Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c44fc36d-9597-366f-840d-3016d33c17a0.roa
File:                     c44fc36d-9597-366f-840d-3016d33c17a0.roa (raw, json)
Hash identifier:          gDVPJREJna2pwihRwwHk07pksqVANSb2NQTwZIo6DC0=
Subject key identifier:   66:B4:A8:69:06:4C:4F:08:F7:BB:B2:A7:AD:C4:90:FD:63:6D:88:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAC545CE26A51AB020800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c44fc36d-9597-366f-840d-3016d33c17a0.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     397206
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ac:54:5c:e2:6a:51:ab:02:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=b41a7c9c-55ae-4077-8f0b-ce88e15dc5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:64:e0:f7:20:0e:1e:2d:18:99:d5:84:aa:
                    c1:bc:89:26:63:f3:99:90:55:4d:3f:83:06:bb:57:
                    de:35:da:6b:c7:1a:8d:78:c0:31:5a:f9:b7:08:65:
                    5c:51:a1:c2:2c:a4:98:f0:9f:e7:18:0d:db:35:48:
                    c8:71:e9:b0:e3:42:80:5e:3e:59:eb:87:17:bc:63:
                    82:3f:7d:ec:e3:04:a1:1b:1a:89:16:c2:c5:e5:68:
                    b0:64:1b:02:98:4c:67:50:9a:71:2a:f4:d7:b8:7c:
                    da:02:78:f5:70:fa:a4:3e:4a:ac:ef:cd:bf:8b:8f:
                    de:97:e5:ef:41:30:70:aa:8d:60:27:6a:5b:da:43:
                    dc:e2:8a:30:a1:61:72:76:e6:5c:95:77:89:99:20:
                    12:86:18:c0:6c:5b:8f:4e:56:3f:55:28:43:83:f0:
                    ae:41:d5:a1:12:91:f6:81:6f:95:ad:44:96:ab:83:
                    c4:18:b6:4b:91:83:a7:d7:ff:bf:b8:97:dc:63:ff:
                    21:fe:44:a6:e5:d3:54:18:d8:64:9c:0f:6e:ca:fb:
                    54:f4:b6:2c:c2:f1:dd:f5:08:28:ec:ca:72:01:c2:
                    99:c5:45:c1:c3:46:ab:44:60:d0:26:48:bd:a7:6f:
                    0f:4a:d5:49:7d:64:b8:23:3f:0d:24:eb:77:39:8a:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:A8:69:06:4C:4F:08:F7:BB:B2:A7:AD:C4:90:FD:63:6D:88:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c44fc36d-9597-366f-840d-3016d33c17a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:db:6f:bd:64:b4:14:2d:a0:49:8d:2d:6a:45:9d:bc:38:a2:
         ee:91:f1:69:87:2f:2c:f4:d1:67:32:2c:82:f4:28:c7:70:55:
         c6:bc:23:1b:5a:a3:b8:2e:2e:17:36:b8:f1:66:ed:f4:03:b1:
         e4:4f:ac:d1:c5:55:53:f4:e9:5b:e1:d4:15:14:b3:b9:a0:11:
         21:3c:c5:2b:07:88:0c:e6:19:4e:f8:62:30:1a:ed:3f:d4:f3:
         11:db:08:6f:9d:43:5c:44:aa:11:95:47:f9:4e:8b:c3:c9:f3:
         66:55:91:65:7d:63:1c:1a:ff:90:51:c4:40:c2:01:94:40:eb:
         0d:ec:50:6d:b0:82:c3:f6:81:36:4c:9e:a1:2c:62:57:44:00:
         2a:72:45:9a:78:ec:d1:39:2e:87:a3:d6:00:e1:ed:2b:bd:e1:
         04:1d:a4:21:ba:9b:c3:09:d6:21:34:c5:04:8a:d1:28:3c:68:
         ef:78:82:44:48:02:54:3a:11:fa:58:02:cc:ea:68:2f:da:d0:
         a5:c5:b7:93:bd:2a:e5:39:fa:9d:a7:8f:c9:0c:aa:c1:a8:0e:
         66:dd:29:55:1a:31:80:d0:26:79:a9:6d:65:87:35:fc:5d:fd:
         c8:26:96:bf:5d:80:ac:59:b2:c7:67:90:c7:b6:96:aa:cc:75:
         16:cb:ea:08
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqxUXOJqUasCCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
YjQxYTdjOWMtNTVhZS00MDc3LThmMGItY2U4OGUxNWRjNWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpVk4PcgDh4tGJnVhKrBvIkmY/OZkFVNP4MG
u1feNdprxxqNeMAxWvm3CGVcUaHCLKSY8J/nGA3bNUjIcemw40KAXj5Z64cXvGOC
P33s4wShGxqJFsLF5WiwZBsCmExnUJpxKvTXuHzaAnj1cPqkPkqs782/i4/el+Xv
QTBwqo1gJ2pb2kPc4oowoWFyduZclXeJmSAShhjAbFuPTlY/VShDg/CuQdWhEpH2
gW+VrUSWq4PEGLZLkYOn1/+/uJfcY/8h/kSm5dNUGNhknA9uyvtU9LYswvHd9Qgo
7MpyAcKZxUXBw0arRGDQJki9p28PStVJfWS4Iz8NJOt3OYq2LQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGa0qGkGTE8I97uyp63EkP1jbYhkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQ0ZmMzNmQtOTU5Ny0z
NjZmLTg0MGQtMzAxNmQzM2MxN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBY22+9ZLQULaBJjS1qRZ28OKLukfFphy8s9NFn
MiyC9CjHcFXGvCMbWqO4Li4XNrjxZu30A7HkT6zRxVVT9Olb4dQVFLO5oBEhPMUr
B4gM5hlO+GIwGu0/1PMR2whvnUNcRKoRlUf5TovDyfNmVZFlfWMcGv+QUcRAwgGU
QOsN7FBtsILD9oE2TJ6hLGJXRAAqckWaeOzROS6Ho9YA4e0rveEEHaQhupvDCdYh
NMUEitEoPGjveIJESAJUOhH6WALM6mgv2tClxbeTvSrlOfqdp4/JDKrBqA5m3SlV
GjGA0CZ5qW1lhzX8Xf3IJpa/XYCsWbLHZ5DHtpaqzHUWy+oI
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:53 2025 by rpki-client