Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea2bfedd-b9b7-344b-98bb-f1597fe8da4b.roa
File:                     ea2bfedd-b9b7-344b-98bb-f1597fe8da4b.roa (raw, json)
Hash identifier:          8aWw7krblrgCLE9G9o+6cQp/lUDX+RaRPL5zP1ERDQg=
Subject key identifier:   D3:3C:DB:1C:37:EB:42:B0:A5:9F:2D:AE:00:C3:B7:19:B9:FA:4B:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243F0D5491E36502F22F360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea2bfedd-b9b7-344b-98bb-f1597fe8da4b.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     396605
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f0:d5:49:1e:36:50:2f:22:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=48802e92-6610-420c-ae56-5c33d68cf816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b1:fa:48:02:47:66:69:ff:db:75:1e:b3:20:
                    29:fd:87:b0:ae:29:de:79:b4:58:0d:6b:4e:4b:3c:
                    49:a8:d1:1d:0f:23:6b:6a:e6:e2:91:0d:52:53:c0:
                    6a:d1:1b:d9:96:9b:60:0b:93:01:96:1d:82:3f:ce:
                    7d:fd:91:d3:2a:bf:63:31:ed:e2:6e:94:82:56:3c:
                    fd:e2:88:f5:c4:55:fa:c7:63:10:d6:20:ea:51:74:
                    a0:28:c8:c0:00:2f:4b:1b:0a:45:5c:7d:72:77:b3:
                    82:df:40:b5:24:69:41:0d:c9:a1:cf:d7:5b:5c:01:
                    9e:6e:55:d9:9b:ee:b7:f2:17:ab:d9:4e:09:66:bf:
                    48:e3:97:b8:04:74:86:c6:c3:72:8b:f9:10:ab:8a:
                    7d:31:f8:5f:0c:a3:16:88:9e:d5:a0:54:6a:07:01:
                    f7:77:22:47:20:cd:47:94:43:df:a4:7f:ab:33:dd:
                    93:e8:d2:40:66:89:58:8b:b1:e8:3c:8b:50:bc:43:
                    86:a1:b9:71:bb:79:18:03:6d:2c:64:01:78:8e:a1:
                    3a:b5:be:9b:2b:a8:08:69:70:c9:f6:a6:82:ba:d9:
                    eb:32:33:8a:a7:78:92:7c:04:e5:5b:ca:31:a3:8a:
                    8b:d3:86:b3:b8:71:36:6e:44:c4:ac:ae:5a:5d:e4:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3C:DB:1C:37:EB:42:B0:A5:9F:2D:AE:00:C3:B7:19:B9:FA:4B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea2bfedd-b9b7-344b-98bb-f1597fe8da4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:dc:92:1a:b0:da:68:e5:14:a1:28:93:b0:3a:2e:78:0e:2d:
         1f:c3:0d:3a:8d:5e:18:a4:5d:46:3f:ed:47:92:5c:e0:b7:84:
         e3:7c:ad:6a:ff:24:31:17:50:eb:41:c1:f3:45:ca:d2:fc:1e:
         94:84:9b:b0:ff:32:14:c7:9b:44:df:9a:fd:ee:a4:f1:0b:f3:
         b9:97:30:58:33:a6:8f:fe:c3:ae:b0:aa:a1:db:3c:a7:3f:cd:
         66:f7:a6:86:4f:9a:ee:43:91:90:5c:1a:b8:03:e5:80:a1:1a:
         3e:41:61:4e:19:2c:1e:6c:a9:43:53:47:50:55:51:bb:9c:c0:
         6a:67:ab:06:14:4d:5b:28:63:2a:c3:eb:16:f3:03:ec:6f:fa:
         fb:0d:a2:6f:1b:3b:3a:58:9b:63:fd:5e:51:4b:68:a9:19:62:
         d6:35:7f:6e:8c:41:a5:92:7d:aa:7c:a3:9a:50:a0:9e:98:6e:
         eb:8b:df:e6:14:77:e3:51:bd:eb:39:0c:6c:21:06:5f:52:a8:
         66:4a:be:1e:67:5d:97:20:cd:e5:fd:83:69:b7:eb:76:f7:a4:
         8e:76:a9:2c:06:54:84:00:9a:b4:a9:63:a2:5d:44:ff:56:50:
         33:81:a8:fe:32:6f:4f:e2:95:91:16:e2:5b:de:5b:25:39:c9:
         87:2f:3c:52
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/DVSR42UC8i82AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
NDg4MDJlOTItNjYxMC00MjBjLWFlNTYtNWMzM2Q2OGNmODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57H6SAJHZmn/23UesyAp/YewrineebRYDWtO
SzxJqNEdDyNraubikQ1SU8Bq0RvZlptgC5MBlh2CP859/ZHTKr9jMe3ibpSCVjz9
4oj1xFX6x2MQ1iDqUXSgKMjAAC9LGwpFXH1yd7OC30C1JGlBDcmhz9dbXAGeblXZ
m+638her2U4JZr9I45e4BHSGxsNyi/kQq4p9MfhfDKMWiJ7VoFRqBwH3dyJHIM1H
lEPfpH+rM92T6NJAZolYi7HoPItQvEOGoblxu3kYA20sZAF4jqE6tb6bK6gIaXDJ
9qaCutnrMjOKp3iSfATlW8oxo4qL04azuHE2bkTErK5aXeQ6CQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNM82xw360KwpZ8trgDDtxm5+ksFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWEyYmZlZGQtYjliNy0z
NDRiLTk4YmItZjE1OTdmZThkYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBw3JIasNpo5RShKJOwOi54Di0fww06jV4YpF1G
P+1Hklzgt4TjfK1q/yQxF1DrQcHzRcrS/B6UhJuw/zIUx5tE35r97qTxC/O5lzBY
M6aP/sOusKqh2zynP81m96aGT5ruQ5GQXBq4A+WAoRo+QWFOGSwebKlDU0dQVVG7
nMBqZ6sGFE1bKGMqw+sW8wPsb/r7DaJvGzs6WJtj/V5RS2ipGWLWNX9ujEGlkn2q
fKOaUKCemG7ri9/mFHfjUb3rOQxsIQZfUqhmSr4eZ12XIM3l/YNpt+t296SOdqks
BlSEAJq0qWOiXUT/VlAzgaj+Mm9P4pWRFuJb3lslOcmHLzxS
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:24 2025 by rpki-client