Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc55c458-881e-3b39-b637-5c0eb4aefb7a.roa
File:                     cc55c458-881e-3b39-b637-5c0eb4aefb7a.roa (raw, json)
Hash identifier:          xCZR84GHT66niWePTF07OUI+SdQLXJd5+BZ4sKXGBvA=
Subject key identifier:   47:73:D7:77:01:AB:26:37:A8:8B:59:8E:5F:78:1A:68:68:02:03:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263D1E44DF2F4BC1C4C080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc55c458-881e-3b39-b637-5c0eb4aefb7a.roa
Signing time:             Thu 05 Jun 2025 12:41:24 +0000
ROA not before:           Thu 05 Jun 2025 12:41:24 +0000
ROA not after:            Wed 03 Sep 2025 12:41:24 +0000
asID:                     36627
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3d:1e:44:df:2f:4b:c1:c4:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:24 2025 GMT
            Not After : Sep  3 12:41:24 2025 GMT
        Subject: CN=480cfd59-a54d-4ecd-be53-40d7ea67298d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f6:44:0a:85:49:9d:a5:20:29:a3:4c:ec:8c:
                    18:88:12:c8:17:e6:6a:a6:51:2d:ca:89:db:cd:ae:
                    ad:c6:e4:df:b6:b3:5a:d5:be:f3:f5:10:71:6e:c3:
                    e6:e5:79:58:83:0e:c0:7a:31:99:49:e2:6b:3b:17:
                    5e:e9:bd:e9:0b:98:19:ae:95:4f:26:2d:62:1c:85:
                    8e:52:16:08:4b:23:e6:75:23:5d:3c:32:2e:55:ec:
                    d1:22:69:0f:81:df:92:29:60:70:90:ee:32:f6:b2:
                    db:2e:eb:30:ac:ec:6b:29:b6:7c:b1:ca:57:c9:85:
                    70:2f:20:46:77:41:8e:f2:14:53:ee:e8:d3:cd:49:
                    5e:1d:ed:a4:53:23:cd:8d:11:05:93:a0:86:4a:7c:
                    df:74:d6:34:20:ba:57:4c:a3:7e:e8:aa:3e:2c:42:
                    c2:2b:10:56:1e:f5:72:71:85:df:43:04:cc:d3:5b:
                    72:95:ba:41:6c:82:a7:07:f7:0f:4a:92:a4:9c:49:
                    bd:fb:be:8f:ce:48:5a:38:ee:0f:4a:5e:7f:a1:43:
                    df:52:64:90:93:34:ba:d0:9f:18:80:43:8c:70:da:
                    41:91:e5:31:db:ac:59:10:de:cb:3d:3b:6e:ae:97:
                    91:e8:6d:37:4d:13:c2:5c:fe:8e:60:23:ca:c3:db:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:73:D7:77:01:AB:26:37:A8:8B:59:8E:5F:78:1A:68:68:02:03:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc55c458-881e-3b39-b637-5c0eb4aefb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:5b:a3:16:6a:04:94:67:ec:ab:03:c7:25:fa:f0:8d:83:bb:
         80:be:c5:df:02:49:f7:c2:b8:d7:ba:60:53:2d:34:11:8b:16:
         93:9f:20:66:0f:b0:a2:8a:16:b4:04:83:81:94:e3:81:d8:c6:
         24:c7:98:9c:3e:1d:9b:a9:33:bf:d8:ce:99:76:d6:6c:04:e3:
         73:41:52:61:5f:38:a9:b2:af:73:15:81:4f:71:40:de:02:cc:
         e9:11:22:ad:d9:4a:36:5a:0b:3d:a4:98:b0:e3:62:97:c8:d1:
         20:6f:01:2a:41:5d:0e:c0:66:08:e1:91:e2:e1:26:98:4e:ea:
         83:36:be:2f:95:df:9b:fd:12:87:e6:c9:a4:e3:0d:0a:c7:26:
         44:8a:0d:86:0e:c6:cc:fe:cf:05:49:d4:5f:f4:5a:20:d8:77:
         b2:8d:d1:c7:6e:26:79:d3:e9:71:bb:a9:97:d5:da:5d:51:f5:
         a3:c3:08:1f:23:26:05:f0:59:83:c0:bc:76:05:e9:90:69:69:
         ae:2f:7d:2e:9c:04:e5:92:28:da:53:a3:19:80:53:7a:a6:61:
         5a:dd:2f:ea:07:b9:c3:a4:ec:3a:4d:0e:98:8d:a8:b7:db:05:
         b9:7a:71:ce:69:d9:a6:23:43:7a:3a:3d:17:f8:a0:47:25:32:
         83:f5:f6:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJj0eRN8vS8HEwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNTEyNDEyNFoXDTI1MDkwMzEyNDEyNFowLzEtMCsGA1UEAxMk
NDgwY2ZkNTktYTU0ZC00ZWNkLWJlNTMtNDBkN2VhNjcyOThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvZECoVJnaUgKaNM7IwYiBLIF+ZqplEtyonb
za6txuTftrNa1b7z9RBxbsPm5XlYgw7AejGZSeJrOxde6b3pC5gZrpVPJi1iHIWO
UhYISyPmdSNdPDIuVezRImkPgd+SKWBwkO4y9rLbLuswrOxrKbZ8scpXyYVwLyBG
d0GO8hRT7ujTzUleHe2kUyPNjREFk6CGSnzfdNY0ILpXTKN+6Ko+LELCKxBWHvVy
cYXfQwTM01tylbpBbIKnB/cPSpKknEm9+76PzkhaOO4PSl5/oUPfUmSQkzS60J8Y
gEOMcNpBkeUx26xZEN7LPTturpeR6G03TRPCXP6OYCPKw9vPBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEdz13cBqyY3qItZjl94GmhoAgMyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M1NWM0NTgtODgxZS0z
YjM5LWI2MzctNWMwZWI0YWVmYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALpboxZqBJRn7KsDxyX68I2Du4C+xd8CSffCuNe6YFMtNBGLFpOf
IGYPsKKKFrQEg4GU44HYxiTHmJw+HZupM7/Yzpl21mwE43NBUmFfOKmyr3MVgU9x
QN4CzOkRIq3ZSjZaCz2kmLDjYpfI0SBvASpBXQ7AZgjhkeLhJphO6oM2vi+V35v9
EofmyaTjDQrHJkSKDYYOxsz+zwVJ1F/0WiDYd7KN0cduJnnT6XG7qZfV2l1R9aPD
CB8jJgXwWYPAvHYF6ZBpaa4vfS6cBOWSKNpToxmAU3qmYVrdL+oHucOk7DpNDpiN
qLfbBbl6cc5p2aYjQ3o6PRf4oEclMoP19vY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:18 2025 by rpki-client