Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c776fdaf-1d6c-3dec-af28-99f3eec29512.roa
File:                     c776fdaf-1d6c-3dec-af28-99f3eec29512.roa (raw, json)
Hash identifier:          zPF0zOiFmy7LofboEU1rpo2ahUNi+/3WaYQbz1hhbmE=
Subject key identifier:   46:9A:05:1F:A4:11:59:D3:97:DD:86:B0:FD:89:BA:21:EC:EC:54:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119ABDF4FD43C51B2F633D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c776fdaf-1d6c-3dec-af28-99f3eec29512.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396558
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:bd:f4:fd:43:c5:1b:2f:63:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=697082a7-14dd-443b-b8a7-dad0fdaf9c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:91:94:e8:46:cc:69:ab:a4:a4:04:ab:50:
                    45:0c:a4:65:ab:d3:ff:50:03:c3:ee:7e:ca:75:ff:
                    5a:90:6e:26:fd:a2:a6:7a:b6:b2:7e:52:52:13:b2:
                    35:53:c5:e8:b5:5e:0c:47:c6:b7:55:cf:84:79:1f:
                    df:51:67:fb:72:3d:24:5e:51:a7:ac:54:1f:eb:01:
                    e1:1c:5f:79:e6:b6:b0:df:4d:ce:8c:78:d4:e9:8e:
                    a2:6f:58:40:45:60:29:e0:33:a7:bf:49:23:6c:5b:
                    73:ee:de:b7:f5:6c:2c:28:38:d1:28:a5:90:11:7b:
                    74:25:7e:3a:86:e7:43:c7:42:2a:f6:03:85:78:15:
                    0f:f4:02:76:01:6d:f0:ef:16:02:4a:cd:c2:80:99:
                    10:7b:2f:d0:b0:46:49:f3:41:a0:2a:58:41:02:bc:
                    c3:11:7c:45:37:9f:32:1a:87:c9:20:46:19:1c:bb:
                    9e:1c:25:b9:d0:af:90:7c:b2:d4:99:6a:45:2f:42:
                    c1:f2:b1:e9:05:3a:47:30:87:44:b6:50:9b:22:2f:
                    ef:08:32:5d:60:1c:7a:91:af:13:97:d2:3c:75:c7:
                    3b:72:e5:da:6b:d9:ce:79:8f:43:04:74:77:f2:2f:
                    26:45:3f:c0:95:ad:e4:60:38:19:ca:0c:f6:93:5b:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:05:1F:A4:11:59:D3:97:DD:86:B0:FD:89:BA:21:EC:EC:54:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c776fdaf-1d6c-3dec-af28-99f3eec29512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:07:7d:33:14:82:32:12:73:b3:cf:8a:6d:83:18:94:93:
         92:12:af:6f:ab:77:fa:ab:5e:b1:a6:41:d1:3c:f4:13:96:69:
         73:25:eb:44:5e:ab:14:96:c9:5b:19:12:a1:dd:71:7c:95:79:
         c0:2c:f9:8c:f0:84:a5:5c:dd:c7:45:62:f3:da:ba:2b:c4:c7:
         26:0d:e6:4d:6c:ed:51:3b:00:d7:e1:32:07:1a:2c:85:31:82:
         4e:18:78:c6:c4:66:94:7f:23:a7:52:77:87:37:35:54:04:1e:
         6f:30:4e:bd:c5:f0:56:ca:48:35:9d:27:1f:5c:d1:00:f1:6f:
         21:75:d2:39:f2:c8:7d:3e:60:11:f4:97:49:06:1f:01:5e:fe:
         3a:71:03:c5:e5:89:2f:94:d4:31:8d:3d:86:b4:f0:7e:5b:40:
         c6:f9:35:7c:49:3b:c5:af:cb:d1:36:c7:b7:cf:01:7e:df:44:
         ae:c7:c3:97:f3:73:8c:49:cb:74:1b:45:ae:dc:7d:c4:3f:a8:
         90:bd:32:bc:c9:62:9c:19:15:d5:de:98:6b:80:c6:c4:9b:1a:
         22:57:4e:30:e9:1e:24:4a:9d:ef:f4:c1:9a:bf:9f:63:3b:4d:
         fc:3b:16:85:b4:39:a2:96:f6:20:a9:0e:93:ef:fe:21:ce:f4:
         3d:7c:21:da
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmr30/UPFGy9jPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
Njk3MDgyYTctMTRkZC00NDNiLWI4YTctZGFkMGZkYWY5YzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeaRlOhGzGmrpKQEq1BFDKRlq9P/UAPD7n7K
df9akG4m/aKmerayflJSE7I1U8XotV4MR8a3Vc+EeR/fUWf7cj0kXlGnrFQf6wHh
HF955raw303OjHjU6Y6ib1hARWAp4DOnv0kjbFtz7t639WwsKDjRKKWQEXt0JX46
hudDx0Iq9gOFeBUP9AJ2AW3w7xYCSs3CgJkQey/QsEZJ80GgKlhBArzDEXxFN58y
GofJIEYZHLueHCW50K+QfLLUmWpFL0LB8rHpBTpHMIdEtlCbIi/vCDJdYBx6ka8T
l9I8dcc7cuXaa9nOeY9DBHR38i8mRT/Ala3kYDgZygz2k1vatwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEaaBR+kEVnTl92GsP2JuiHs7FSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzc3NmZkYWYtMWQ2Yy0z
ZGVjLWFmMjgtOTlmM2VlYzI5NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQARzwd9MxSCMhJzs8+KbYMYlJOSEq9vq3f6q16x
pkHRPPQTlmlzJetEXqsUlslbGRKh3XF8lXnALPmM8ISlXN3HRWLz2rorxMcmDeZN
bO1ROwDX4TIHGiyFMYJOGHjGxGaUfyOnUneHNzVUBB5vME69xfBWykg1nScfXNEA
8W8hddI58sh9PmAR9JdJBh8BXv46cQPF5YkvlNQxjT2GtPB+W0DG+TV8STvFr8vR
Nse3zwF+30Sux8OX83OMSct0G0Wu3H3EP6iQvTK8yWKcGRXV3phrgMbEmxoiV04w
6R4kSp3v9MGav59jO038OxaFtDmilvYgqQ6T7/4hzvQ9fCHa
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:31 2025 by rpki-client