Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c098acaf-49a8-3f9e-827c-27be00c97156.roa
File:                     c098acaf-49a8-3f9e-827c-27be00c97156.roa (raw, json)
Hash identifier:          jM6LGvRliPHQCg52Vu+GvyNi7a5qzdnbm+tUw9DWMtM=
Subject key identifier:   10:8A:72:44:84:44:30:27:52:04:67:27:C5:AC:CA:96:20:6F:23:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD6169C0292802B7BFA200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c098acaf-49a8-3f9e-827c-27be00c97156.roa
Signing time:             Tue 01 Jul 2025 13:48:37 +0000
ROA not before:           Tue 01 Jul 2025 13:48:37 +0000
ROA not after:            Mon 29 Sep 2025 13:48:37 +0000
asID:                     396606
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:61:69:c0:29:28:02:b7:bf:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:37 2025 GMT
            Not After : Sep 29 13:48:37 2025 GMT
        Subject: CN=97301aaa-2821-4f9e-9135-978a733ebfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:c6:38:cd:31:d6:87:d6:72:50:61:7f:16:
                    61:76:b4:32:a5:0d:d5:15:27:d2:1a:48:ca:96:6c:
                    74:67:55:5c:e2:df:8b:86:22:f4:b2:d6:fc:ea:48:
                    fc:21:d4:e4:bb:96:3a:e5:cc:f0:56:9b:28:47:53:
                    7c:34:4d:d8:40:dc:cb:72:e7:02:df:b9:0e:6f:00:
                    eb:49:38:e5:84:c8:a7:34:99:41:ef:7c:54:0d:ea:
                    f5:1c:48:14:ee:a8:fe:43:a7:65:96:fb:91:4e:0f:
                    24:f4:7a:88:40:48:d5:df:7e:6f:65:e1:2e:dc:05:
                    a6:df:c3:15:f3:51:c5:4d:93:44:6c:88:80:8a:fb:
                    90:e0:42:5d:87:a3:f1:eb:86:65:4b:d5:10:68:4d:
                    34:de:dc:3d:af:f6:33:19:53:d3:2b:69:38:b9:fa:
                    d7:26:13:d0:4b:43:e5:75:6a:1f:f8:fb:77:74:f7:
                    e8:63:25:07:f1:a1:64:20:db:33:03:fd:df:7c:2d:
                    91:75:4b:0f:8a:fd:93:f9:a1:4f:02:ac:b8:81:bf:
                    34:dd:29:44:19:b7:76:00:18:5a:6d:66:44:7d:ee:
                    20:03:2e:30:c1:70:da:b4:ff:4b:dd:f0:8a:67:ce:
                    08:68:17:f4:57:f1:12:0c:ba:11:64:00:96:54:f2:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8A:72:44:84:44:30:27:52:04:67:27:C5:AC:CA:96:20:6F:23:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c098acaf-49a8-3f9e-827c-27be00c97156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:7c:a9:84:a2:a3:49:91:75:38:dd:94:28:85:b3:21:91:
         e1:f1:a3:bd:07:8d:f6:a6:bf:d4:a6:a8:5c:26:b9:38:da:77:
         34:26:16:11:00:e4:0e:b5:8a:2f:ca:fa:d8:af:ce:40:b3:01:
         ca:b3:e2:f9:d3:e6:f9:96:f1:84:9a:8f:7d:a4:64:2f:a7:1c:
         13:93:e2:e8:36:69:29:f7:19:1b:d8:c5:5f:0a:61:5c:b7:37:
         94:7e:e9:12:dc:64:ef:fe:e6:86:0a:7e:66:64:fb:aa:68:44:
         64:79:af:d5:be:c2:6c:ed:38:33:7b:62:8b:57:fc:e0:1f:7d:
         ed:f0:69:c8:9a:7a:f1:40:5d:01:91:31:cf:72:06:bb:0f:c2:
         48:d3:af:91:2e:b3:fc:db:9e:b2:a3:87:e0:76:11:ee:bd:96:
         9c:67:e5:a3:e0:36:be:98:b0:a3:73:6b:c2:4a:b5:0c:53:32:
         9a:dd:bf:c1:a4:c5:04:c0:35:59:ba:f8:7c:ea:e1:74:f9:b0:
         24:78:30:a6:93:de:61:fd:59:f4:c3:65:0e:26:c9:82:e4:ae:
         81:4c:f8:59:56:e8:a6:7d:07:05:17:d8:79:3a:48:e2:3a:a1:
         57:8d:cb:72:97:3e:41:5f:28:92:bf:f6:a9:9e:15:c9:12:13:
         96:77:7f:66
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3WFpwCkoAre/ogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMTEzNDgzN1oXDTI1MDkyOTEzNDgzN1owLzEtMCsGA1UEAxMk
OTczMDFhYWEtMjgyMS00ZjllLTkxMzUtOTc4YTczM2ViZmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7fGOM0x1ofWclBhfxZhdrQypQ3VFSfSGkjK
lmx0Z1Vc4t+LhiL0stb86kj8IdTku5Y65czwVpsoR1N8NE3YQNzLcucC37kObwDr
STjlhMinNJlB73xUDer1HEgU7qj+Q6dllvuRTg8k9HqIQEjV335vZeEu3AWm38MV
81HFTZNEbIiAivuQ4EJdh6Px64ZlS9UQaE003tw9r/YzGVPTK2k4ufrXJhPQS0Pl
dWof+Pt3dPfoYyUH8aFkINszA/3ffC2RdUsPiv2T+aFPAqy4gb803SlEGbd2ABha
bWZEfe4gAy4wwXDatP9L3fCKZ84IaBf0V/ESDLoRZACWVPL3cwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBCKckSERDAnUgRnJ8WsypYgbyO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA5OGFjYWYtNDlhOC0z
ZjllLTgyN2MtMjdiZTAwYzk3MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBd9nyphKKjSZF1ON2UKIWzIZHh8aO9B432pr/U
pqhcJrk42nc0JhYRAOQOtYovyvrYr85AswHKs+L50+b5lvGEmo99pGQvpxwTk+Lo
Nmkp9xkb2MVfCmFctzeUfukS3GTv/uaGCn5mZPuqaERkea/VvsJs7Tgze2KLV/zg
H33t8GnImnrxQF0BkTHPcga7D8JI06+RLrP8256yo4fgdhHuvZacZ+Wj4Da+mLCj
c2vCSrUMUzKa3b/BpMUEwDVZuvh86uF0+bAkeDCmk95h/Vn0w2UOJsmC5K6BTPhZ
VuimfQcFF9h5OkjiOqFXjctylz5BXyiSv/apnhXJEhOWd39m
-----END CERTIFICATE-----
Generated at Thu Jul 10 12:37:02 2025 by rpki-client