Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa
File:                     53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa (raw, json)
Hash identifier:          eaf34YOqJPUptind/vLo/mJTGS52sWPWpgof74YoScQ=
Subject key identifier:   9E:3D:48:3C:53:DC:C5:CE:27:1A:05:B6:CB:B7:FF:A8:B5:7A:C4:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA9380F676B5632CB3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396564
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a9:38:0f:67:6b:56:32:cb:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=b2ee6579-ef8c-48c8-995a-7bf344212625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:9d:05:92:b8:be:0d:7f:3e:ab:ac:b8:16:
                    9f:84:b9:35:12:bf:f0:26:0a:f1:fd:80:26:9f:9e:
                    5a:e9:10:6a:2a:18:79:c0:eb:2f:ad:82:1f:b1:01:
                    4e:85:52:43:54:20:78:01:d1:ff:d6:12:62:1a:ac:
                    14:02:2f:ec:bc:4b:cd:ce:03:80:07:f6:00:43:bc:
                    71:90:89:01:94:48:84:67:28:66:45:86:b9:c5:af:
                    e4:d8:1b:3e:44:ca:17:cc:4b:f4:68:c4:56:f1:95:
                    2e:75:75:a3:ed:6f:cd:18:bf:20:20:16:c8:a3:96:
                    4d:20:5e:f4:88:14:8e:92:9b:80:bb:8c:58:18:ba:
                    9a:ee:73:18:93:97:5a:6f:a5:c7:9a:9b:a4:0c:53:
                    fb:e3:8b:6c:31:62:06:b0:a3:7a:3e:5d:c3:61:07:
                    a1:42:d5:65:d9:35:02:92:ef:37:e7:a9:9b:34:28:
                    68:b7:07:3e:1b:07:8c:d4:8b:96:34:ac:3f:ce:17:
                    81:23:b4:63:e1:52:39:96:c9:a3:6b:fc:0c:10:02:
                    da:3a:c8:3d:c1:3c:50:ec:d6:cd:10:91:74:9f:42:
                    70:ff:25:3b:9e:5c:45:e1:d3:39:a8:4c:c6:fe:6b:
                    96:4b:dd:72:89:4a:e3:ac:c7:5a:63:8f:9c:05:83:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3D:48:3C:53:DC:C5:CE:27:1A:05:B6:CB:B7:FF:A8:B5:7A:C4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53a5157d-9464-3dfd-a71f-54b2996fe3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:01:ab:cc:ab:c0:5f:69:40:71:15:f1:f2:8f:c7:49:c5:af:
         3c:c7:5a:cd:fd:1e:55:c8:32:3a:cd:99:ae:ae:26:6f:67:bb:
         35:af:94:5d:60:06:f6:6a:71:83:84:25:8f:06:aa:6a:46:aa:
         bb:ae:aa:92:54:c1:13:0d:cd:01:69:fe:8e:2a:7b:c5:5f:c3:
         ce:67:00:cf:ec:c3:45:eb:9e:df:2b:2a:1b:05:47:54:07:90:
         c6:21:00:54:4a:88:73:2d:f9:8b:3d:40:c3:07:16:21:47:72:
         03:2c:c6:33:40:ca:d6:38:09:3d:fc:8c:aa:ba:28:3e:b4:7c:
         1a:5e:f3:64:0f:b5:e6:6b:7b:46:0f:32:e8:fa:73:78:a7:cb:
         7a:96:e3:f8:2a:48:55:d8:0a:f7:03:d0:96:df:1f:85:d2:12:
         c6:cd:db:c7:95:80:12:b4:0f:ac:c6:96:11:3d:eb:7e:aa:5d:
         9a:eb:42:58:b2:46:7d:48:bc:12:62:a6:93:41:33:40:fc:38:
         75:e1:69:d3:df:a4:9b:8f:db:db:12:e4:c0:c5:5d:c0:86:49:
         2e:23:e8:58:63:bb:f2:2f:d3:13:15:87:92:f9:83:29:63:dd:
         39:f1:f9:ef:0a:2c:ad:7c:a3:76:ef:f9:5c:fc:5a:9c:65:7f:
         41:93:9c:57
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqk4D2drVjLLNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
YjJlZTY1NzktZWY4Yy00OGM4LTk5NWEtN2JmMzQ0MjEyNjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglKdBZK4vg1/PqusuBafhLk1Er/wJgrx/YAm
n55a6RBqKhh5wOsvrYIfsQFOhVJDVCB4AdH/1hJiGqwUAi/svEvNzgOAB/YAQ7xx
kIkBlEiEZyhmRYa5xa/k2Bs+RMoXzEv0aMRW8ZUudXWj7W/NGL8gIBbIo5ZNIF70
iBSOkpuAu4xYGLqa7nMYk5dab6XHmpukDFP744tsMWIGsKN6Pl3DYQehQtVl2TUC
ku8356mbNChotwc+GweM1IuWNKw/zheBI7Rj4VI5lsmja/wMEALaOsg9wTxQ7NbN
EJF0n0Jw/yU7nlxF4dM5qEzG/muWS91yiUrjrMdaY4+cBYPDwQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ49SDxT3MXOJxoFtsu3/6i1esSiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTNhNTE1N2QtOTQ2NC0z
ZGZkLWE3MWYtNTRiMjk5NmZlM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAvAavMq8BfaUBxFfHyj8dJxa88x1rN/R5VyDI6
zZmuriZvZ7s1r5RdYAb2anGDhCWPBqpqRqq7rqqSVMETDc0Baf6OKnvFX8POZwDP
7MNF657fKyobBUdUB5DGIQBUSohzLfmLPUDDBxYhR3IDLMYzQMrWOAk9/Iyquig+
tHwaXvNkD7Xma3tGDzLo+nN4p8t6luP4KkhV2Ar3A9CW3x+F0hLGzdvHlYAStA+s
xpYRPet+ql2a60JYskZ9SLwSYqaTQTNA/Dh14WnT36Sbj9vbEuTAxV3AhkkuI+hY
Y7vyL9MTFYeS+YMpY9058fnvCiytfKN27/lc/FqcZX9Bk5xX
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:01:20 2025 by rpki-client