Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b63c3eff-39c7-365c-ac6d-cb308b04f7bf.roa
File:                     b63c3eff-39c7-365c-ac6d-cb308b04f7bf.roa (raw, json)
Hash identifier:          VQKHlVDHmVKWpwEIjsNfwRMslwLc/ebx5Qp3GQwUMyo=
Subject key identifier:   B2:5D:C9:3E:AE:E2:21:51:12:76:9B:44:AF:DF:64:A4:A3:48:7B:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB15D57A4728F37C6E4BC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b63c3eff-39c7-365c-ac6d-cb308b04f7bf.roa
Signing time:             Thu 12 Jun 2025 12:42:05 +0000
ROA not before:           Thu 12 Jun 2025 12:42:05 +0000
ROA not after:            Wed 10 Sep 2025 12:42:05 +0000
asID:                     396546
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:5d:57:a4:72:8f:37:c6:e4:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:05 2025 GMT
            Not After : Sep 10 12:42:05 2025 GMT
        Subject: CN=a8f9add9-8c49-4476-939f-cb3d5eb79f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:18:4a:81:53:8e:1f:90:3b:17:f6:2d:3e:
                    32:d7:7a:6b:2f:5f:f4:0e:a8:43:c4:f3:4c:00:06:
                    8b:96:09:01:f5:01:35:35:12:1a:15:3b:27:d1:dd:
                    62:11:b7:82:ae:cb:70:6a:eb:e8:d1:a6:b2:dd:a9:
                    60:7d:e7:d2:df:2e:13:b3:05:19:cc:e6:f3:3f:a7:
                    be:82:b7:c5:de:c8:9e:30:0a:b5:1c:3c:79:d7:77:
                    31:07:75:10:b2:13:66:18:2c:08:d5:40:75:db:0d:
                    d9:ec:50:e7:51:0e:ad:4d:a9:81:d2:80:c5:4e:19:
                    d2:2b:68:8b:dd:f5:93:e1:f1:a8:9d:1d:fb:b7:a0:
                    63:d9:2c:f5:53:c3:ca:d7:83:df:0f:8f:28:7a:97:
                    b7:df:83:e0:62:ac:78:7f:27:8f:a5:78:de:76:77:
                    a0:53:fa:f8:18:06:ef:33:e0:70:43:74:61:75:61:
                    ef:e6:74:bc:1b:ac:5d:ca:95:f3:25:f5:38:c6:a7:
                    15:5c:1c:eb:67:2f:e9:c0:bf:d1:7c:03:1d:90:23:
                    59:db:32:b3:3e:f9:af:5a:58:1e:91:24:b4:60:e4:
                    e7:19:11:93:52:32:18:6f:b1:93:37:8b:dd:8f:0e:
                    1d:db:ce:47:12:07:f1:e4:01:c2:e7:2c:8f:8e:81:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5D:C9:3E:AE:E2:21:51:12:76:9B:44:AF:DF:64:A4:A3:48:7B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b63c3eff-39c7-365c-ac6d-cb308b04f7bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:15:fa:14:31:c1:f6:dd:57:c4:c4:72:1d:0d:62:e3:b0:
         5f:7a:84:0d:fb:3a:72:03:43:de:87:a9:b4:b9:83:ff:e1:8c:
         bd:60:cd:16:d0:b4:03:9c:10:dc:be:e0:d9:52:44:55:60:23:
         18:6f:52:1a:f0:29:94:2a:d6:3b:05:b2:a4:41:10:dc:b2:40:
         06:b0:fd:32:e4:a3:99:42:63:26:8a:a4:b3:24:63:a3:ea:0c:
         0d:05:69:29:c2:7d:71:23:34:cd:e4:6b:49:c3:57:26:90:2f:
         d7:82:09:43:d7:07:bf:05:b3:2a:1d:74:53:f4:63:c3:32:21:
         b5:d8:51:58:c9:0f:18:6e:53:98:eb:3d:92:d0:72:19:1c:fb:
         e6:8e:fc:c0:85:c9:ec:69:8f:dc:01:3f:c9:44:3c:9c:1a:50:
         11:2a:06:59:75:8b:e1:f1:68:34:3b:da:e9:73:e0:3c:88:c7:
         41:65:96:70:87:dc:e7:16:19:d6:f0:e0:a6:8e:20:9f:10:85:
         bf:5c:bf:16:05:63:7b:79:ea:e8:4b:3e:6d:74:04:79:41:cb:
         d1:0e:0a:52:06:15:4a:ec:95:8f:cf:a4:7e:d4:ae:14:6b:29:
         05:bf:00:ea:36:55:ef:fc:06:2a:a5:f8:b9:78:28:a6:4e:5e:
         6c:14:b5:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsV1XpHKPN8bkvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMjEyNDIwNVoXDTI1MDkxMDEyNDIwNVowLzEtMCsGA1UEAxMk
YThmOWFkZDktOGM0OS00NDc2LTkzOWYtY2IzZDVlYjc5ZjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybIYSoFTjh+QOxf2LT4y13prL1/0DqhDxPNM
AAaLlgkB9QE1NRIaFTsn0d1iEbeCrstwauvo0aay3algfefS3y4TswUZzObzP6e+
grfF3sieMAq1HDx513cxB3UQshNmGCwI1UB12w3Z7FDnUQ6tTamB0oDFThnSK2iL
3fWT4fGonR37t6Bj2Sz1U8PK14PfD48oepe334PgYqx4fyePpXjednegU/r4GAbv
M+BwQ3RhdWHv5nS8G6xdypXzJfU4xqcVXBzrZy/pwL/RfAMdkCNZ2zKzPvmvWlge
kSS0YOTnGRGTUjIYb7GTN4vdjw4d285HEgfx5AHC5yyPjoFQNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLJdyT6u4iFREnabRK/fZKSjSHtTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjYzYzNlZmYtMzljNy0z
NjVjLWFjNmQtY2IzMDhiMDRmN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFzhFfoUMcH23VfExHIdDWLjsF96hA37OnIDQ96HqbS5g//hjL1g
zRbQtAOcENy+4NlSRFVgIxhvUhrwKZQq1jsFsqRBENyyQAaw/TLko5lCYyaKpLMk
Y6PqDA0FaSnCfXEjNM3ka0nDVyaQL9eCCUPXB78FsyoddFP0Y8MyIbXYUVjJDxhu
U5jrPZLQchkc++aO/MCFyexpj9wBP8lEPJwaUBEqBll1i+HxaDQ72ulz4DyIx0Fl
lnCH3OcWGdbw4KaOIJ8Qhb9cvxYFY3t56uhLPm10BHlBy9EOClIGFUrslY/PpH7U
rhRrKQW/AOo2Ve/8Biql+Ll4KKZOXmwUtUM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:38:07 2025 by rpki-client