Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa
File:                     e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa (raw, json)
Hash identifier:          H9VZaxxU0XbSNKl0XPHo2fNKs+tLkQKQt0lDBWM5+rc=
Subject key identifier:   2A:24:A2:F6:86:43:FA:C3:A6:25:86:03:83:4B:67:B3:95:3A:31:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153EFC9118B453D7C3E640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396595
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3e:fc:91:18:b4:53:d7:c3:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=6cebc6c8-9936-4626-b021-2a074e5ee89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:07:22:7d:d2:50:93:15:f3:7d:ef:08:4c:
                    54:b2:32:75:8c:e9:fc:b3:3b:1a:f7:a0:f5:6d:92:
                    bb:c9:f3:84:38:19:06:c0:02:a4:8f:6c:cd:0a:f1:
                    32:d6:03:da:a8:32:24:d9:d5:e5:eb:ec:f6:c5:6f:
                    e2:d2:1b:fc:9c:22:c7:d0:4e:a3:7b:8e:f5:d4:8c:
                    91:bb:ba:8a:46:ed:81:6c:9d:e7:a6:71:61:5f:cb:
                    e7:e6:f2:94:6d:78:4f:6f:74:4f:f5:eb:12:19:76:
                    2f:8f:33:0d:09:1b:ec:a6:9e:c1:4b:34:a0:9a:01:
                    ee:1c:81:62:9b:43:48:ef:f0:e0:aa:2c:02:78:da:
                    8e:8d:65:b9:82:69:85:62:80:5e:86:b3:da:5c:76:
                    84:0c:fc:ae:57:62:44:00:66:b1:ec:3a:3f:aa:ed:
                    38:66:a7:54:a6:97:86:0b:b1:04:03:1f:87:66:91:
                    8d:ed:17:7f:c7:9f:65:0b:7b:94:90:69:7c:8f:8c:
                    b3:59:43:65:a7:a1:8d:32:54:c8:88:a4:b2:6d:2d:
                    5d:4f:b0:f8:59:2f:80:a9:ab:3b:7a:42:be:a4:9e:
                    d6:73:4d:33:24:2d:75:3b:24:2a:a2:64:2b:90:01:
                    f3:2f:99:e4:50:59:40:4d:5d:19:f1:d1:12:cb:dc:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:24:A2:F6:86:43:FA:C3:A6:25:86:03:83:4B:67:B3:95:3A:31:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e62be30c-e96f-3cbf-ab0d-6f6a7152ba39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:36:e1:1f:cb:e7:f7:54:9e:b7:8d:de:2b:65:c2:59:7a:
         0a:46:02:49:ff:fe:54:df:22:a6:30:1a:67:c3:9c:f6:78:6c:
         9f:d9:96:f7:45:1e:ce:5c:0f:e8:92:06:0a:70:8a:73:a8:33:
         bc:04:67:fb:10:11:25:46:45:6f:54:c3:1c:db:3e:fa:df:e1:
         62:1e:93:a1:04:e9:00:dd:ea:b2:db:67:d9:f1:ee:95:fd:e8:
         42:d3:91:56:3c:a9:99:dd:af:8f:0e:e5:11:13:9f:33:38:d4:
         eb:03:e4:da:6b:29:6d:11:7f:24:61:58:47:d7:14:10:9a:b4:
         1a:59:27:b1:87:9c:3d:94:51:15:35:de:1c:d0:d0:aa:16:c2:
         71:13:67:ac:ac:86:c8:3f:69:0a:6b:95:40:6d:c8:c9:43:7d:
         1d:fb:25:f8:54:74:7a:c6:85:ec:67:0c:31:d6:b4:79:f2:5d:
         24:8e:01:c6:87:63:ca:fc:44:32:1c:8a:79:e9:fd:b0:8b:2c:
         57:3c:a4:c9:19:58:bc:2a:0f:50:14:16:83:17:fb:bd:89:59:
         61:0c:de:d5:65:0a:41:0b:c3:80:be:8b:71:4b:4d:6c:74:87:
         11:9c:ca:13:a1:87:2b:2d:94:a2:e0:e4:73:77:18:9c:d7:dc:
         2c:65:f4:57
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FT78kRi0U9fD5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NmNlYmM2YzgtOTkzNi00NjI2LWIwMjEtMmEwNzRlNWVlODliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr0HIn3SUJMV833vCExUsjJ1jOn8szsa96D1
bZK7yfOEOBkGwAKkj2zNCvEy1gPaqDIk2dXl6+z2xW/i0hv8nCLH0E6je4711IyR
u7qKRu2BbJ3npnFhX8vn5vKUbXhPb3RP9esSGXYvjzMNCRvspp7BSzSgmgHuHIFi
m0NI7/DgqiwCeNqOjWW5gmmFYoBehrPaXHaEDPyuV2JEAGax7Do/qu04ZqdUppeG
C7EEAx+HZpGN7Rd/x59lC3uUkGl8j4yzWUNlp6GNMlTIiKSybS1dT7D4WS+Aqas7
ekK+pJ7Wc00zJC11OyQqomQrkAHzL5nkUFlATV0Z8dESy9y66QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCokovaGQ/rDpiWGA4NLZ7OVOjEAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTYyYmUzMGMtZTk2Zi0z
Y2JmLWFiMGQtNmY2YTcxNTJiYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBYqjbhH8vn91Set43eK2XCWXoKRgJJ//5U3yKm
MBpnw5z2eGyf2Zb3RR7OXA/okgYKcIpzqDO8BGf7EBElRkVvVMMc2z763+FiHpOh
BOkA3eqy22fZ8e6V/ehC05FWPKmZ3a+PDuURE58zONTrA+TaayltEX8kYVhH1xQQ
mrQaWSexh5w9lFEVNd4c0NCqFsJxE2esrIbIP2kKa5VAbcjJQ30d+yX4VHR6xoXs
Zwwx1rR58l0kjgHGh2PK/EQyHIp56f2wiyxXPKTJGVi8Kg9QFBaDF/u9iVlhDN7V
ZQpBC8OAvotxS01sdIcRnMoToYcrLZSi4ORzdxic19wsZfRX
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:04 2025 by rpki-client