Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa
File:                     30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa (raw, json)
Hash identifier:          PbFQgIXD6aE7Zjhnmh0FJzJoTLXjWXGopH6DqC7ae0A=
Subject key identifier:   32:13:42:64:7F:BA:CA:D6:07:A3:9E:30:C9:11:06:E7:3A:EC:11:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D482D5E4D5582A4758860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396615
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:48:2d:5e:4d:55:82:a4:75:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=dd089024-a18e-4681-8855-f9a30a594460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:89:ca:da:6c:1e:8b:b7:2e:ee:98:f2:e7:
                    50:82:e5:e9:f8:0e:b1:08:37:aa:9f:2e:43:eb:f4:
                    36:63:02:68:de:bb:35:03:eb:43:73:9b:62:c0:63:
                    d3:40:ec:14:60:bd:5d:81:7d:0f:b8:7a:a5:a7:cd:
                    a5:79:35:14:9f:cb:86:bd:27:df:8c:a6:6f:73:e9:
                    65:5b:bb:ff:9f:f1:4c:4d:02:89:d3:7f:ee:40:79:
                    05:aa:6e:69:08:41:ef:d8:11:83:7d:25:29:87:10:
                    f1:87:e3:d5:c9:4e:ea:ce:0b:6e:c1:53:d4:09:b5:
                    a7:10:23:7d:0d:21:74:c2:16:0a:95:8d:68:33:02:
                    9a:e9:68:b7:f3:e3:4a:04:c9:f0:17:6b:d5:44:a0:
                    ac:8b:af:49:55:5f:86:12:5f:fc:cf:db:f1:6e:50:
                    e3:b6:5c:47:78:67:34:00:44:39:98:45:e8:30:6a:
                    82:ee:c3:31:2d:2c:de:2a:fd:48:e2:d2:e2:f9:24:
                    6e:19:56:a1:ee:79:1e:a7:06:9a:5d:c4:7a:61:27:
                    e3:2d:57:11:d8:21:6b:25:dd:fe:38:ef:4c:ae:08:
                    80:04:f6:e1:df:dc:6a:b7:cb:cc:c7:a7:08:75:2d:
                    78:b2:cd:a1:c3:76:bd:85:16:5c:fd:f6:74:a9:11:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:13:42:64:7F:BA:CA:D6:07:A3:9E:30:C9:11:06:E7:3A:EC:11:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30c012f4-f3ec-3573-89a0-d25ebf1cc0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:1b:64:d8:ad:a5:d0:ac:fa:08:a2:b7:59:56:2d:74:dc:
         87:e6:03:12:7a:96:9e:cf:ab:47:1d:66:bc:49:7b:ba:31:bd:
         1a:83:95:75:09:98:48:16:8c:de:40:f0:c8:73:48:6e:0d:24:
         6e:d6:b8:8a:22:60:04:41:d3:dd:d3:8a:4e:4d:68:97:4e:14:
         cc:2f:aa:c2:02:6c:58:e4:45:f4:a2:f1:71:d4:17:19:6e:18:
         f1:d5:19:ba:3e:b6:33:57:a4:7a:9b:c4:b5:24:4c:61:67:74:
         3f:8f:6e:f0:ae:a9:b0:f9:c1:b5:4b:12:68:09:06:ea:43:b1:
         37:93:36:05:8e:23:9e:6a:a8:1c:e8:81:32:85:3a:5b:a7:0a:
         92:0a:28:04:f8:d7:9e:51:b4:be:1b:d2:5a:f1:f4:99:47:c1:
         aa:53:e7:53:27:88:27:d9:33:48:80:4a:6d:99:65:79:69:86:
         2d:a5:51:ee:51:9d:c1:2c:a7:af:b5:f4:fd:57:27:e9:d0:d9:
         7a:a9:70:9d:72:a7:10:c0:6d:ac:fc:15:db:64:f9:35:a9:ff:
         49:0c:2a:ee:39:5b:2b:1f:d8:ce:15:c2:eb:1b:ec:6a:35:88:
         d6:60:08:6c:7b:96:84:aa:52:4d:35:18:8a:4e:87:db:46:6e:
         7c:7b:6d:fd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUgtXk1VgqR1iGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGQwODkwMjQtYTE4ZS00NjgxLTg4NTUtZjlhMzBhNTk0NDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqmJytpsHou3Lu6Y8udQguXp+A6xCDeqny5D
6/Q2YwJo3rs1A+tDc5tiwGPTQOwUYL1dgX0PuHqlp82leTUUn8uGvSffjKZvc+ll
W7v/n/FMTQKJ03/uQHkFqm5pCEHv2BGDfSUphxDxh+PVyU7qzgtuwVPUCbWnECN9
DSF0whYKlY1oMwKa6Wi38+NKBMnwF2vVRKCsi69JVV+GEl/8z9vxblDjtlxHeGc0
AEQ5mEXoMGqC7sMxLSzeKv1I4tLi+SRuGVah7nkepwaaXcR6YSfjLVcR2CFrJd3+
OO9MrgiABPbh39xqt8vMx6cIdS14ss2hw3a9hRZc/fZ0qRG0cwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDITQmR/usrWB6OeMMkRBuc67BFsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzBjMDEyZjQtZjNlYy0z
NTczLTg5YTAtZDI1ZWJmMWNjMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBqXRtk2K2l0Kz6CKK3WVYtdNyH5gMSepaez6tH
HWa8SXu6Mb0ag5V1CZhIFozeQPDIc0huDSRu1riKImAEQdPd04pOTWiXThTML6rC
AmxY5EX0ovFx1BcZbhjx1Rm6PrYzV6R6m8S1JExhZ3Q/j27wrqmw+cG1SxJoCQbq
Q7E3kzYFjiOeaqgc6IEyhTpbpwqSCigE+NeeUbS+G9Ja8fSZR8GqU+dTJ4gn2TNI
gEptmWV5aYYtpVHuUZ3BLKevtfT9Vyfp0Nl6qXCdcqcQwG2s/BXbZPk1qf9JDCru
OVsrH9jOFcLrG+xqNYjWYAhse5aEqlJNNRiKTofbRm58e239
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:50:09 2025 by rpki-client