Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea1ee510-665c-38d1-8d78-86647c0de05a.roa
File:                     ea1ee510-665c-38d1-8d78-86647c0de05a.roa (raw, json)
Hash identifier:          hNrSyTMngf6rojtDdhXTu/MQOOLKUjwqWOu5hcNvJBk=
Subject key identifier:   27:87:B0:A1:B2:4D:A6:AE:38:EA:14:25:3D:74:14:19:54:7C:EF:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D8DE3198C9BA911B9100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea1ee510-665c-38d1-8d78-86647c0de05a.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     396553
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d8:de:31:98:c9:ba:91:1b:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=66871180-ff07-43e0-b865-d8d62e44272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:d0:02:13:a0:88:94:41:ca:ee:94:ef:ca:
                    9d:59:a4:4a:e1:21:03:cc:c4:a4:24:0b:40:3d:ed:
                    b6:7d:04:9b:2d:37:03:a0:e7:31:f4:bd:7b:32:bc:
                    dc:f5:5f:26:ae:af:36:28:85:ad:ee:57:dc:d3:7d:
                    e7:73:0a:47:57:90:1b:8e:bd:4d:90:76:1e:a1:f1:
                    28:a2:31:75:34:05:e6:c9:e2:7a:ba:ef:44:76:8b:
                    0f:03:df:ee:5d:f6:5f:a1:91:b5:db:7b:14:08:2a:
                    3e:e8:f5:6b:e8:3b:f4:39:74:4c:b5:53:f1:f6:51:
                    39:1e:8a:9e:44:a9:0d:74:d1:63:4a:b9:55:6f:80:
                    36:bf:78:b9:5f:15:9b:a6:41:16:4d:d0:1b:24:12:
                    4a:a0:60:f1:03:0c:5d:cc:13:70:2c:de:b8:7b:23:
                    4e:31:bd:fd:01:ab:fa:4d:5b:4f:0e:13:e1:07:40:
                    7f:c5:0e:13:58:33:e1:95:61:07:ec:81:c1:a4:06:
                    d4:aa:c0:30:99:90:6b:b4:d9:73:33:ab:4b:a2:2b:
                    61:9f:cf:13:a7:f8:c5:24:8e:12:31:6d:f2:60:9b:
                    d4:47:1b:87:d4:a1:bb:3a:2e:d4:93:ab:ec:7e:11:
                    52:92:16:bb:10:f8:6c:11:15:86:27:b8:10:80:a6:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:B0:A1:B2:4D:A6:AE:38:EA:14:25:3D:74:14:19:54:7C:EF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea1ee510-665c-38d1-8d78-86647c0de05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:25:9e:95:4b:fa:ef:47:85:74:05:4f:10:10:83:a1:fc:
         79:67:66:a0:a4:0d:36:3f:30:be:e4:f6:c3:a5:9a:66:96:d2:
         fe:d4:0c:93:63:18:43:72:29:c2:bb:45:a4:cf:39:d5:58:33:
         e3:fc:9e:a0:0a:18:0b:6c:5e:cf:71:56:f0:4a:3c:46:db:73:
         ab:07:00:53:b5:80:21:39:96:a6:79:e3:11:19:bf:64:a4:e3:
         79:99:56:97:0b:03:53:43:41:c7:9c:df:87:c7:b8:2f:b4:6f:
         04:2d:95:f1:64:17:ed:a5:f2:83:a9:9f:db:7f:f1:d7:ea:22:
         67:4e:52:4d:b1:e3:74:fb:59:75:41:c5:d6:d3:19:bf:50:b2:
         af:86:e5:64:f7:7e:bb:d8:b8:87:9d:e7:cb:90:25:e1:1f:74:
         99:b7:fe:96:29:0a:e5:6b:d6:e4:67:44:02:aa:19:9d:50:71:
         ff:04:79:97:d9:35:67:86:ef:75:82:01:d6:48:f3:5e:b5:b7:
         de:1b:90:c5:c7:b3:91:12:b7:97:3d:5b:21:65:f0:43:38:d4:
         f7:5f:79:57:65:5d:ba:63:f1:18:9c:92:d2:7a:76:18:15:85:
         98:db:30:ed:13:36:a4:a3:bd:f5:eb:15:87:62:e6:a2:8e:ea:
         bf:74:f7:a8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49jeMZjJupEbkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
NjY4NzExODAtZmYwNy00M2UwLWI4NjUtZDhkNjJlNDQyNzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHTQAhOgiJRByu6U78qdWaRK4SEDzMSkJAtA
Pe22fQSbLTcDoOcx9L17Mrzc9V8mrq82KIWt7lfc033ncwpHV5Abjr1NkHYeofEo
ojF1NAXmyeJ6uu9EdosPA9/uXfZfoZG123sUCCo+6PVr6Dv0OXRMtVPx9lE5Hoqe
RKkNdNFjSrlVb4A2v3i5XxWbpkEWTdAbJBJKoGDxAwxdzBNwLN64eyNOMb39Aav6
TVtPDhPhB0B/xQ4TWDPhlWEH7IHBpAbUqsAwmZBrtNlzM6tLoithn88Tp/jFJI4S
MW3yYJvURxuH1KG7Oi7Uk6vsfhFSkha7EPhsERWGJ7gQgKYHIQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCeHsKGyTaauOOoUJT10FBlUfO+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWExZWU1MTAtNjY1Yy0z
OGQxLThkNzgtODY2NDdjMGRlMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBCXiWelUv670eFdAVPEBCDofx5Z2agpA02PzC+
5PbDpZpmltL+1AyTYxhDcinCu0WkzznVWDPj/J6gChgLbF7PcVbwSjxG23OrBwBT
tYAhOZameeMRGb9kpON5mVaXCwNTQ0HHnN+Hx7gvtG8ELZXxZBftpfKDqZ/bf/HX
6iJnTlJNseN0+1l1QcXW0xm/ULKvhuVk93672LiHnefLkCXhH3SZt/6WKQrla9bk
Z0QCqhmdUHH/BHmX2TVnhu91ggHWSPNetbfeG5DFx7OREreXPVshZfBDONT3X3lX
ZV26Y/EYnJLSenYYFYWY2zDtEzako7316xWHYuaijuq/dPeo
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:31 2025 by rpki-client