Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8aadbf3-71fc-3ca8-9d66-98daa7c05569.roa
File:                     b8aadbf3-71fc-3ca8-9d66-98daa7c05569.roa (raw, json)
Hash identifier:          BAA6XFTwGIzuRmKzi8lXN8+u7KQik0UzTR18AIWuB9k=
Subject key identifier:   B3:AD:AF:C7:3D:7C:F3:58:C5:69:79:5F:F6:52:33:18:A5:C8:BD:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849403981417F0E646B5EA90900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8aadbf3-71fc-3ca8-9d66-98daa7c05569.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     397196
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:81:41:7f:0e:64:6b:5e:a9:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=21bde691-c8fa-41ad-8500-3cae2a81b2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:16:28:0d:35:a2:45:17:8d:28:86:c4:b8:
                    d6:bd:33:a2:9e:83:1a:20:34:91:97:be:14:8c:8b:
                    cd:05:38:a6:02:dd:a8:4a:07:1a:51:b0:e3:b1:20:
                    cd:d2:9f:e8:9f:20:24:d9:e0:36:e7:67:d7:4f:59:
                    16:00:a3:6f:ba:29:12:e5:34:e6:77:e0:2d:ec:7d:
                    f8:aa:48:99:4f:5c:4c:fd:15:ca:15:47:98:52:2b:
                    de:4f:56:70:87:ba:de:6e:0e:da:a0:1e:02:da:ae:
                    9c:ca:e5:30:c7:16:4a:8d:04:62:85:e7:18:0c:14:
                    43:63:6d:86:21:46:1c:69:3c:55:11:e2:43:d4:b3:
                    b8:d7:1f:e8:1e:93:76:4a:c2:88:e2:20:4c:ed:e4:
                    70:e0:8b:35:55:de:e6:a0:9c:d9:ae:8f:83:46:20:
                    e9:66:65:84:d5:9b:c9:ac:ab:af:f8:5d:ed:bc:a2:
                    68:86:b6:a8:da:57:eb:44:de:97:c8:33:d4:b6:35:
                    aa:c4:f2:f0:09:2e:f5:8a:91:53:8c:62:cc:28:ad:
                    c1:cb:7d:9d:48:79:45:22:03:22:a8:05:b8:bd:50:
                    bf:68:b4:d9:0b:33:97:e2:76:2b:d1:96:51:82:09:
                    4d:ae:e5:7a:54:df:ba:5a:f0:5f:43:f7:6c:27:72:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AD:AF:C7:3D:7C:F3:58:C5:69:79:5F:F6:52:33:18:A5:C8:BD:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8aadbf3-71fc-3ca8-9d66-98daa7c05569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:a6:b5:e7:4e:1e:db:2b:4d:8d:e4:a6:7a:62:ad:d5:65:
         83:a5:ac:51:bf:75:c3:d7:8d:e2:9b:f9:90:bb:ac:5b:3f:65:
         2b:c0:78:bb:65:09:52:6d:e7:7f:71:22:30:50:0c:87:6f:8e:
         d1:7d:02:98:c7:4f:10:18:98:7f:a4:e2:43:f2:25:bd:47:43:
         39:14:d6:b8:db:04:00:65:57:90:83:4a:86:e6:8c:98:1a:20:
         f9:3e:66:44:94:2e:e9:65:d0:cd:02:e5:26:64:56:e3:6a:80:
         c9:35:b8:ae:aa:27:68:5a:0b:66:06:45:0a:20:bc:5a:3a:0a:
         2f:8b:97:76:57:fb:68:25:d1:8c:37:f9:77:65:fa:f9:cd:00:
         0e:d3:5d:57:7b:6a:72:a9:37:40:76:35:c8:b0:76:9e:89:d9:
         3f:cf:e2:6d:54:bf:4c:75:d5:51:8d:02:87:59:25:01:6b:d1:
         7c:96:7c:4e:dc:65:e0:7f:ff:6e:b8:6a:b3:f1:b6:aa:1d:9a:
         66:9e:27:05:eb:2f:29:fa:39:4a:63:17:64:8c:3b:03:28:9e:
         ed:69:4d:ce:56:38:3c:2e:d1:57:c5:0d:9d:da:f3:e5:47:84:
         4b:59:cb:8d:93:cf:e3:c6:1b:7b:3b:78:b0:42:77:2b:e9:3f:
         de:4e:c0:7e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYFBfw5ka16pCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
MjFiZGU2OTEtYzhmYS00MWFkLTg1MDAtM2NhZTJhODFiMmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9QWKA01okUXjSiGxLjWvTOinoMaIDSRl74U
jIvNBTimAt2oSgcaUbDjsSDN0p/onyAk2eA252fXT1kWAKNvuikS5TTmd+At7H34
qkiZT1xM/RXKFUeYUiveT1Zwh7rebg7aoB4C2q6cyuUwxxZKjQRihecYDBRDY22G
IUYcaTxVEeJD1LO41x/oHpN2SsKI4iBM7eRw4Is1Vd7moJzZro+DRiDpZmWE1ZvJ
rKuv+F3tvKJohrao2lfrRN6XyDPUtjWqxPLwCS71ipFTjGLMKK3By32dSHlFIgMi
qAW4vVC/aLTZCzOX4nYr0ZZRgglNruV6VN+6WvBfQ/dsJ3I1CQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLOtr8c9fPNYxWl5X/ZSMxilyL0vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhhYWRiZjMtNzFmYy0z
Y2E4LTlkNjYtOThkYWE3YzA1NTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQARt6a1504e2ytNjeSmemKt1WWDpaxRv3XD143i
m/mQu6xbP2UrwHi7ZQlSbed/cSIwUAyHb47RfQKYx08QGJh/pOJD8iW9R0M5FNa4
2wQAZVeQg0qG5oyYGiD5PmZElC7pZdDNAuUmZFbjaoDJNbiuqidoWgtmBkUKILxa
Ogovi5d2V/toJdGMN/l3Zfr5zQAO011Xe2pyqTdAdjXIsHaeidk/z+JtVL9MddVR
jQKHWSUBa9F8lnxO3GXgf/9uuGqz8baqHZpmnicF6y8p+jlKYxdkjDsDKJ7taU3O
Vjg8LtFXxQ2d2vPlR4RLWcuNk8/jxht7O3iwQncr6T/eTsB+
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:19 2025 by rpki-client