Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa
File:                     bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa (raw, json)
Hash identifier:          xaEc7am5FYwSIMsuPgKwpxwy20TBsEge8n3EH7YT61I=
Subject key identifier:   67:21:FF:E8:47:17:24:5A:8A:F7:15:4F:23:19:09:11:B4:11:51:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119ABF39284A3F23B84117C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     397199
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:bf:39:28:4a:3f:23:b8:41:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=b845a349-1859-4a42-96af-3ed9922c613f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:ca:5a:90:29:73:bb:cf:36:87:6d:05:fd:
                    c5:85:20:34:bd:c0:3c:56:c4:aa:67:b3:a3:33:f4:
                    db:58:9b:f9:11:c5:9e:ed:4a:b3:d9:2e:26:df:c0:
                    b9:60:a5:af:fa:9b:d8:0d:70:30:38:cd:f1:dc:ce:
                    78:c0:a4:b9:2c:32:74:ff:6f:df:46:93:fa:34:44:
                    69:29:ab:64:bd:e0:ed:51:13:95:54:04:e8:c4:3f:
                    52:5d:a2:e5:8f:ce:d9:3f:25:c8:59:b8:c1:28:bd:
                    d5:85:4b:a1:54:2f:43:4f:fa:7a:d5:2b:40:20:ab:
                    f6:e8:ec:c1:76:c0:17:92:50:e0:e0:64:99:bb:46:
                    b4:d9:f6:93:a4:2a:a1:c9:d5:3f:84:b9:a1:c0:24:
                    67:bc:40:62:e3:60:b3:43:0e:12:ba:b0:9c:32:63:
                    13:13:ec:16:9f:c3:b7:5d:4f:79:c5:f8:9b:06:75:
                    f8:0e:b7:b7:30:9b:d4:a2:99:59:11:b9:fc:e9:ae:
                    7b:0f:b9:c8:2f:fc:43:e5:46:c0:de:22:28:c2:cd:
                    f3:ff:84:56:89:ab:13:b5:2f:b2:db:ff:29:b0:03:
                    e3:21:e5:16:40:07:70:22:0f:c9:0a:c7:b7:f5:c6:
                    d5:b7:5f:7e:fb:67:31:49:f0:69:f9:2a:dd:16:cb:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:FF:E8:47:17:24:5A:8A:F7:15:4F:23:19:09:11:B4:11:51:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:70:a8:9b:58:ae:75:ea:d8:71:fb:d5:db:6b:af:44:50:
         fd:e7:5b:26:98:d1:41:dc:a6:27:f8:fa:8a:ab:95:c4:17:7b:
         43:d7:71:2d:d4:c8:5a:9d:c6:25:79:0c:06:88:46:d4:f9:44:
         98:02:0b:7e:6f:c5:fb:2f:74:c1:58:64:c5:25:ad:06:b1:d2:
         86:c0:b3:2e:f4:ef:40:81:82:07:54:52:a2:a5:bb:e0:cb:2a:
         07:cd:91:4c:a6:54:b5:f1:a3:c9:ac:33:df:94:42:ef:9b:97:
         a0:90:e1:fe:4b:53:5f:d3:2a:9e:46:ba:82:21:bd:d5:6e:d3:
         1a:6e:b1:cb:dd:7c:08:a3:ab:62:f0:84:ce:61:9b:eb:fe:ff:
         a8:04:6b:8c:29:f9:c0:d4:d7:19:ec:26:2a:a2:63:cc:3e:e0:
         4f:0b:7a:4a:3d:ec:6f:a0:cc:b8:ef:3a:74:db:6e:d0:da:31:
         7c:ed:6b:7e:c4:f1:7b:cd:3f:e8:30:9d:69:12:88:7d:d2:7a:
         01:4c:4b:a0:4c:e9:2d:73:08:4b:19:2e:30:dd:53:7a:4e:9b:
         50:18:d2:db:04:84:29:26:cf:de:7e:cf:0e:27:63:59:d8:52:
         ef:6e:5f:4b:c4:b5:38:33:85:37:c6:9f:d4:9c:9d:dd:73:6d:
         0f:41:e9:f0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmr85KEo/I7hBF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
Yjg0NWEzNDktMTg1OS00YTQyLTk2YWYtM2VkOTkyMmM2MTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjorKWpApc7vPNodtBf3FhSA0vcA8VsSqZ7Oj
M/TbWJv5EcWe7Uqz2S4m38C5YKWv+pvYDXAwOM3x3M54wKS5LDJ0/2/fRpP6NERp
KatkveDtUROVVAToxD9SXaLlj87ZPyXIWbjBKL3VhUuhVC9DT/p61StAIKv26OzB
dsAXklDg4GSZu0a02faTpCqhydU/hLmhwCRnvEBi42CzQw4SurCcMmMTE+wWn8O3
XU95xfibBnX4Dre3MJvUoplZEbn86a57D7nIL/xD5UbA3iIows3z/4RWiasTtS+y
2/8psAPjIeUWQAdwIg/JCse39cbVt19++2cxSfBp+SrdFsvqGwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGch/+hHFyRaivcVTyMZCRG0EVE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYyODJlZDMtMDllOS0z
NjVlLWEzMGQtNjFmZDdmZTY1MmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBSD3Com1iuderYcfvV22uvRFD951smmNFB3KYn
+PqKq5XEF3tD13Et1MhancYleQwGiEbU+USYAgt+b8X7L3TBWGTFJa0GsdKGwLMu
9O9AgYIHVFKipbvgyyoHzZFMplS18aPJrDPflELvm5egkOH+S1Nf0yqeRrqCIb3V
btMabrHL3XwIo6ti8ITOYZvr/v+oBGuMKfnA1NcZ7CYqomPMPuBPC3pKPexvoMy4
7zp0227Q2jF87Wt+xPF7zT/oMJ1pEoh90noBTEugTOktcwhLGS4w3VN6TptQGNLb
BIQpJs/efs8OJ2NZ2FLvbl9LxLU4M4U3xp/UnJ3dc20PQenw
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:28 2025 by rpki-client