Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9eef443f-343c-3e83-a57c-8875080c54da.roa
File:                     9eef443f-343c-3e83-a57c-8875080c54da.roa (raw, json)
Hash identifier:          71hm0CML+DaJsYsuLhuW8igkas3IVnf750+iWp6OYyY=
Subject key identifier:   83:D7:25:4C:5B:9A:54:97:F4:22:EF:AF:FB:94:D4:D1:4B:EF:64:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA464F4C3E87383E7792A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9eef443f-343c-3e83-a57c-8875080c54da.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     397198
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:64:f4:c3:e8:73:83:e7:79:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=5387edbf-9d01-46ba-bac9-f2ad3aef73d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:71:6f:bb:ef:4a:83:85:1d:6f:98:cc:fa:
                    02:04:5a:8d:2a:a3:39:d4:85:43:24:b8:1d:44:c2:
                    64:b9:f9:f7:1e:2e:97:3a:7d:b5:02:66:92:26:b0:
                    59:3a:54:f0:52:60:3c:8a:a1:55:d3:5e:dd:96:ec:
                    63:a3:c1:e2:7a:93:a1:db:6d:46:28:b1:a7:51:80:
                    e5:1a:42:5c:ec:e4:ed:48:bd:61:9f:73:f9:84:3c:
                    f6:c6:08:7b:9a:bc:d1:3b:c3:1d:73:d3:e3:fc:5a:
                    95:b8:a3:84:53:78:41:5e:59:14:e5:75:e6:54:64:
                    ca:c8:d4:33:df:46:96:c4:46:32:00:c7:a6:d0:c6:
                    44:25:38:a8:f5:41:80:ae:ca:5f:d0:bc:7d:0c:94:
                    94:8f:27:b5:ff:b2:3f:b3:6b:4e:cf:88:95:93:8c:
                    bf:e2:df:43:9e:67:16:9e:d8:7f:32:a5:b6:15:3d:
                    77:bd:47:00:84:38:d9:55:ce:74:0b:8c:24:9d:48:
                    bf:67:99:97:8c:d5:e1:37:49:1f:b0:49:0c:56:4d:
                    e6:33:cf:70:58:63:ae:f3:39:b5:03:36:24:10:d2:
                    47:8a:fb:c4:14:76:e9:91:5e:d3:f0:34:93:c3:06:
                    77:1f:25:64:3d:a5:ef:b6:50:b4:ec:cd:5d:64:9e:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D7:25:4C:5B:9A:54:97:F4:22:EF:AF:FB:94:D4:D1:4B:EF:64:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9eef443f-343c-3e83-a57c-8875080c54da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:de:0d:3f:1b:32:2b:a8:68:18:8e:d7:c3:83:68:2c:76:84:
         3c:99:43:70:20:2d:12:32:1e:14:e4:55:68:2a:be:eb:9c:6d:
         ae:33:ba:69:db:07:5b:24:30:f4:b0:c2:24:63:55:94:2a:7e:
         ac:7a:49:37:8b:43:cc:5a:6a:1c:c7:53:97:d4:00:ab:59:7c:
         51:47:47:f1:39:09:a4:f3:b7:1c:64:fd:5f:5e:f6:81:10:7c:
         ed:c0:4d:dc:a4:24:02:a9:29:62:c8:bb:60:20:68:a8:3b:d1:
         eb:91:8e:4b:95:23:33:8a:af:af:b4:cc:eb:7e:e3:24:6a:33:
         5c:e2:ef:ac:fc:01:e6:e3:83:cd:53:b3:1c:82:b3:65:98:26:
         49:52:f0:71:22:d7:8c:be:22:c6:af:f0:96:a5:b4:02:fe:da:
         bd:d7:88:46:57:03:86:c0:9c:1c:66:7e:8e:54:9c:1e:8e:34:
         87:32:e2:34:dd:9b:a6:b8:a1:c7:bb:68:f9:c9:31:b0:3a:b2:
         db:62:b9:05:13:12:3c:10:c6:57:8f:2d:28:f2:6e:5e:0a:ba:
         79:ae:d5:c8:08:a5:93:31:f7:0d:6f:d3:3d:40:b5:ae:e6:a5:
         2c:ed:0f:56:36:cb:5c:28:31:29:3b:e9:3c:52:6f:47:63:79:
         f6:d5:13:e7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGT0w+hzg+d5KkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NTM4N2VkYmYtOWQwMS00NmJhLWJhYzktZjJhZDNhZWY3M2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIlxb7vvSoOFHW+YzPoCBFqNKqM51IVDJLgd
RMJkufn3Hi6XOn21AmaSJrBZOlTwUmA8iqFV017dluxjo8HiepOh221GKLGnUYDl
GkJc7OTtSL1hn3P5hDz2xgh7mrzRO8Mdc9Pj/FqVuKOEU3hBXlkU5XXmVGTKyNQz
30aWxEYyAMem0MZEJTio9UGArspf0Lx9DJSUjye1/7I/s2tOz4iVk4y/4t9DnmcW
nth/MqW2FT13vUcAhDjZVc50C4wknUi/Z5mXjNXhN0kfsEkMVk3mM89wWGOu8zm1
AzYkENJHivvEFHbpkV7T8DSTwwZ3HyVkPaXvtlC07M1dZJ6hMwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIPXJUxbmlSX9CLvr/uU1NFL72TwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWVlZjQ0M2YtMzQzYy0z
ZTgzLWE1N2MtODg3NTA4MGM1NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBT3g0/GzIrqGgYjtfDg2gsdoQ8mUNwIC0SMh4U
5FVoKr7rnG2uM7pp2wdbJDD0sMIkY1WUKn6sekk3i0PMWmocx1OX1ACrWXxRR0fx
OQmk87ccZP1fXvaBEHztwE3cpCQCqSliyLtgIGioO9HrkY5LlSMziq+vtMzrfuMk
ajNc4u+s/AHm44PNU7McgrNlmCZJUvBxIteMviLGr/CWpbQC/tq914hGVwOGwJwc
Zn6OVJwejjSHMuI03ZumuKHHu2j5yTGwOrLbYrkFExI8EMZXjy0o8m5eCrp5rtXI
CKWTMfcNb9M9QLWu5qUs7Q9WNstcKDEpO+k8Um9HY3n21RPn
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:55 2025 by rpki-client