Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4faae47-ad4d-3731-bbd7-cd9fb5e91e07.roa
File:                     f4faae47-ad4d-3731-bbd7-cd9fb5e91e07.roa (raw, json)
Hash identifier:          HTADi5HPdQj+awBmEu98DQ3F3OTk8qQLbDHNTi1hZ1w=
Subject key identifier:   2C:E5:8D:18:69:2A:9B:97:AD:C4:B2:43:28:CB:8A:5C:26:8D:0F:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA26A2AB9873DE6730EB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4faae47-ad4d-3731-bbd7-cd9fb5e91e07.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396590
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:26:a2:ab:98:73:de:67:30:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=49211fbe-2b0b-4b15-b964-e2b737940455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5b:d7:9b:91:c0:b0:49:d3:12:a3:e3:a0:43:
                    02:d2:38:c3:b5:7d:6e:ba:d4:ba:c9:5f:7d:0b:c1:
                    dc:f0:d9:97:0c:e4:5a:10:d8:1b:fb:39:78:bb:06:
                    71:77:99:bb:e9:11:fd:46:b3:5a:bc:80:64:e0:8a:
                    5c:41:d3:f8:cc:fe:9a:66:00:29:fc:e8:c6:3e:17:
                    0e:53:aa:4f:6c:4c:f3:d6:d0:72:a8:98:4e:b1:a9:
                    e9:24:02:89:d3:84:dc:fd:fa:2e:fb:fb:08:02:42:
                    9a:9e:32:73:43:b4:fb:a6:70:eb:98:e7:0b:c2:65:
                    35:28:5a:79:02:bf:31:4f:fc:0a:e6:aa:84:2b:a3:
                    bf:70:b5:c4:a9:67:e9:a9:8a:fd:4b:fa:4b:a5:f9:
                    70:9e:39:e5:1d:21:f6:5d:b6:76:20:17:d4:ff:96:
                    54:44:84:c5:ca:a8:82:86:65:09:7d:64:ee:c8:e4:
                    bc:39:0f:da:7c:1d:bf:01:0b:40:77:8e:ee:bd:8e:
                    00:1f:0c:aa:73:f8:4e:da:2b:1f:af:26:20:ca:75:
                    6b:1a:98:63:dc:05:19:b8:e1:1a:ea:af:e5:03:dc:
                    98:29:d8:7e:d0:87:df:13:35:77:cc:3a:34:51:80:
                    bb:0c:52:a8:6b:59:8a:8e:45:c2:cd:34:87:d4:28:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:8D:18:69:2A:9B:97:AD:C4:B2:43:28:CB:8A:5C:26:8D:0F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4faae47-ad4d-3731-bbd7-cd9fb5e91e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:a4:f8:b9:03:64:3c:74:72:ba:59:52:bc:b4:03:83:52:
         61:f1:f2:c3:f8:c5:77:e6:0b:b0:58:41:51:9c:c7:e0:dc:08:
         79:fd:44:c2:20:c2:3c:dd:49:45:cb:b5:4c:44:1a:7b:95:1c:
         72:5c:fa:58:52:df:19:d2:fc:0b:ea:0d:ef:74:9e:5b:6e:4f:
         28:34:0b:2a:48:6d:45:92:e0:96:95:5f:35:e9:df:d7:14:85:
         ab:39:35:35:2e:83:79:72:71:43:db:da:b0:05:a4:0a:9d:39:
         aa:3a:89:cb:e1:dc:67:ef:b1:97:1a:ba:41:f7:cd:42:df:e4:
         bf:08:1d:99:2c:a6:64:97:d0:de:69:3a:81:34:e0:f1:73:df:
         6b:cf:01:de:5a:f7:aa:89:d0:73:66:4d:5b:c6:8e:02:94:66:
         97:ca:00:f7:97:e8:df:1d:30:68:ee:df:80:61:38:b3:df:4d:
         b5:19:5f:89:5b:ad:3d:0a:c0:41:6c:10:15:c0:17:d3:3b:e4:
         cf:27:f7:dc:dd:13:28:65:81:95:c5:63:1f:3c:56:cd:a1:a6:
         2a:25:e5:6f:5b:67:94:79:32:f1:cf:49:9f:ac:82:bf:8d:9b:
         6d:1c:97:aa:9f:ac:5b:89:f6:7f:83:3f:63:3c:90:be:92:6e:
         7d:a0:a3:5e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmkuiaiq5hz3mcw60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NDkyMTFmYmUtMmIwYi00YjE1LWI5NjQtZTJiNzM3OTQwNDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFvXm5HAsEnTEqPjoEMC0jjDtX1uutS6yV99
C8Hc8NmXDORaENgb+zl4uwZxd5m76RH9RrNavIBk4IpcQdP4zP6aZgAp/OjGPhcO
U6pPbEzz1tByqJhOsanpJAKJ04Tc/fou+/sIAkKanjJzQ7T7pnDrmOcLwmU1KFp5
Ar8xT/wK5qqEK6O/cLXEqWfpqYr9S/pLpflwnjnlHSH2XbZ2IBfU/5ZURITFyqiC
hmUJfWTuyOS8OQ/afB2/AQtAd47uvY4AHwyqc/hO2isfryYgynVrGphj3AUZuOEa
6q/lA9yYKdh+0IffEzV3zDo0UYC7DFKoa1mKjkXCzTSH1Ci5YwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCzljRhpKpuXrcSyQyjLilwmjQ9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjRmYWFlNDctYWQ0ZC0z
NzMxLWJiZDctY2Q5ZmI1ZTkxZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApq6T4uQNkPHRyullSvLQDg1Jh8fLD+MV35guw
WEFRnMfg3Ah5/UTCIMI83UlFy7VMRBp7lRxyXPpYUt8Z0vwL6g3vdJ5bbk8oNAsq
SG1FkuCWlV816d/XFIWrOTU1LoN5cnFD29qwBaQKnTmqOonL4dxn77GXGrpB981C
3+S/CB2ZLKZkl9DeaTqBNODxc99rzwHeWveqidBzZk1bxo4ClGaXygD3l+jfHTBo
7t+AYTiz3021GV+JW609CsBBbBAVwBfTO+TPJ/fc3RMoZYGVxWMfPFbNoaYqJeVv
W2eUeTLxz0mfrIK/jZttHJeqn6xbifZ/gz9jPJC+km59oKNe
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:09 2025 by rpki-client