Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5514269-4f1d-3e9c-a3e9-75bbd18e24e6.roa
File:                     f5514269-4f1d-3e9c-a3e9-75bbd18e24e6.roa (raw, json)
Hash identifier:          JJYKkeBYJ9JedBZ459/OZCh64C6Yx/IESY2BqdKHTbw=
Subject key identifier:   6B:ED:13:82:86:C0:BE:F1:57:69:34:70:47:43:34:EA:35:F7:DC:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5F12C12CFBC5FC964400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5514269-4f1d-3e9c-a3e9-75bbd18e24e6.roa
Signing time:             Tue 01 Jul 2025 13:48:35 +0000
ROA not before:           Tue 01 Jul 2025 13:48:35 +0000
ROA not after:            Mon 29 Sep 2025 13:48:35 +0000
asID:                     396552
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5f:12:c1:2c:fb:c5:fc:96:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:35 2025 GMT
            Not After : Sep 29 13:48:35 2025 GMT
        Subject: CN=2441fe3d-8969-49b7-9f7b-b256fe5bf325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:82:fc:d5:7a:13:06:6f:3e:9e:55:17:c8:
                    07:fb:29:3b:49:cb:e1:70:ad:7c:3c:51:4d:95:10:
                    09:88:4c:b3:19:60:dc:31:6b:0a:d0:76:d2:7c:39:
                    ea:59:c4:71:4e:ed:3b:c9:1f:6c:49:70:b8:8b:c0:
                    53:81:cb:32:03:69:aa:78:0b:0d:f4:62:32:17:97:
                    d7:91:e6:93:07:55:17:47:7e:30:b5:48:a2:5f:24:
                    3a:13:bf:8c:4e:f5:0d:30:b5:26:2b:81:54:38:0f:
                    4e:80:81:65:dd:9c:be:1a:f9:2a:5b:2c:32:cd:4c:
                    c4:c0:59:1f:0b:cc:04:76:a6:c6:d5:b3:81:af:91:
                    df:85:90:76:5b:a6:d0:37:f9:a6:6a:6d:fa:10:ba:
                    8d:04:a3:c2:c3:36:fe:31:f0:70:00:3d:fd:21:13:
                    4c:62:5e:e8:e0:60:c0:87:2e:0e:c6:c4:2d:01:78:
                    2b:78:bc:ee:39:9f:1a:d7:b4:d2:89:f7:4d:31:d7:
                    59:a2:f7:ab:93:4d:c5:45:10:33:d1:87:b9:09:08:
                    a0:af:94:e7:af:20:46:d9:f3:21:ec:a4:14:42:84:
                    64:ef:8c:cf:6b:bf:5c:4a:b6:59:0e:07:6f:b2:02:
                    e8:0a:78:59:a4:ab:ab:90:88:40:c0:2a:c4:91:7e:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:13:82:86:C0:BE:F1:57:69:34:70:47:43:34:EA:35:F7:DC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5514269-4f1d-3e9c-a3e9-75bbd18e24e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:24:51:64:2d:65:a5:a4:fe:0a:a8:00:85:22:ab:0d:d6:db:
         62:6e:79:7b:a8:f1:06:1d:66:b8:52:01:6f:01:7c:7b:30:55:
         0a:be:94:92:cb:2c:82:29:6b:49:56:61:12:fc:2b:f7:14:be:
         3e:88:b5:71:cb:96:7b:b6:f6:24:8b:a2:96:dd:58:40:01:8b:
         ff:14:32:a5:25:f3:a8:e9:de:de:1a:39:2a:41:9c:4a:fd:10:
         35:dd:f5:14:81:b5:57:32:6c:7e:92:ae:fa:5f:af:55:c9:d6:
         60:12:a8:0b:f9:2a:e4:8e:a7:82:60:f9:ee:5a:81:ab:fd:47:
         52:95:83:a5:e1:0c:5f:16:b1:9e:90:3c:fe:99:bb:20:a8:ca:
         10:6c:d8:8a:74:83:08:cb:73:7e:d2:27:e1:0d:7c:7e:a3:d5:
         58:63:9c:99:af:cb:9f:f7:7e:17:e8:cf:a9:c3:1a:94:e4:65:
         1b:89:22:f5:5d:ea:96:0e:75:87:01:87:42:07:a3:25:4e:4f:
         ae:89:ee:8e:59:b0:ec:1c:e1:4a:32:e1:90:e0:42:f4:3a:22:
         71:aa:7e:0c:b1:7d:d0:22:b7:f5:85:0b:48:19:a8:19:fc:1b:
         8c:07:ca:38:f8:2d:c2:f4:af:ff:e1:62:f5:16:3f:25:66:e9:
         3c:c2:62:e3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3V8SwSz7xfyWRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMTEzNDgzNVoXDTI1MDkyOTEzNDgzNVowLzEtMCsGA1UEAxMk
MjQ0MWZlM2QtODk2OS00OWI3LTlmN2ItYjI1NmZlNWJmMzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iSC/NV6EwZvPp5VF8gH+yk7ScvhcK18PFFN
lRAJiEyzGWDcMWsK0HbSfDnqWcRxTu07yR9sSXC4i8BTgcsyA2mqeAsN9GIyF5fX
keaTB1UXR34wtUiiXyQ6E7+MTvUNMLUmK4FUOA9OgIFl3Zy+GvkqWywyzUzEwFkf
C8wEdqbG1bOBr5HfhZB2W6bQN/mmam36ELqNBKPCwzb+MfBwAD39IRNMYl7o4GDA
hy4OxsQtAXgreLzuOZ8a17TSifdNMddZoverk03FRRAz0Ye5CQigr5TnryBG2fMh
7KQUQoRk74zPa79cSrZZDgdvsgLoCnhZpKurkIhAwCrEkX6qCQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGvtE4KGwL7xV2k0cEdDNOo199w8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU1MTQyNjktNGYxZC0z
ZTljLWEzZTktNzViYmQxOGUyNGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCTJFFkLWWlpP4KqACFIqsN1ttibnl7qPEGHWa4
UgFvAXx7MFUKvpSSyyyCKWtJVmES/Cv3FL4+iLVxy5Z7tvYki6KW3VhAAYv/FDKl
JfOo6d7eGjkqQZxK/RA13fUUgbVXMmx+kq76X69VydZgEqgL+SrkjqeCYPnuWoGr
/UdSlYOl4QxfFrGekDz+mbsgqMoQbNiKdIMIy3N+0ifhDXx+o9VYY5yZr8uf934X
6M+pwxqU5GUbiSL1XeqWDnWHAYdCB6MlTk+uie6OWbDsHOFKMuGQ4EL0OiJxqn4M
sX3QIrf1hQtIGagZ/BuMB8o4+C3C9K//4WL1Fj8lZuk8wmLj
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:58:47 2025 by rpki-client