Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa
File:                     9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa (raw, json)
Hash identifier:          F0Ev9KiDdBrofbScSJbNu4DgWlVHt0bt9IFO0DpqWJA=
Subject key identifier:   2A:C7:72:B3:61:83:64:8B:72:B8:F6:26:3C:52:53:B5:F8:9F:95:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC2490F24D0DF70905400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     397212
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c2:49:0f:24:d0:df:70:90:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=09061685-adc6-4ff6-b445-b8a236367f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:4c:ea:00:58:e3:d6:99:6c:ad:f4:9c:9f:
                    89:7b:4a:9a:c8:ef:67:81:c6:2a:95:e5:0e:59:dc:
                    c7:33:ff:00:39:0f:4e:fb:43:ba:11:b0:c6:6d:47:
                    5e:3c:3a:95:82:ae:35:47:5d:35:5a:e9:b4:ed:f5:
                    3b:c8:bf:5e:c9:25:f0:0e:ff:e4:ee:f9:b0:76:0b:
                    23:cb:f2:5a:46:55:14:d6:a8:33:af:b2:48:a7:19:
                    3f:5d:e8:b2:4a:24:73:0a:f2:69:9c:6d:08:f5:83:
                    3b:ff:77:ac:81:66:d0:19:29:51:ac:a1:e2:56:44:
                    96:1e:5d:99:eb:71:3f:97:b7:0b:5d:ca:41:b4:76:
                    66:2c:81:50:ba:24:a2:9b:e9:ca:7b:c9:88:df:02:
                    18:63:ab:db:45:70:2b:42:7f:5c:e9:d4:d0:b0:f5:
                    bb:5f:b6:32:ca:c3:ba:1e:97:ba:61:59:cf:b5:ce:
                    97:3e:d8:48:d4:ff:07:f8:ae:b4:7d:d7:aa:6e:70:
                    c6:f6:fd:17:fe:29:cb:5c:8d:23:dd:bf:2f:28:22:
                    ee:4e:96:13:c8:e9:2f:4b:ac:8e:ea:f0:22:55:b5:
                    66:ed:f4:1a:e9:2f:58:68:93:c2:e9:3d:a8:e1:1c:
                    15:ec:56:a6:a2:71:4d:4c:97:d8:90:88:2e:d0:5b:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:72:B3:61:83:64:8B:72:B8:F6:26:3C:52:53:B5:F8:9F:95:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b5cfae3-d8da-390a-9c86-2eeddba429d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e6:6e:c6:9f:47:eb:ff:0e:d7:1f:09:dd:19:56:bf:d9:cc:
         87:36:02:b5:b1:69:15:10:97:5e:78:eb:44:01:4a:bb:a7:12:
         16:8c:25:80:a7:b6:2d:ac:2c:68:8f:da:9b:e8:fa:17:84:c3:
         99:bf:a1:93:14:ea:d1:d9:b8:ca:81:66:cf:a3:65:7c:1e:ab:
         07:0d:81:22:aa:21:ba:87:0f:0d:cb:1f:55:14:66:8c:23:89:
         e1:58:1d:c3:33:87:5e:01:4d:81:dd:ea:19:54:39:4b:9f:f7:
         42:28:ee:ea:e6:e8:b3:c1:59:5a:bc:2b:56:c9:76:1b:c2:89:
         72:5c:84:8d:32:59:41:ff:33:4f:a7:23:79:19:c8:d5:c0:3a:
         a8:8d:3b:6d:be:59:97:f4:b3:27:f6:8b:c4:ff:14:fd:a2:1b:
         c3:0d:88:b5:01:38:6b:fc:0a:58:b1:a5:b1:1b:76:d2:93:09:
         a3:f0:4c:fe:0e:16:06:1d:ab:ae:11:41:4d:f5:6e:c8:51:43:
         03:d0:8c:ce:49:da:ab:c7:0f:2c:57:0e:66:73:8d:ec:49:82:
         e9:e1:9c:a1:3f:a1:5c:f7:75:e6:61:ec:9f:d6:cf:1d:10:3d:
         1d:4b:c0:12:81:40:3c:f4:e1:ca:91:6f:a2:04:da:7d:d1:b0:
         0b:29:03:d8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmsJJDyTQ33CQVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
MDkwNjE2ODUtYWRjNi00ZmY2LWI0NDUtYjhhMjM2MzY3Zjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1lM6gBY49aZbK30nJ+Je0qayO9ngcYqleUO
WdzHM/8AOQ9O+0O6EbDGbUdePDqVgq41R101Wum07fU7yL9eySXwDv/k7vmwdgsj
y/JaRlUU1qgzr7JIpxk/XeiySiRzCvJpnG0I9YM7/3esgWbQGSlRrKHiVkSWHl2Z
63E/l7cLXcpBtHZmLIFQuiSim+nKe8mI3wIYY6vbRXArQn9c6dTQsPW7X7YyysO6
Hpe6YVnPtc6XPthI1P8H+K60fdeqbnDG9v0X/inLXI0j3b8vKCLuTpYTyOkvS6yO
6vAiVbVm7fQa6S9YaJPC6T2o4RwV7FamonFNTJfYkIgu0Fu5KQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCrHcrNhg2SLcrj2JjxSU7X4n5VdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWI1Y2ZhZTMtZDhkYS0z
OTBhLTljODYtMmVlZGRiYTQyOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCt5m7Gn0fr/w7XHwndGVa/2cyHNgK1sWkVEJde
eOtEAUq7pxIWjCWAp7YtrCxoj9qb6PoXhMOZv6GTFOrR2bjKgWbPo2V8HqsHDYEi
qiG6hw8Nyx9VFGaMI4nhWB3DM4deAU2B3eoZVDlLn/dCKO7q5uizwVlavCtWyXYb
wolyXISNMllB/zNPpyN5GcjVwDqojTttvlmX9LMn9ovE/xT9ohvDDYi1AThr/ApY
saWxG3bSkwmj8Ez+DhYGHauuEUFN9W7IUUMD0IzOSdqrxw8sVw5mc43sSYLp4Zyh
P6Fc93XmYeyf1s8dED0dS8ASgUA89OHKkW+iBNp90bALKQPY
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:01:44 2025 by rpki-client