Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96aa9c07-4d8d-388d-9ee1-a65847a8e625.roa
File:                     96aa9c07-4d8d-388d-9ee1-a65847a8e625.roa (raw, json)
Hash identifier:          pcOsIiok/YcH/wEoGggeI+6au3gBuEn2nfZ37dmIgRw=
Subject key identifier:   38:62:03:F8:B5:A0:CF:E6:2E:24:C4:86:1D:E4:DD:88:E8:24:F9:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DAC0780A0F6D68BAA5560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96aa9c07-4d8d-388d-9ee1-a65847a8e625.roa
Signing time:             Thu 15 May 2025 12:24:53 +0000
ROA not before:           Thu 15 May 2025 12:24:53 +0000
ROA not after:            Wed 13 Aug 2025 12:24:53 +0000
asID:                     396552
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:ac:07:80:a0:f6:d6:8b:aa:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:53 2025 GMT
            Not After : Aug 13 12:24:53 2025 GMT
        Subject: CN=9ce512c0-f224-46dc-aa85-2530a205bf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:4a:db:2b:4c:27:c9:60:2c:9e:d9:4a:77:
                    a5:1e:3b:47:89:d3:a1:5f:1d:70:3e:1c:31:a6:16:
                    36:c4:15:9e:3b:4d:eb:4d:98:03:a5:92:4f:ee:09:
                    2d:e2:d2:57:4b:95:a5:e4:1f:b6:0b:a0:53:d4:ef:
                    8e:42:81:fe:bc:2d:63:87:d5:00:34:b6:74:91:f3:
                    6c:72:45:03:25:be:f5:0f:22:a9:b0:2f:b0:5e:a9:
                    46:0d:65:c9:06:ef:03:0a:28:95:88:ee:89:93:84:
                    b2:80:69:c2:48:bc:93:63:d4:9e:8e:15:e6:80:a3:
                    ef:0f:c2:de:6f:2b:4c:f4:51:df:01:7f:21:af:f7:
                    fb:59:a6:15:7d:f0:8f:5a:2c:49:54:a5:58:40:cd:
                    ce:91:bc:09:8b:d4:bc:5a:d5:a4:25:95:4d:50:f2:
                    da:05:a2:0b:7c:91:49:00:bd:a5:61:a1:69:f3:6c:
                    09:75:7f:eb:b4:2e:24:34:61:0e:92:a4:ea:a8:77:
                    97:8c:ba:d1:12:44:c9:ba:2f:13:e8:82:7b:d9:78:
                    08:1d:36:b4:8b:95:1d:6b:48:2e:f6:20:c2:85:3d:
                    84:80:34:5a:9e:9a:2b:82:ab:27:0d:c1:dc:97:f2:
                    85:be:9e:b2:e3:90:5c:71:b4:7f:f2:fe:d9:30:38:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:62:03:F8:B5:A0:CF:E6:2E:24:C4:86:1D:E4:DD:88:E8:24:F9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96aa9c07-4d8d-388d-9ee1-a65847a8e625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:a8:f4:be:80:1b:6f:b5:f7:35:fd:f7:73:d4:a6:c7:84:
         bb:46:ef:57:4d:2a:4a:c9:94:79:09:fa:b6:df:42:6d:22:6b:
         ec:36:28:fc:e5:54:5a:91:ad:ce:b7:c2:97:c9:fc:10:45:65:
         00:f4:72:9d:78:4d:5b:26:1a:2d:ac:e6:bd:55:bb:18:bb:6e:
         a9:b1:b9:c8:da:92:66:2f:f5:5b:2e:1a:32:36:b9:7c:7a:c1:
         f9:f9:c1:1f:59:54:4a:9e:d5:b4:4d:86:05:14:7e:58:52:2e:
         2e:4b:92:bf:82:a2:89:14:07:83:01:c0:ac:72:9a:49:aa:74:
         55:5b:35:57:13:c2:d1:57:fd:d5:dd:50:df:58:6c:b0:cb:8f:
         92:ea:cf:68:e8:b0:a0:41:60:40:dd:0b:8b:ad:3c:bd:7e:90:
         d4:a9:4c:57:28:0c:c0:b9:b1:b2:40:04:22:57:37:89:dd:7f:
         bf:a4:50:2d:8f:e4:47:ec:b0:2a:d2:79:4f:5a:45:3e:15:06:
         6c:2c:1b:d7:b8:60:17:6b:10:e4:72:4c:49:34:00:bf:36:a4:
         14:22:06:c9:a2:4f:3f:05:84:a3:88:1b:de:1f:27:b1:f9:f0:
         89:9c:ef:19:97:e7:3a:69:d9:2c:a3:be:b9:aa:62:77:0c:28:
         d0:01:33:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfawHgKD21ouqVWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUxNTEyMjQ1M1oXDTI1MDgxMzEyMjQ1M1owLzEtMCsGA1UEAxMk
OWNlNTEyYzAtZjIyNC00NmRjLWFhODUtMjUzMGEyMDViZjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tdK2ytMJ8lgLJ7ZSnelHjtHidOhXx1wPhwx
phY2xBWeO03rTZgDpZJP7gkt4tJXS5Wl5B+2C6BT1O+OQoH+vC1jh9UANLZ0kfNs
ckUDJb71DyKpsC+wXqlGDWXJBu8DCiiViO6Jk4SygGnCSLyTY9SejhXmgKPvD8Le
bytM9FHfAX8hr/f7WaYVffCPWixJVKVYQM3OkbwJi9S8WtWkJZVNUPLaBaILfJFJ
AL2lYaFp82wJdX/rtC4kNGEOkqTqqHeXjLrREkTJui8T6IJ72XgIHTa0i5Uda0gu
9iDChT2EgDRanporgqsnDcHcl/KFvp6y45BccbR/8v7ZMDgKbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDhiA/i1oM/mLiTEhh3k3YjoJPl9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTZhYTljMDctNGQ4ZC0z
ODhkLTllZTEtYTY1ODQ3YThlNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGN8qPS+gBtvtfc1/fdz1KbHhLtG71dNKkrJlHkJ+rbfQm0ia+w2
KPzlVFqRrc63wpfJ/BBFZQD0cp14TVsmGi2s5r1Vuxi7bqmxucjakmYv9VsuGjI2
uXx6wfn5wR9ZVEqe1bRNhgUUflhSLi5Lkr+CookUB4MBwKxymkmqdFVbNVcTwtFX
/dXdUN9YbLDLj5Lqz2josKBBYEDdC4utPL1+kNSpTFcoDMC5sbJABCJXN4ndf7+k
UC2P5EfssCrSeU9aRT4VBmwsG9e4YBdrEORyTEk0AL82pBQiBsmiTz8FhKOIG94f
J7H58Imc7xmX5zpp2SyjvrmqYncMKNABM4E=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:11:00 2025 by rpki-client