Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
File:                     953f9f50-447a-3f5a-8426-70452fb42edc.roa (raw, json)
Hash identifier:          WwQ91QKyiXN5/BCyTqQtXl/R458pNjWUeKPxVg1aWH0=
Subject key identifier:   C1:FA:4B:FA:AC:5F:B3:12:0F:F8:41:49:04:C3:B8:95:D3:E6:F1:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB23FE5E6C252A561B7AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396566
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:23:fe:5e:6c:25:2a:56:1b:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c9b0ecee-ff93-4c92-b55b-e664d51d553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:40:94:3e:b9:a3:8f:83:5b:8a:d2:d1:e4:
                    7f:e6:76:8f:8e:68:73:1e:aa:86:34:dc:bc:b0:8c:
                    55:eb:f6:8b:c3:e9:af:86:ec:95:dc:e6:5b:ed:12:
                    32:a2:d8:88:d6:00:a9:71:79:cd:95:4e:63:04:2b:
                    fb:57:d0:32:fc:98:f5:c9:e6:dc:29:0d:44:ae:fe:
                    26:bf:04:f6:38:06:1f:0e:08:e3:33:24:f0:38:91:
                    d7:ac:50:2d:a7:bf:8e:82:de:4d:98:d5:01:52:7a:
                    9b:21:66:3d:79:28:60:e6:b3:f3:5d:69:5c:98:86:
                    ca:91:dd:42:6b:24:bb:92:63:1e:58:59:de:f3:88:
                    62:e5:56:20:ab:61:57:0d:14:6f:77:94:03:f2:8f:
                    68:8e:a5:68:c6:07:83:fe:f4:a3:d0:79:87:2b:2b:
                    a3:f7:be:4d:9a:bb:7b:24:7e:72:2d:bd:1b:93:5c:
                    5a:cd:ea:b8:f6:1e:27:d5:d6:32:76:40:bb:ca:69:
                    5a:eb:da:29:37:be:11:1b:09:b5:d6:cb:8d:78:43:
                    d3:bb:e5:c7:16:7d:9c:42:70:95:a4:54:47:57:ff:
                    99:17:d4:09:7e:ee:bc:81:67:7f:e7:ba:c8:22:52:
                    f0:b6:58:6c:dc:a7:b7:ae:62:a6:ee:df:9a:99:12:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:4B:FA:AC:5F:B3:12:0F:F8:41:49:04:C3:B8:95:D3:E6:F1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:92:94:cb:b3:6c:32:50:95:a1:67:f1:dd:ec:b0:fb:78:ac:
         3c:f8:74:00:ae:b0:ae:77:3b:03:4a:c4:71:41:26:df:98:14:
         93:70:83:8b:4b:79:44:ae:d1:96:69:92:4f:cb:d7:96:e7:f3:
         73:32:c1:5f:ea:cb:a8:f9:30:99:b5:4c:d5:17:9b:56:0b:bf:
         03:33:2d:41:75:1b:25:ef:a0:e0:83:bb:c5:b4:90:7b:36:52:
         ab:d1:fc:3a:0e:30:91:24:26:6e:6c:64:94:c8:6a:7e:df:3f:
         22:df:21:56:14:f4:45:80:f2:fe:17:58:0d:83:79:d4:c7:e1:
         61:f6:60:d5:0e:fe:80:66:d7:3f:ac:9e:ad:78:93:8d:0f:b4:
         79:73:45:ec:eb:69:47:6e:6d:cc:7b:04:6a:36:54:2f:d7:78:
         80:4e:ed:14:a4:65:e8:b9:18:ff:56:a5:6c:74:fc:e8:29:0e:
         cb:b4:04:2f:c7:bc:4d:c7:cd:ec:08:78:8d:b5:8f:47:22:8b:
         3d:ce:dd:be:9c:fe:2d:fb:17:d5:dc:98:9d:f2:8f:6d:19:82:
         26:4a:9b:ee:b2:f7:ad:89:ee:4c:75:a9:37:cd:cb:5b:32:44:
         fe:cf:22:18:f8:c1:fc:d6:ee:48:09:61:12:32:9c:07:fe:a0:
         6e:94:8c:a8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yP+XmwlKlYbesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YzliMGVjZWUtZmY5My00YzkyLWI1NWItZTY2NGQ1MWQ1NTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEZAlD65o4+DW4rS0eR/5naPjmhzHqqGNNy8
sIxV6/aLw+mvhuyV3OZb7RIyotiI1gCpcXnNlU5jBCv7V9Ay/Jj1yebcKQ1Erv4m
vwT2OAYfDgjjMyTwOJHXrFAtp7+Ogt5NmNUBUnqbIWY9eShg5rPzXWlcmIbKkd1C
ayS7kmMeWFne84hi5VYgq2FXDRRvd5QD8o9ojqVoxgeD/vSj0HmHKyuj975Nmrt7
JH5yLb0bk1xazeq49h4n1dYydkC7ymla69opN74RGwm11suNeEPTu+XHFn2cQnCV
pFRHV/+ZF9QJfu68gWd/57rIIlLwtlhs3Ke3rmKm7t+amRJ2owIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMH6S/qsX7MSD/hBSQTDuJXT5vFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTUzZjlmNTAtNDQ3YS0z
ZjVhLTg0MjYtNzA0NTJmYjQyZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC9kpTLs2wyUJWhZ/Hd7LD7eKw8+HQArrCudzsD
SsRxQSbfmBSTcIOLS3lErtGWaZJPy9eW5/NzMsFf6suo+TCZtUzVF5tWC78DMy1B
dRsl76Dgg7vFtJB7NlKr0fw6DjCRJCZubGSUyGp+3z8i3yFWFPRFgPL+F1gNg3nU
x+Fh9mDVDv6AZtc/rJ6teJOND7R5c0Xs62lHbm3MewRqNlQv13iATu0UpGXouRj/
VqVsdPzoKQ7LtAQvx7xNx83sCHiNtY9HIos9zt2+nP4t+xfV3Jid8o9tGYImSpvu
svetie5Mdak3zctbMkT+zyIY+MH81u5ICWESMpwH/qBulIyo
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:57:35 2025 by rpki-client