Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe77943d-9a9a-38b7-a7ff-9bdbc8262091.roa
File:                     fe77943d-9a9a-38b7-a7ff-9bdbc8262091.roa (raw, json)
Hash identifier:          KuFnYFOoaVL4Ef02mI2euctOZpyI7wtNI3CoS+gwnyw=
Subject key identifier:   CB:BA:D3:ED:36:E7:7E:82:C5:A7:64:34:84:27:A1:48:19:75:E0:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F84F25A6F4C4BF3ED318
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe77943d-9a9a-38b7-a7ff-9bdbc8262091.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396574
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f8:4f:25:a6:f4:c4:bf:3e:d3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=82134a38-b939-4484-9e00-c85b73fd81bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5a:70:a4:50:45:7a:6b:d6:18:74:fd:26:20:
                    e9:1f:e5:45:64:04:07:7e:ba:00:99:b2:31:f4:ad:
                    b5:a8:42:f7:84:6a:0b:20:a7:c9:c2:d0:16:40:33:
                    b6:59:78:d3:ef:8e:e1:99:65:68:83:32:d6:a2:70:
                    49:ae:bc:2c:10:29:f4:95:bc:6b:04:58:ce:1c:ce:
                    f8:cc:39:f7:59:ec:81:76:d0:e6:21:03:21:d4:be:
                    99:a5:8c:8b:72:8b:e0:03:4a:03:ba:0b:56:ff:f5:
                    8d:30:f0:88:38:89:de:76:50:2b:d9:f8:f7:be:34:
                    26:e4:c3:ea:b4:06:ab:f0:66:16:83:3d:a6:21:54:
                    fb:56:59:c7:f6:05:8f:e6:20:46:ed:fe:a8:05:29:
                    e7:6c:bc:37:d4:26:46:ae:1b:8a:d6:7c:47:83:d1:
                    7d:55:c5:ec:95:a5:ce:27:4e:09:67:4d:60:e9:ca:
                    7d:81:aa:4c:91:be:ad:07:33:ff:7a:e2:85:a1:61:
                    3d:b2:2b:74:81:3f:36:81:bf:75:f7:dc:c1:92:4f:
                    85:b9:a1:24:88:63:09:e8:6a:d5:8a:70:53:b7:17:
                    6e:35:9d:77:d0:ab:9e:ab:3c:94:8d:5c:b1:dd:30:
                    6d:d0:d9:f4:df:81:c2:60:4a:c2:2a:16:9e:80:d5:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:D3:ED:36:E7:7E:82:C5:A7:64:34:84:27:A1:48:19:75:E0:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe77943d-9a9a-38b7-a7ff-9bdbc8262091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:f1:31:e3:3d:1c:7b:d6:cf:7f:16:ac:3c:0e:da:30:24:
         e2:31:0e:5a:3f:17:16:9f:1a:94:a0:f3:ff:7e:dc:53:6c:28:
         53:d2:82:f2:d9:fe:dc:ab:e4:a0:5e:bc:33:6e:5e:d1:c3:92:
         94:e9:e7:ae:34:31:87:69:05:a1:bc:2c:b6:60:e5:e9:5f:2d:
         03:50:b4:44:d7:98:ce:26:07:c6:f3:28:4a:43:38:52:16:f5:
         81:34:28:5e:80:31:48:81:0a:b2:a0:86:9d:28:14:89:01:ae:
         8d:72:a6:1e:bb:23:95:40:65:6d:76:19:a9:d2:85:69:47:9a:
         47:de:33:c1:7d:cf:f0:d5:d5:72:76:32:ed:95:78:c9:ba:eb:
         8d:a6:2a:60:87:ec:4a:19:bd:f3:a1:ac:2a:ee:c7:0e:06:81:
         f3:37:2f:8f:44:5e:52:9a:e8:d7:44:6e:d6:c8:8d:15:d1:55:
         8a:74:df:d7:02:f9:6a:1f:0e:b0:ff:b9:a5:f3:05:ab:ef:b2:
         2a:72:96:a4:63:a8:e4:7e:2a:73:2b:64:eb:17:db:94:6e:94:
         f8:c4:83:84:24:f5:ca:4a:7e:8e:f6:61:fc:4f:2d:3e:21:32:
         97:7d:14:ac:7f:08:d4:1a:0a:7b:b9:2b:c8:98:5f:a0:b4:2c:
         95:5a:6a:03
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/hPJab0xL8+0xgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ODIxMzRhMzgtYjkzOS00NDg0LTllMDAtYzg1YjczZmQ4MWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1pwpFBFemvWGHT9JiDpH+VFZAQHfroAmbIx
9K21qEL3hGoLIKfJwtAWQDO2WXjT747hmWVogzLWonBJrrwsECn0lbxrBFjOHM74
zDn3WeyBdtDmIQMh1L6ZpYyLcovgA0oDugtW//WNMPCIOInedlAr2fj3vjQm5MPq
tAar8GYWgz2mIVT7VlnH9gWP5iBG7f6oBSnnbLw31CZGrhuK1nxHg9F9VcXslaXO
J04JZ01g6cp9gapMkb6tBzP/euKFoWE9sit0gT82gb9199zBkk+FuaEkiGMJ6GrV
inBTtxduNZ130KueqzyUjVyx3TBt0Nn034HCYErCKhaegNUikQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMu60+02536CxadkNIQnoUgZdeDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmU3Nzk0M2QtOWE5YS0z
OGI3LWE3ZmYtOWJkYmM4MjYyMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBujvEx4z0ce9bPfxasPA7aMCTiMQ5aPxcWnxqU
oPP/ftxTbChT0oLy2f7cq+SgXrwzbl7Rw5KU6eeuNDGHaQWhvCy2YOXpXy0DULRE
15jOJgfG8yhKQzhSFvWBNChegDFIgQqyoIadKBSJAa6NcqYeuyOVQGVtdhmp0oVp
R5pH3jPBfc/w1dVydjLtlXjJuuuNpipgh+xKGb3zoawq7scOBoHzNy+PRF5SmujX
RG7WyI0V0VWKdN/XAvlqHw6w/7ml8wWr77IqcpakY6jkfipzK2TrF9uUbpT4xIOE
JPXKSn6O9mH8Ty0+ITKXfRSsfwjUGgp7uSvImF+gtCyVWmoD
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:59 2025 by rpki-client