Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c2fd4a1-574b-3f4d-8f8d-b67dc7bdc7cb.roa
File:                     9c2fd4a1-574b-3f4d-8f8d-b67dc7bdc7cb.roa (raw, json)
Hash identifier:          STlw18AhfMU9ftmRimWSWQQ5M15YJavEJWtMugcIFqs=
Subject key identifier:   D8:FB:E3:DB:7B:C2:EE:F1:DD:3E:5C:D5:3D:F2:F4:77:0F:E7:97:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0F72E58E8A37D5439D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c2fd4a1-574b-3f4d-8f8d-b67dc7bdc7cb.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396602
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0f:72:e5:8e:8a:37:d5:43:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=56248414-3964-402f-ac26-57cf829d4466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:4d:99:67:92:6a:c4:fc:85:0e:1b:28:97:
                    41:c3:0d:37:ff:0f:22:d0:ab:79:44:9e:9c:33:df:
                    83:bc:fa:38:34:74:d4:26:a2:d0:59:a5:e5:1f:a1:
                    25:1f:07:f9:b8:b1:a0:0b:ec:7d:4f:ff:b9:84:fe:
                    7e:64:3c:60:29:22:71:33:ba:d8:83:21:1c:86:a6:
                    39:0a:1b:7e:38:b3:14:f2:3f:33:f0:10:48:32:15:
                    bb:b5:24:87:54:20:83:4d:7d:d4:27:fb:6a:07:19:
                    42:c8:73:72:4e:c2:41:40:62:e1:b0:a5:a9:95:9b:
                    ed:1d:21:b8:90:cc:a5:34:71:4c:99:56:0c:96:8b:
                    e6:0a:f5:81:d2:6a:80:88:c4:12:af:bd:63:ce:ea:
                    70:cb:86:1a:30:59:92:66:42:0c:7f:06:56:d4:35:
                    c5:0a:21:d0:15:c9:c8:ab:ac:20:a1:11:6e:31:1a:
                    37:e2:27:a2:f7:2d:92:38:0e:c0:f1:ef:2d:a3:2a:
                    41:b4:1a:99:12:93:d3:45:a5:e8:d3:7c:51:44:94:
                    f4:42:11:d1:57:ed:d3:ee:a0:ac:f0:5c:8b:42:ec:
                    11:bc:7c:e3:85:5d:67:1c:f2:9f:4e:19:76:b4:ee:
                    89:0a:a1:5e:39:e6:4e:53:7a:47:cf:ef:fd:39:50:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FB:E3:DB:7B:C2:EE:F1:DD:3E:5C:D5:3D:F2:F4:77:0F:E7:97:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c2fd4a1-574b-3f4d-8f8d-b67dc7bdc7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:b8:9a:30:7c:b1:81:f5:a4:b1:fa:eb:b5:a7:81:6a:1d:
         0c:f7:0d:13:5c:42:08:ef:ab:b2:c4:fe:dd:06:5b:41:47:a4:
         1b:d8:b6:01:e9:4c:ad:d8:cf:2b:b2:0a:b9:77:9c:d7:fa:d6:
         ab:92:e6:1a:e9:ee:56:57:23:ca:28:fb:a2:64:65:af:fc:68:
         43:3d:21:3c:8e:1a:c2:4a:3d:71:ac:78:84:85:18:d4:0b:6f:
         cf:84:ed:1f:e7:e5:3c:ad:26:57:97:3e:77:af:df:06:57:4e:
         9d:b8:82:f3:7f:2c:32:5b:b9:9d:8e:3f:ab:04:57:59:34:52:
         0c:b6:d5:a2:fa:00:f6:a9:08:35:4a:76:d6:0b:33:3b:36:61:
         ea:54:8d:5e:f2:f3:15:d0:32:ad:ac:dd:5a:71:9f:3a:4f:63:
         da:6b:1c:4d:35:01:25:8c:8d:8c:0e:a2:a2:19:0f:d3:c7:2e:
         bc:a2:94:66:49:f5:45:15:0f:1a:fc:e0:da:b1:c2:72:03:f7:
         fc:8b:0b:f0:9f:c1:57:b6:b8:ec:8c:15:f8:5a:db:11:f0:74:
         f2:16:de:c2:72:0d:34:4e:38:34:00:e6:fa:d6:d4:9e:1d:9c:
         87:24:e1:b2:1b:fa:38:9e:53:42:8b:22:54:21:58:28:c7:32:
         23:d4:b9:af
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2w9y5Y6KN9VDnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NTYyNDg0MTQtMzk2NC00MDJmLWFjMjYtNTdjZjgyOWQ0NDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3xNmWeSasT8hQ4bKJdBww03/w8i0Kt5RJ6c
M9+DvPo4NHTUJqLQWaXlH6ElHwf5uLGgC+x9T/+5hP5+ZDxgKSJxM7rYgyEchqY5
Cht+OLMU8j8z8BBIMhW7tSSHVCCDTX3UJ/tqBxlCyHNyTsJBQGLhsKWplZvtHSG4
kMylNHFMmVYMlovmCvWB0mqAiMQSr71jzupwy4YaMFmSZkIMfwZW1DXFCiHQFcnI
q6wgoRFuMRo34iei9y2SOA7A8e8toypBtBqZEpPTRaXo03xRRJT0QhHRV+3T7qCs
8FyLQuwRvHzjhV1nHPKfThl2tO6JCqFeOeZOU3pHz+/9OVAymQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNj749t7wu7x3T5c1T3y9HcP55cpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWMyZmQ0YTEtNTc0Yi0z
ZjRkLThmOGQtYjY3ZGM3YmRjN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAb97iaMHyxgfWksfrrtaeBah0M9w0TXEII76uy
xP7dBltBR6Qb2LYB6Uyt2M8rsgq5d5zX+tarkuYa6e5WVyPKKPuiZGWv/GhDPSE8
jhrCSj1xrHiEhRjUC2/PhO0f5+U8rSZXlz53r98GV06duILzfywyW7mdjj+rBFdZ
NFIMttWi+gD2qQg1SnbWCzM7NmHqVI1e8vMV0DKtrN1acZ86T2PaaxxNNQEljI2M
DqKiGQ/Txy68opRmSfVFFQ8a/ODascJyA/f8iwvwn8FXtrjsjBX4WtsR8HTyFt7C
cg00Tjg0AOb61tSeHZyHJOGyG/o4nlNCiyJUIVgoxzIj1Lmv
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:02 2025 by rpki-client