Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa
File:                     68cf3020-58c7-389f-9be5-7ba3837a00bc.roa (raw, json)
Hash identifier:          Hr5KmstbjjnP+7OnHFSlxrLnmnt4yvQKcoJtM94Kf14=
Subject key identifier:   6E:EB:AB:5F:BF:C8:AE:AA:AB:C6:F8:56:DA:A5:DC:8B:9C:95:D9:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB01A355A12C1E16C8A980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36624
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:01:a3:55:a1:2c:1e:16:c8:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e96d6b2c-73dc-43e1-ae98-7d0de6e66889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:bd:54:a1:df:b9:44:e7:85:9f:6a:65:cd:
                    21:c7:ac:12:6b:11:4e:86:5a:39:7b:a3:cc:7f:50:
                    34:77:ab:4f:f3:56:46:e4:6d:3a:1a:db:a7:b3:0d:
                    33:5a:ff:55:9e:fc:16:50:e4:57:c8:5b:70:16:df:
                    77:f5:b9:de:1a:ee:68:89:e7:8e:ff:e6:95:15:f6:
                    f4:c9:f5:50:a4:ab:fb:a2:72:f7:9e:6a:11:57:84:
                    ee:98:73:12:15:ef:11:9d:71:9d:76:c5:a2:27:eb:
                    2d:ca:94:33:cc:76:0a:bb:ca:68:ee:25:46:03:26:
                    97:92:45:72:e9:7c:73:81:01:b0:fc:ef:4d:dd:2f:
                    79:24:4f:d5:99:da:fe:d8:67:b5:c7:49:99:56:e3:
                    17:92:fd:d5:cb:65:a3:f7:4c:5a:6c:cd:34:ae:b1:
                    56:31:f6:fe:60:a5:06:40:3b:c0:7c:13:1d:2a:13:
                    fc:10:e7:7b:d0:12:60:5e:0d:ff:22:c2:f6:9b:1c:
                    26:fa:3c:58:48:91:de:8b:e2:a5:cb:f8:54:9e:b5:
                    01:c5:4e:c5:94:3b:14:1e:c2:bc:97:75:9b:82:73:
                    d5:8d:ba:d4:62:08:e0:ea:6a:54:84:0a:a6:82:78:
                    b7:5d:81:af:e2:d7:8d:69:2f:81:e8:b0:ea:98:6f:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:AB:5F:BF:C8:AE:AA:AB:C6:F8:56:DA:A5:DC:8B:9C:95:D9:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68cf3020-58c7-389f-9be5-7ba3837a00bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:18:af:6f:81:23:39:ed:c4:bc:3b:96:59:3c:0d:bb:21:54:
         a0:f6:28:c3:dc:11:c6:3b:1f:b9:83:19:05:ad:10:42:54:b9:
         ef:be:b6:f3:69:65:ee:58:c1:ab:2f:41:d4:34:1e:3e:16:96:
         ae:79:69:14:c2:78:80:3b:74:02:ef:e8:17:58:5e:c8:0b:f7:
         3f:5f:73:d8:53:f1:07:43:03:a4:19:c4:be:e3:6d:56:fa:c0:
         03:35:16:43:f5:f1:b9:2b:63:c7:21:52:83:64:12:47:06:0f:
         10:50:80:19:69:41:87:1f:11:f6:d3:f9:ee:37:3f:36:30:42:
         94:51:ff:3d:7a:42:83:f2:56:be:01:1e:cf:8e:77:a5:d0:ca:
         49:09:fa:1e:b2:62:df:56:65:fd:de:12:47:cf:e3:f8:e0:0b:
         b2:23:17:1f:69:39:8f:41:ec:ad:74:c0:b8:7d:3a:cc:8d:98:
         09:3d:20:2f:ae:85:bf:7c:51:58:ca:91:79:89:65:47:2e:50:
         f4:89:07:12:66:6f:91:29:1a:ca:c4:14:c9:09:f9:90:93:66:
         9c:00:f0:e2:74:ea:37:b8:ef:0f:5b:6c:be:cd:b3:c9:46:20:
         b8:74:cf:dc:a1:76:f8:ef:21:90:a3:07:44:24:bd:21:a6:c1:
         ad:cc:c2:50
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2wGjVaEsHhbIqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZTk2ZDZiMmMtNzNkYy00M2UxLWFlOTgtN2QwZGU2ZTY2ODg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEi9VKHfuUTnhZ9qZc0hx6wSaxFOhlo5e6PM
f1A0d6tP81ZG5G06Gtunsw0zWv9VnvwWUORXyFtwFt939bneGu5oieeO/+aVFfb0
yfVQpKv7onL3nmoRV4TumHMSFe8RnXGddsWiJ+stypQzzHYKu8po7iVGAyaXkkVy
6XxzgQGw/O9N3S95JE/Vmdr+2Ge1x0mZVuMXkv3Vy2Wj90xabM00rrFWMfb+YKUG
QDvAfBMdKhP8EOd70BJgXg3/IsL2mxwm+jxYSJHei+Kly/hUnrUBxU7FlDsUHsK8
l3WbgnPVjbrUYgjg6mpUhAqmgni3XYGv4teNaS+B6LDqmG/RCwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFG7rq1+/yK6qq8b4Vtql3Iucldl0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhjZjMwMjAtNThjNy0z
ODlmLTliZTUtN2JhMzgzN2EwMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCtGK9vgSM57cS8O5ZZPA27IVSg9ijD3BHGOx+5
gxkFrRBCVLnvvrbzaWXuWMGrL0HUNB4+FpaueWkUwniAO3QC7+gXWF7IC/c/X3PY
U/EHQwOkGcS+421W+sADNRZD9fG5K2PHIVKDZBJHBg8QUIAZaUGHHxH20/nuNz82
MEKUUf89ekKD8la+AR7Pjnel0MpJCfoesmLfVmX93hJHz+P44AuyIxcfaTmPQeyt
dMC4fTrMjZgJPSAvroW/fFFYypF5iWVHLlD0iQcSZm+RKRrKxBTJCfmQk2acAPDi
dOo3uO8PW2y+zbPJRiC4dM/coXb47yGQowdEJL0hpsGtzMJQ
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:04:06 2025 by rpki-client