Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa
File:                     ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa (raw, json)
Hash identifier:          NypuobBUPpzGbUmB12elYGDfMgygqT/+eRdc/cX2r8A=
Subject key identifier:   CF:23:0C:B1:77:A0:84:75:6F:90:19:BE:31:72:5D:E3:71:FF:74:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB208295DE910795794790
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     211369
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:20:82:95:de:91:07:95:79:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a6b2d82c-b82e-4caa-8a5f-d48d2aef2b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:ae:0e:af:90:cc:9a:36:d3:e8:fa:7a:2a:
                    91:8d:16:a2:49:db:a0:eb:58:1f:f1:52:77:54:4b:
                    10:da:df:85:10:06:f2:ae:1d:ef:22:64:96:5a:d3:
                    4e:ad:30:ea:7e:28:09:3e:9f:3b:41:5e:4c:9b:c4:
                    d5:a2:24:b1:9f:5e:1f:23:b0:89:2a:60:00:62:cb:
                    6c:19:69:55:c5:77:84:a5:ac:13:73:ff:e7:59:36:
                    ab:19:09:71:11:66:a9:c0:1e:d5:de:ad:27:e7:89:
                    4d:71:b7:1a:67:fa:56:cd:62:27:69:07:eb:7f:c7:
                    a9:82:68:33:91:c4:9a:2f:66:bb:86:a7:83:f2:02:
                    77:15:c5:15:89:be:50:66:23:66:a7:49:2b:25:75:
                    4b:9e:52:fd:19:13:38:29:fb:f3:7a:b5:68:a0:41:
                    20:c8:c6:c2:20:05:f3:2d:b6:5c:f3:17:3b:25:0f:
                    58:31:26:35:97:34:5d:6b:40:0e:c2:8b:91:64:64:
                    c2:19:62:5c:6f:74:f1:b3:97:21:cb:bc:72:47:04:
                    b4:19:44:3f:bd:78:f3:13:1c:c5:60:24:af:f7:dd:
                    49:c4:1f:67:1d:a4:da:b0:ab:16:48:b4:3d:87:a1:
                    ed:7d:05:1e:57:47:ce:9f:e6:25:9a:51:3e:df:52:
                    10:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:0C:B1:77:A0:84:75:6F:90:19:BE:31:72:5D:E3:71:FF:74:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:d2:1f:b1:2f:93:b0:09:ec:e9:8b:07:f5:fc:eb:f8:3d:
         33:17:77:30:08:a0:d0:68:5a:59:7e:2b:d9:7f:a3:fb:d7:ab:
         68:ae:66:e2:ee:c0:92:95:9c:63:30:a0:2b:c9:57:67:a2:11:
         18:72:ca:89:77:61:6e:96:b1:91:e2:ce:22:66:54:a8:d6:21:
         52:c3:d6:52:bf:ed:70:53:e2:ee:eb:f5:98:72:57:89:ab:4d:
         3d:72:72:33:a2:dd:6c:87:ca:b5:09:94:90:e6:8c:70:4a:32:
         cc:d0:58:45:38:18:69:f4:40:20:af:a7:9b:96:6c:0c:39:d4:
         b2:3d:1e:77:50:82:52:1e:08:fd:be:81:df:2c:64:c1:3e:9c:
         3d:fd:36:af:c0:4e:12:86:df:19:85:b3:f3:77:8c:da:94:dd:
         32:95:46:76:9a:c6:01:25:19:fe:b6:a0:c4:9e:42:f2:5b:fb:
         2f:3f:78:b8:cc:d5:5f:03:96:83:73:73:69:73:94:82:6d:cc:
         ea:70:a7:68:df:e0:80:f4:30:50:d3:e8:9e:d0:53:cc:cc:67:
         51:57:61:f2:cf:46:c3:14:17:3a:e1:4d:60:03:48:f0:db:71:
         f8:12:9e:10:d8:8d:92:b5:00:37:cf:4f:66:36:19:fa:23:29:
         c3:44:fa:cb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yCCld6RB5V5R5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YTZiMmQ4MmMtYjgyZS00Y2FhLThhNWYtZDQ4ZDJhZWYyYjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hmuDq+QzJo20+j6eiqRjRaiSdug61gf8VJ3
VEsQ2t+FEAbyrh3vImSWWtNOrTDqfigJPp87QV5Mm8TVoiSxn14fI7CJKmAAYsts
GWlVxXeEpawTc//nWTarGQlxEWapwB7V3q0n54lNcbcaZ/pWzWInaQfrf8epgmgz
kcSaL2a7hqeD8gJ3FcUVib5QZiNmp0krJXVLnlL9GRM4KfvzerVooEEgyMbCIAXz
LbZc8xc7JQ9YMSY1lzRda0AOwouRZGTCGWJcb3Txs5chy7xyRwS0GUQ/vXjzExzF
YCSv991JxB9nHaTasKsWSLQ9h6HtfQUeV0fOn+YlmlE+31IQHQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM8jDLF3oIR1b5AZvjFyXeNx/3Q1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWQ3MzBjN2YtMWI4YS0z
ZGE0LTljYTctNWU1MjQ5ZTJiZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQABP9IfsS+TsAns6YsH9fzr+D0zF3cwCKDQaFpZ
fivZf6P716tormbi7sCSlZxjMKAryVdnohEYcsqJd2FulrGR4s4iZlSo1iFSw9ZS
v+1wU+Lu6/WYcleJq009cnIzot1sh8q1CZSQ5oxwSjLM0FhFOBhp9EAgr6eblmwM
OdSyPR53UIJSHgj9voHfLGTBPpw9/TavwE4Sht8ZhbPzd4zalN0ylUZ2msYBJRn+
tqDEnkLyW/svP3i4zNVfA5aDc3Npc5SCbczqcKdo3+CA9DBQ0+ie0FPMzGdRV2Hy
z0bDFBc64U1gA0jw23H4Ep4Q2I2StQA3z09mNhn6IynDRPrL
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:15:22 2025 by rpki-client