Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac2ee8e1-467f-3917-a0f9-2e4473efcbe5.roa
File:                     ac2ee8e1-467f-3917-a0f9-2e4473efcbe5.roa (raw, json)
Hash identifier:          BbP/UCSUGFTnXcyGh1SxMWul28Ee80zhFe3VmaY7ay0=
Subject key identifier:   3E:61:DE:BA:B9:4B:89:0A:54:D6:CD:1B:12:F1:E4:7E:FF:86:6B:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE47B344D98CE6542ED8D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac2ee8e1-467f-3917-a0f9-2e4473efcbe5.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     396561
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:7b:34:4d:98:ce:65:42:ed:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=603d6009-c4ad-4152-aab4-54e2fe60a36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:cb:7b:d5:25:51:81:9b:80:54:95:87:b3:
                    46:de:18:ca:5a:b7:83:fe:9c:17:8a:25:c3:40:c9:
                    9f:6d:d8:47:e0:86:72:82:3e:7f:e8:50:67:3c:3c:
                    d8:4a:ec:77:6f:b9:1e:da:00:39:81:2f:3b:b1:a7:
                    7d:44:73:cd:a9:c3:23:b9:88:09:10:f8:45:5b:14:
                    ee:39:e0:3b:e4:98:7e:8c:6b:a0:80:7a:83:c9:ed:
                    7a:17:48:cc:b8:09:92:fa:c2:4f:ec:87:79:a4:38:
                    2f:51:14:2c:0f:f9:8c:64:52:3d:e2:4f:b7:3f:a9:
                    80:1c:62:7f:2d:e5:44:d4:59:2e:99:13:c2:98:a0:
                    d4:0a:ab:46:29:20:bd:31:cc:45:ff:b8:d0:3e:d4:
                    62:b1:32:b2:d4:6b:a1:93:33:02:d3:88:b9:ff:34:
                    fc:b5:a4:dd:51:e6:bd:39:ff:a7:65:2d:9a:fc:62:
                    26:06:37:7a:d7:7c:67:88:1f:a9:c6:5b:d8:81:28:
                    72:71:7d:c6:5f:38:a5:3c:46:71:e3:d0:91:17:86:
                    49:b1:be:2a:72:1e:26:3d:2a:ff:c1:e7:15:84:47:
                    68:85:45:8a:29:e0:e8:55:49:79:bd:df:11:4d:68:
                    75:4a:d7:cd:85:40:be:65:a1:cb:00:6e:e9:15:f1:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:61:DE:BA:B9:4B:89:0A:54:D6:CD:1B:12:F1:E4:7E:FF:86:6B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac2ee8e1-467f-3917-a0f9-2e4473efcbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:6c:37:c1:ea:1f:9c:15:9d:e4:23:ae:14:de:59:92:36:
         2f:25:f9:70:a8:18:06:6f:28:d0:e9:59:fe:ce:b7:51:58:32:
         5c:04:b7:53:c5:d0:d7:f6:9c:6c:aa:e4:31:f3:17:b7:af:c7:
         91:b7:ab:eb:ab:48:99:dd:bd:19:8d:58:6e:59:45:47:44:5b:
         e5:f4:b4:ce:f0:24:42:5d:d0:29:3c:db:bb:25:6b:13:b6:97:
         b1:d6:90:9c:3b:8f:3f:a1:90:09:7f:d1:54:57:76:00:11:11:
         4e:6f:cb:2f:ea:58:48:41:96:ac:bb:4d:55:c3:9e:28:4c:e5:
         3f:a2:55:aa:d0:43:d7:34:c9:47:ad:4e:7e:3f:58:88:9c:9e:
         6d:b8:81:70:cd:93:30:aa:a8:40:88:be:7b:d2:fd:02:bf:e8:
         65:3e:06:26:fc:27:03:0d:6e:0a:9f:8d:f8:00:5c:68:c4:63:
         b4:a3:a9:9b:1e:7c:c0:96:c5:42:1b:69:26:c4:da:6c:06:78:
         39:c6:8b:00:21:3c:c4:eb:1c:98:a4:5b:ed:b7:d7:68:8a:71:
         c7:a7:2d:13:46:e9:e2:7b:d6:af:d5:76:d1:76:0d:4b:b2:46:
         90:39:22:fd:4c:80:bf:a2:0f:65:d3:5b:bc:42:de:36:b3:21:
         39:ee:9e:eb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5Hs0TZjOZULtjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
NjAzZDYwMDktYzRhZC00MTUyLWFhYjQtNTRlMmZlNjBhMzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vLe9UlUYGbgFSVh7NG3hjKWreD/pwXiiXD
QMmfbdhH4IZygj5/6FBnPDzYSux3b7ke2gA5gS87sad9RHPNqcMjuYgJEPhFWxTu
OeA75Jh+jGuggHqDye16F0jMuAmS+sJP7Id5pDgvURQsD/mMZFI94k+3P6mAHGJ/
LeVE1FkumRPCmKDUCqtGKSC9McxF/7jQPtRisTKy1GuhkzMC04i5/zT8taTdUea9
Of+nZS2a/GImBjd613xniB+pxlvYgShycX3GXzilPEZx49CRF4ZJsb4qch4mPSr/
wecVhEdohUWKKeDoVUl5vd8RTWh1StfNhUC+ZaHLAG7pFfFr3wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD5h3rq5S4kKVNbNGxLx5H7/hmsfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWMyZWU4ZTEtNDY3Zi0z
OTE3LWEwZjktMmU0NDczZWZjYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBWrWw3weofnBWd5COuFN5ZkjYvJflwqBgGbyjQ
6Vn+zrdRWDJcBLdTxdDX9pxsquQx8xe3r8eRt6vrq0iZ3b0ZjVhuWUVHRFvl9LTO
8CRCXdApPNu7JWsTtpex1pCcO48/oZAJf9FUV3YAERFOb8sv6lhIQZasu01Vw54o
TOU/olWq0EPXNMlHrU5+P1iInJ5tuIFwzZMwqqhAiL570v0Cv+hlPgYm/CcDDW4K
n434AFxoxGO0o6mbHnzAlsVCG2kmxNpsBng5xosAITzE6xyYpFvtt9doinHHpy0T
Runie9av1XbRdg1LskaQOSL9TIC/og9l01u8Qt42syE57p7r
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:49 2025 by rpki-client