Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dea56bff-403b-32ba-b3cf-5d19eb58bd7b.roa
File:                     dea56bff-403b-32ba-b3cf-5d19eb58bd7b.roa (raw, json)
Hash identifier:          2pt6X1SGeCeipzMUlT5QXcHJLYAOe9SGo+o1B3tZVEg=
Subject key identifier:   3F:D2:1D:8B:7B:F6:8C:77:F2:B9:CE:A6:A2:C0:D4:A7:17:B6:E9:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA27536AA53549BBD30080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dea56bff-403b-32ba-b3cf-5d19eb58bd7b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396583
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:27:53:6a:a5:35:49:bb:d3:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=67825d52-cc54-4c6e-90b6-e6efc532779b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:be:71:ec:00:b8:81:70:cf:9d:93:b5:fa:
                    27:20:2e:dc:f5:aa:36:40:3d:45:82:96:6d:2c:dd:
                    2a:39:f6:e5:be:63:06:6e:28:3a:1d:c9:68:71:7f:
                    bc:52:57:72:54:10:ef:72:26:a8:5e:08:f2:e2:ab:
                    39:6b:d1:36:0f:6e:bd:b1:6b:f7:36:7c:4b:60:e2:
                    54:ea:00:a0:a8:1f:4d:81:db:89:97:07:94:c8:a0:
                    54:3a:ab:92:4a:84:c4:fd:94:68:bc:ed:32:5d:86:
                    17:8f:24:96:4f:37:b8:d2:38:4d:ae:f3:a2:95:94:
                    b9:52:b2:ed:01:c2:df:c5:fb:c1:21:9a:82:c3:c4:
                    e7:65:ff:c9:71:a3:ea:2b:61:e4:6d:fe:3d:ee:85:
                    13:02:92:55:15:cc:bd:b5:fa:f2:4d:f0:d1:cd:9b:
                    94:88:eb:3e:da:96:76:cf:41:1f:5e:26:f5:d9:38:
                    a0:f2:f6:84:c5:3d:2c:83:a2:9b:de:05:93:68:ba:
                    ca:3f:cc:4a:ec:4a:7b:55:b4:e6:35:a2:73:11:5f:
                    a8:e3:8c:fb:79:45:aa:d2:f9:f7:9b:6f:f4:cd:8f:
                    bd:0c:c7:92:6f:d9:e1:fb:40:19:31:c6:90:8b:4d:
                    1d:2a:5f:85:02:91:9f:02:2a:14:fb:34:eb:59:78:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D2:1D:8B:7B:F6:8C:77:F2:B9:CE:A6:A2:C0:D4:A7:17:B6:E9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dea56bff-403b-32ba-b3cf-5d19eb58bd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:32:a9:71:36:43:84:14:40:9e:9b:b5:ae:8d:54:56:10:75:
         b9:0d:e1:66:91:b8:1d:45:fd:c5:5f:e3:72:f6:0b:bc:cb:8f:
         ac:f5:6f:93:d6:61:fb:1b:ec:2a:17:25:36:e7:d8:bb:21:0b:
         5b:b6:86:33:9a:3e:76:a2:4a:bb:f1:47:bf:48:51:41:fa:f9:
         b9:b9:cd:87:0b:bd:f4:84:fd:1e:df:96:a3:9e:3e:c0:df:cd:
         fd:a1:84:07:37:04:97:22:ac:57:9b:da:9a:6c:ef:96:2d:e3:
         da:45:7e:d5:1a:b6:26:c4:4a:9a:73:40:18:36:17:f5:2a:f7:
         a0:c2:fc:52:14:20:8b:fc:1a:05:98:a3:d2:bc:d9:fe:4e:0e:
         fb:7b:4e:92:b5:54:3c:2c:e0:8c:5d:e9:2e:38:6a:8b:f2:fa:
         90:d7:a6:3a:a2:43:ac:5f:68:e1:50:31:f5:57:93:33:b7:1e:
         09:d1:db:a0:eb:d8:a5:e3:a9:7d:9e:2a:01:dc:44:af:08:7e:
         0b:38:05:10:be:82:97:7b:f6:ad:3d:a5:b0:22:40:aa:1b:a4:
         99:0f:ba:44:b7:66:a5:cb:63:de:38:6f:c3:02:18:bc:34:40:
         00:cb:69:4a:9c:02:c0:59:2a:5e:5d:69:9b:c4:09:4f:df:00:
         a7:7e:4b:5b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuidTaqU1SbvTAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
Njc4MjVkNTItY2M1NC00YzZlLTkwYjYtZTZlZmM1MzI3NzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQm+cewAuIFwz52TtfonIC7c9ao2QD1FgpZt
LN0qOfblvmMGbig6HclocX+8UldyVBDvciaoXgjy4qs5a9E2D269sWv3NnxLYOJU
6gCgqB9NgduJlweUyKBUOquSSoTE/ZRovO0yXYYXjySWTze40jhNrvOilZS5UrLt
AcLfxfvBIZqCw8TnZf/JcaPqK2Hkbf497oUTApJVFcy9tfryTfDRzZuUiOs+2pZ2
z0EfXib12Tig8vaExT0sg6Kb3gWTaLrKP8xK7Ep7VbTmNaJzEV+o44z7eUWq0vn3
m2/0zY+9DMeSb9nh+0AZMcaQi00dKl+FApGfAioU+zTrWXhl2wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD/SHYt79ox38rnOpqLA1KcXtuliMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVhNTZiZmYtNDAzYi0z
MmJhLWIzY2YtNWQxOWViNThiZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAAMqlxNkOEFECem7WujVRWEHW5DeFmkbgdRf3F
X+Ny9gu8y4+s9W+T1mH7G+wqFyU259i7IQtbtoYzmj52okq78Ue/SFFB+vm5uc2H
C730hP0e35ajnj7A3839oYQHNwSXIqxXm9qabO+WLePaRX7VGrYmxEqac0AYNhf1
KvegwvxSFCCL/BoFmKPSvNn+Tg77e06StVQ8LOCMXekuOGqL8vqQ16Y6okOsX2jh
UDH1V5Mztx4J0dug69il46l9nioB3ESvCH4LOAUQvoKXe/atPaWwIkCqG6SZD7pE
t2aly2PeOG/DAhi8NEAAy2lKnALAWSpeXWmbxAlP3wCnfktb
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:28:40 2025 by rpki-client