Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773450f-d660-38ba-947b-06c563e9d170.roa
File:                     d773450f-d660-38ba-947b-06c563e9d170.roa (raw, json)
Hash identifier:          HOMDfumpSZcyaYQIBPy//1FBVqy72yXBcrn7sP3Rei0=
Subject key identifier:   79:02:F0:AC:4F:01:82:24:61:67:1E:3B:BF:B9:04:EB:9B:B8:98:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB1672D2D6983BFE648F380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773450f-d660-38ba-947b-06c563e9d170.roa
Signing time:             Thu 12 Jun 2025 12:42:09 +0000
ROA not before:           Thu 12 Jun 2025 12:42:09 +0000
ROA not after:            Wed 10 Sep 2025 12:42:09 +0000
asID:                     40647
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:67:2d:2d:69:83:bf:e6:48:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:09 2025 GMT
            Not After : Sep 10 12:42:09 2025 GMT
        Subject: CN=725398d3-352d-42dc-bde4-4818ef0c05f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:b2:2e:26:51:ba:54:25:17:84:c4:a3:98:
                    6b:f3:5e:5d:cb:b6:8d:c3:65:7c:3e:03:1e:18:cf:
                    36:f8:b8:5b:27:90:39:f0:57:13:18:f6:66:b1:76:
                    73:ec:e2:24:d1:c8:94:fd:f7:ff:7c:81:50:b6:b9:
                    db:e5:3b:14:01:8a:af:5a:c5:bd:80:27:55:3a:db:
                    95:1b:ff:94:c7:07:05:d9:25:94:86:b0:db:57:ed:
                    ad:93:0e:4d:7e:3d:6c:27:18:f1:c0:ca:5d:a3:19:
                    46:b0:5c:b7:a1:2f:a8:8d:e8:77:c2:03:6b:56:71:
                    ed:53:81:a5:f4:e6:a5:df:58:01:d0:2d:11:4f:7f:
                    09:34:42:6b:4b:a8:11:17:19:de:6f:2a:a1:8e:02:
                    f6:15:73:5e:b0:8a:94:b0:1a:2c:f4:87:ba:16:e9:
                    7e:cd:fa:c5:d6:c3:af:fe:f4:5c:95:06:85:50:43:
                    38:aa:ff:23:6b:90:a7:8d:1f:73:ce:72:1a:e2:13:
                    cf:ad:29:9e:fd:45:59:b3:74:82:1c:79:c7:72:65:
                    4d:8f:58:dd:c3:7d:13:6e:07:fa:a2:96:bf:ee:bf:
                    af:13:23:05:91:e7:aa:63:b7:c4:f0:90:12:41:fb:
                    85:af:d2:3f:64:bf:97:c5:3b:8d:08:cb:e7:59:66:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:F0:AC:4F:01:82:24:61:67:1E:3B:BF:B9:04:EB:9B:B8:98:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d773450f-d660-38ba-947b-06c563e9d170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:4e:1b:bb:cd:9b:3b:db:9a:f0:d9:03:cc:86:19:de:da:
         c5:17:d5:f8:05:69:04:c6:ea:c8:4a:df:47:c0:f5:ff:b9:e5:
         82:24:f0:55:5e:3e:71:76:18:87:c9:01:9a:c0:95:c0:cf:86:
         b6:0b:55:ad:c2:81:d9:50:d3:21:ec:f8:df:ff:66:8c:9e:99:
         0d:ab:7a:92:ce:5e:a3:42:e8:74:8a:c1:ba:1b:4e:41:d7:6b:
         c0:38:7b:7c:2a:ee:a4:13:09:36:f0:59:f4:69:e8:f6:0d:19:
         5f:f7:67:f0:cc:10:2f:d5:13:3b:92:ea:9c:b2:a8:dd:a1:cf:
         c7:38:10:40:ec:ff:0a:2c:2b:d1:45:6e:92:66:24:e6:6c:e2:
         3c:49:28:71:cf:5a:bd:70:dd:e4:30:0e:64:b1:56:a3:c1:fc:
         60:50:8c:71:5d:0d:c5:82:00:eb:f8:dc:92:35:b3:d9:80:a6:
         e6:d5:bb:c1:aa:ac:4a:43:fb:98:7f:6e:73:7c:2d:87:95:08:
         00:f0:88:32:34:57:28:8b:3c:87:90:b6:85:ee:1b:09:78:ea:
         33:28:95:e0:06:33:76:9f:95:d9:f9:5a:99:66:f0:7c:a5:77:
         18:30:08:9b:36:22:f9:b4:7f:06:9c:c8:5a:e0:94:5e:c2:3a:
         9b:13:46:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWctLWmDv+ZI84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMjEyNDIwOVoXDTI1MDkxMDEyNDIwOVowLzEtMCsGA1UEAxMk
NzI1Mzk4ZDMtMzUyZC00MmRjLWJkZTQtNDgxOGVmMGMwNWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J2yLiZRulQlF4TEo5hr815dy7aNw2V8PgMe
GM82+LhbJ5A58FcTGPZmsXZz7OIk0ciU/ff/fIFQtrnb5TsUAYqvWsW9gCdVOtuV
G/+UxwcF2SWUhrDbV+2tkw5Nfj1sJxjxwMpdoxlGsFy3oS+ojeh3wgNrVnHtU4Gl
9Oal31gB0C0RT38JNEJrS6gRFxnebyqhjgL2FXNesIqUsBos9Ie6Ful+zfrF1sOv
/vRclQaFUEM4qv8ja5CnjR9zznIa4hPPrSme/UVZs3SCHHnHcmVNj1jdw30Tbgf6
opa/7r+vEyMFkeeqY7fE8JASQfuFr9I/ZL+XxTuNCMvnWWZK9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHkC8KxPAYIkYWceO7+5BOubuJjpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc3MzQ1MGYtZDY2MC0z
OGJhLTk0N2ItMDZjNTYzZTlkMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF0EThu7zZs725rw2QPMhhne2sUX1fgFaQTG6shK30fA9f+55YIk
8FVePnF2GIfJAZrAlcDPhrYLVa3CgdlQ0yHs+N//ZoyemQ2repLOXqNC6HSKwbob
TkHXa8A4e3wq7qQTCTbwWfRp6PYNGV/3Z/DMEC/VEzuS6pyyqN2hz8c4EEDs/wos
K9FFbpJmJOZs4jxJKHHPWr1w3eQwDmSxVqPB/GBQjHFdDcWCAOv43JI1s9mApubV
u8GqrEpD+5h/bnN8LYeVCADwiDI0VyiLPIeQtoXuGwl46jMoleAGM3afldn5Wplm
8HyldxgwCJs2Ivm0fwacyFrglF7COpsTRhc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:04 2025 by rpki-client