn4D15NdIltHztMnIdtbrIZ5eii8BC3E2xPb0RFEc+q47AlaQcuk28p6aEt7
1MMmJpSTdi5aQrURXs41Aj+0xN2ndeJhyMzFZcMhYKbV9MTi8Z93SVbCrv+HizLe
TPlgGHwQpO3rgqTSqEUMLMQvV9EvN2RAFJ6whruNFx0WM1CL
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:25:55 2025 by rpki-client