Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc485e56-0adc-35bb-be90-e9f6a427c7bb.roa
File:                     cc485e56-0adc-35bb-be90-e9f6a427c7bb.roa (raw, json)
Hash identifier:          YW4fStzf0OWuKtEc0KA7GzXkWm6J3orzmkhAhk7VyHk=
Subject key identifier:   22:34:5D:AB:05:22:E8:BE:50:B2:B3:D1:34:4C:D4:6D:1E:C1:2C:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153EADF8C7E449A08F3E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc485e56-0adc-35bb-be90-e9f6a427c7bb.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396617
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3e:ad:f8:c7:e4:49:a0:8f:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=ad53513f-8cbb-404b-b571-6ea453f2827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:9c:d9:a2:04:29:85:02:cf:ae:80:d5:ed:
                    8f:d1:a8:8f:05:31:d7:22:1d:12:46:34:e3:90:a3:
                    47:20:a9:bc:7f:cf:18:da:05:8e:f3:ee:14:cb:96:
                    95:0c:a5:43:e6:85:ed:2e:23:34:cc:3e:ef:1d:c5:
                    03:b7:c5:d2:bc:2a:f4:e8:74:fc:3d:c9:97:2f:20:
                    e9:f1:10:64:f2:da:39:58:32:b8:6d:85:93:64:40:
                    ef:11:50:db:d4:97:e0:35:df:d6:f8:e0:8d:dd:3c:
                    1e:f9:0f:95:13:cd:b3:28:7e:2d:dd:44:c3:b4:df:
                    3f:47:d5:f8:7f:86:73:1c:0e:b4:80:a6:5a:75:6e:
                    06:8c:fb:e1:dc:85:c0:41:a9:83:e3:b0:bd:61:9a:
                    e7:0f:d2:07:21:c6:20:bf:93:78:51:65:97:99:6f:
                    cd:0e:80:a9:bb:72:c6:48:2c:84:13:ce:da:97:17:
                    41:bd:0e:a8:ac:5e:73:27:5a:ed:a9:28:81:aa:cf:
                    d0:a5:e7:8f:ed:fc:c0:34:d2:77:e1:65:4e:9b:01:
                    35:be:5e:fd:b6:bf:2f:f5:c9:56:a1:3f:7f:5d:d0:
                    d7:ed:31:25:2e:b9:9d:2a:f9:55:42:b5:c4:24:cd:
                    de:5c:e6:62:ee:aa:e9:93:90:4a:d3:77:1a:ea:94:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:5D:AB:05:22:E8:BE:50:B2:B3:D1:34:4C:D4:6D:1E:C1:2C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc485e56-0adc-35bb-be90-e9f6a427c7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:bc:4b:99:c8:78:75:7f:2c:6e:69:5c:6b:09:ac:76:34:
         6f:b4:eb:f5:22:47:36:56:77:15:ce:91:43:cd:cf:79:ca:06:
         c9:b3:ba:b8:ab:1e:07:3b:40:8c:ba:8f:00:ce:a5:39:9d:50:
         95:33:78:18:ff:ca:e1:0b:1d:51:b6:d9:d2:64:8f:54:8f:5d:
         28:f0:de:08:e9:40:06:cc:7b:dd:fa:03:43:21:55:70:fe:51:
         3d:0d:48:d2:2f:ec:44:0b:60:84:57:d2:db:03:d1:eb:08:78:
         d0:2f:ba:07:82:17:28:33:35:30:1e:d2:5f:6d:87:a4:69:ca:
         84:f4:1e:38:c6:c9:90:8e:e4:de:8d:e2:fc:a2:34:42:88:d4:
         29:ba:ff:71:c4:ea:5c:ac:fd:6f:99:c8:c6:d4:1e:83:83:64:
         94:b1:dd:16:3b:ca:b5:33:21:32:f5:c0:98:55:0f:e3:c2:8b:
         3a:54:3b:d6:c2:97:2e:30:17:72:86:11:b4:03:bd:88:2f:14:
         37:fa:f9:89:af:2f:7a:15:2d:4e:b7:ed:66:26:d6:ba:65:66:
         c8:6f:65:c4:cf:ff:38:1e:30:4c:6e:23:1f:4f:37:4b:bf:f2:
         92:70:d5:a8:a4:86:0f:6f:37:54:68:2d:d7:97:14:86:c6:f8:
         ef:28:b8:8d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FT6t+MfkSaCPPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
YWQ1MzUxM2YtOGNiYi00MDRiLWI1NzEtNmVhNDUzZjI4MjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBac2aIEKYUCz66A1e2P0aiPBTHXIh0SRjTj
kKNHIKm8f88Y2gWO8+4Uy5aVDKVD5oXtLiM0zD7vHcUDt8XSvCr06HT8PcmXLyDp
8RBk8to5WDK4bYWTZEDvEVDb1JfgNd/W+OCN3Twe+Q+VE82zKH4t3UTDtN8/R9X4
f4ZzHA60gKZadW4GjPvh3IXAQamD47C9YZrnD9IHIcYgv5N4UWWXmW/NDoCpu3LG
SCyEE87alxdBvQ6orF5zJ1rtqSiBqs/QpeeP7fzANNJ34WVOmwE1vl79tr8v9clW
oT9/XdDX7TElLrmdKvlVQrXEJM3eXOZi7qrpk5BK03ca6pR40wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCI0XasFIui+ULKz0TRM1G0ewSzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M0ODVlNTYtMGFkYy0z
NWJiLWJlOTAtZTlmNmE0MjdjN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAFL7xLmch4dX8sbmlcawmsdjRvtOv1Ikc2VncV
zpFDzc95ygbJs7q4qx4HO0CMuo8AzqU5nVCVM3gY/8rhCx1RttnSZI9Uj10o8N4I
6UAGzHvd+gNDIVVw/lE9DUjSL+xEC2CEV9LbA9HrCHjQL7oHghcoMzUwHtJfbYek
acqE9B44xsmQjuTejeL8ojRCiNQpuv9xxOpcrP1vmcjG1B6Dg2SUsd0WO8q1MyEy
9cCYVQ/jwos6VDvWwpcuMBdyhhG0A72ILxQ3+vmJry96FS1Ot+1mJta6ZWbIb2XE
z/84HjBMbiMfTzdLv/KScNWopIYPbzdUaC3XlxSGxvjvKLiN
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:59 2025 by rpki-client