Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b765d1-f04d-34a2-ad77-6e94104966b5.roa
File:                     d0b765d1-f04d-34a2-ad77-6e94104966b5.roa (raw, json)
Hash identifier:          aPqm0fsqm6ffLKgxpFhCj9G3VpQamm9emKXyO28kUVU=
Subject key identifier:   F7:09:31:14:FB:2D:91:1E:71:21:50:39:82:B5:FE:7B:5D:F0:B7:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183CAFAF0DF4D75B5FC42C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b765d1-f04d-34a2-ad77-6e94104966b5.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396590
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ca:fa:f0:df:4d:75:b5:fc:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ecb3af38-2679-46f4-b377-480210cd7b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:30:85:d3:bd:f1:29:dc:32:d5:28:66:2e:
                    f8:bf:88:68:15:18:8e:45:f6:4e:08:6e:99:62:c2:
                    c5:2c:e7:9c:9a:61:3d:51:2a:65:b3:25:11:c6:3d:
                    03:21:6a:06:65:b5:18:5b:37:ac:58:b9:7e:ea:c3:
                    9e:a6:9f:9f:c1:a1:ac:f4:35:c3:80:87:c8:9b:c0:
                    c6:9d:ad:81:06:4b:45:e9:a7:e6:e6:2a:05:8e:02:
                    01:47:6c:37:09:e3:94:5c:8e:26:35:92:31:4a:12:
                    9e:83:02:ea:4a:18:74:6a:6f:3f:70:e8:b5:76:50:
                    20:9b:e4:70:cc:42:b0:5d:c8:33:32:5c:d6:33:ab:
                    5d:0d:05:77:ea:30:1b:94:77:8b:e1:b6:63:62:78:
                    4b:20:c2:31:8e:bf:35:aa:b8:56:9c:ae:16:c4:26:
                    85:00:26:df:2d:c9:36:e4:ac:5b:2a:fc:6b:50:90:
                    05:20:8c:04:ef:30:0f:fa:99:ee:ff:54:68:9d:ee:
                    9d:0a:38:04:f6:bf:31:09:a0:0c:62:c8:35:71:36:
                    03:97:e5:27:e4:fe:c4:19:3c:08:18:f7:10:bf:90:
                    d7:ca:81:d9:84:9c:c1:68:85:a1:79:bd:71:57:ac:
                    ca:94:ee:31:63:c3:95:00:6b:e9:7b:4b:e6:e0:2f:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:31:14:FB:2D:91:1E:71:21:50:39:82:B5:FE:7B:5D:F0:B7:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b765d1-f04d-34a2-ad77-6e94104966b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:a0:25:32:da:60:18:f6:27:ae:04:20:0f:7f:d7:93:8f:
         30:b2:43:bb:9a:10:4d:0e:e8:ca:e7:8b:d6:70:0c:48:90:8b:
         90:45:e7:1c:99:67:c7:93:dc:f0:af:b1:31:5a:0a:39:ad:b4:
         e4:8d:18:06:4f:f9:b9:a1:c4:43:9c:e7:28:4e:8f:c0:bd:fa:
         ff:6e:1e:23:8b:7a:06:de:12:bc:af:7d:36:df:51:61:72:17:
         db:d6:8b:45:b0:27:2e:ab:3f:69:05:40:18:6b:a9:e0:30:72:
         38:e4:d1:5a:27:01:72:5f:3f:8e:98:a9:f8:aa:3c:44:03:9a:
         0d:1e:3d:05:7e:13:2e:2e:7c:2c:a1:a4:aa:41:18:c2:5c:89:
         fd:9a:d5:6e:4d:40:92:cc:a3:cc:54:1d:9b:0d:04:e7:cd:02:
         15:3d:f0:30:2c:56:5a:5a:bb:cb:e6:7f:b7:db:70:cd:b9:c0:
         af:44:01:39:29:1c:da:6d:61:07:95:f8:dc:bb:c0:ea:f2:59:
         5c:ba:fb:f1:07:3f:7a:da:99:be:b2:ff:2f:90:6a:6c:3d:34:
         10:e6:bc:fc:30:19:15:26:2c:25:c3:3c:ab:38:43:e2:6e:04:
         7b:60:0a:2d:49:fe:5e:83:c3:4c:e2:d5:a4:12:3b:6c:30:26:
         86:0e:8d:bb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8r68N9NdbX8QsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZWNiM2FmMzgtMjY3OS00NmY0LWIzNzctNDgwMjEwY2Q3YjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+swhdO98SncMtUoZi74v4hoFRiORfZOCG6Z
YsLFLOecmmE9USplsyURxj0DIWoGZbUYWzesWLl+6sOepp+fwaGs9DXDgIfIm8DG
na2BBktF6afm5ioFjgIBR2w3CeOUXI4mNZIxShKegwLqShh0am8/cOi1dlAgm+Rw
zEKwXcgzMlzWM6tdDQV36jAblHeL4bZjYnhLIMIxjr81qrhWnK4WxCaFACbfLck2
5KxbKvxrUJAFIIwE7zAP+pnu/1Rone6dCjgE9r8xCaAMYsg1cTYDl+Un5P7EGTwI
GPcQv5DXyoHZhJzBaIWheb1xV6zKlO4xY8OVAGvpe0vm4C8dVQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPcJMRT7LZEecSFQOYK1/ntd8LcjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBiNzY1ZDEtZjA0ZC0z
NGEyLWFkNzctNmU5NDEwNDk2NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBBjaAlMtpgGPYnrgQgD3/Xk48wskO7mhBNDujK
54vWcAxIkIuQReccmWfHk9zwr7ExWgo5rbTkjRgGT/m5ocRDnOcoTo/Avfr/bh4j
i3oG3hK8r30231Fhchfb1otFsCcuqz9pBUAYa6ngMHI45NFaJwFyXz+OmKn4qjxE
A5oNHj0FfhMuLnwsoaSqQRjCXIn9mtVuTUCSzKPMVB2bDQTnzQIVPfAwLFZaWrvL
5n+323DNucCvRAE5KRzabWEHlfjcu8Dq8llcuvvxBz962pm+sv8vkGpsPTQQ5rz8
MBkVJiwlwzyrOEPibgR7YAotSf5eg8NM4tWkEjtsMCaGDo27
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:52 2025 by rpki-client