Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a77ead-529e-3f09-83d7-140f4b6b99f9.roa
File:                     96a77ead-529e-3f09-83d7-140f4b6b99f9.roa (raw, json)
Hash identifier:          fKzYvNgKs1zXp2kDvPFFmDkx7HTLA7VOWyw2q7crdCA=
Subject key identifier:   99:DC:AB:CE:C4:E5:66:AC:D8:24:FF:A6:8C:BC:67:2A:8F:A8:CF:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7B7AA9FC7CB9E630CB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a77ead-529e-3f09-83d7-140f4b6b99f9.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     211369
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7b:7a:a9:fc:7c:b9:e6:30:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=acfbcd84-c76f-484b-84b5-753b928442fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:7c:e5:94:f0:ba:80:1a:55:41:76:dd:6b:
                    42:29:f9:01:c9:fb:6e:e7:f0:75:12:43:ad:2a:53:
                    4b:e9:17:79:3a:23:95:2f:b7:15:1c:c7:6a:20:ff:
                    f4:60:0e:36:64:d7:31:2e:71:5b:43:f9:b9:42:ef:
                    5c:ce:8e:3f:6e:7c:b4:f5:6f:8f:bf:33:f6:5b:ca:
                    24:4c:55:6a:6d:d9:33:dd:0d:c4:61:ca:ef:87:ba:
                    97:8c:3a:bd:ea:d8:2c:f1:35:2a:01:dc:5d:a7:b6:
                    ac:79:04:9a:7d:5e:30:22:2c:51:9e:e3:28:ed:80:
                    98:19:4c:15:ad:91:93:a6:c3:df:b5:f5:a6:8d:a2:
                    4d:ff:96:fe:da:7c:17:f6:da:80:52:c4:54:36:b7:
                    56:0c:5f:c7:02:b7:be:31:ce:ed:c4:70:c9:cf:9a:
                    ad:d7:7e:13:7f:be:74:0b:a2:2e:3f:c5:0e:44:e4:
                    67:b7:79:40:37:20:8c:7d:c7:73:3f:5c:61:2f:ba:
                    fb:c7:ec:df:db:27:12:70:a7:dd:92:67:10:e7:64:
                    d5:76:b4:17:a9:fa:dc:25:46:da:3f:f2:35:e9:2c:
                    16:6a:c5:67:42:35:70:64:21:a9:96:fb:12:f1:d8:
                    62:3f:ba:48:2c:cf:22:c3:5a:63:e5:fc:84:89:76:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DC:AB:CE:C4:E5:66:AC:D8:24:FF:A6:8C:BC:67:2A:8F:A8:CF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a77ead-529e-3f09-83d7-140f4b6b99f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:90:80:f0:08:1b:3f:51:f5:40:2f:89:07:3b:97:9b:27:
         5e:0c:21:fa:18:b3:f4:fc:96:9d:8e:94:05:64:ca:e2:ed:c0:
         f9:f5:21:08:14:68:c4:8d:31:82:8f:b8:8c:4b:61:c9:71:f3:
         65:c1:b8:4e:88:61:53:e5:eb:c9:27:57:78:de:79:c2:89:f3:
         3b:d5:7a:98:c2:2c:10:82:d5:9b:bd:ec:c5:59:3c:f5:b3:f0:
         ad:37:97:06:58:a5:8a:88:e6:64:fd:85:95:22:25:d9:5f:07:
         84:83:14:cb:e8:6e:16:2c:07:9d:b2:32:73:83:9a:75:b8:f5:
         af:86:b0:ec:71:59:cf:c2:c4:19:5f:46:22:1b:cf:6c:83:f9:
         a0:b8:96:9c:02:9f:08:82:b3:b4:ed:26:02:b3:a3:dc:ed:f8:
         c4:59:f4:7f:35:1f:46:d6:e9:46:63:90:38:47:9a:c0:b8:7c:
         63:7b:58:a8:10:6c:36:ee:0d:a2:09:9d:df:6c:52:07:0f:c1:
         78:5f:e7:3b:d4:8f:37:31:d0:57:3e:aa:a0:4d:c2:de:71:10:
         17:e1:65:bc:eb:a6:06:96:be:3a:ac:8a:5d:91:d8:1a:33:ed:
         a7:85:ef:96:a1:fc:bc:74:56:74:3d:1e:5c:a5:10:7c:9a:4a:
         bc:43:a2:00
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnr6nt6qfx8ueYwywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
YWNmYmNkODQtYzc2Zi00ODRiLTg0YjUtNzUzYjkyODQ0MmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3x85ZTwuoAaVUF23WtCKfkByftu5/B1EkOt
KlNL6Rd5OiOVL7cVHMdqIP/0YA42ZNcxLnFbQ/m5Qu9czo4/bny09W+PvzP2W8ok
TFVqbdkz3Q3EYcrvh7qXjDq96tgs8TUqAdxdp7aseQSafV4wIixRnuMo7YCYGUwV
rZGTpsPftfWmjaJN/5b+2nwX9tqAUsRUNrdWDF/HAre+Mc7txHDJz5qt134Tf750
C6IuP8UORORnt3lANyCMfcdzP1xhL7r7x+zf2ycScKfdkmcQ52TVdrQXqfrcJUba
P/I16SwWasVnQjVwZCGplvsS8dhiP7pILM8iw1pj5fyEiXammQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJncq87E5Was2CT/poy8ZyqPqM9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTZhNzdlYWQtNTI5ZS0z
ZjA5LTgzZDctMTQwZjRiNmI5OWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC2vZCA8AgbP1H1QC+JBzuXmydeDCH6GLP0/Jad
jpQFZMri7cD59SEIFGjEjTGCj7iMS2HJcfNlwbhOiGFT5evJJ1d43nnCifM71XqY
wiwQgtWbvezFWTz1s/CtN5cGWKWKiOZk/YWVIiXZXweEgxTL6G4WLAedsjJzg5p1
uPWvhrDscVnPwsQZX0YiG89sg/mguJacAp8IgrO07SYCs6Pc7fjEWfR/NR9G1ulG
Y5A4R5rAuHxje1ioEGw27g2iCZ3fbFIHD8F4X+c71I83MdBXPqqgTcLecRAX4WW8
66YGlr46rIpdkdgaM+2nhe+Wofy8dFZ0PR5cpRB8mkq8Q6IA
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:58 2025 by rpki-client