Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b92ec6-642a-3bfb-8b30-c3f2a17f66d8.roa
File:                     01b92ec6-642a-3bfb-8b30-c3f2a17f66d8.roa (raw, json)
Hash identifier:          m9OJDVvXguUEgit2NnDTF3b6MQasdyqARGe7GEbWvb4=
Subject key identifier:   9B:B6:08:70:5D:85:D3:CA:02:6D:CA:13:5E:41:CF:99:0B:3E:C9:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62BA632226AC4EFEBD620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b92ec6-642a-3bfb-8b30-c3f2a17f66d8.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     397201
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2b:a6:32:22:6a:c4:ef:eb:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=bc093781-220d-446d-8ef6-f14032189022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:46:d1:24:81:2a:26:fb:b9:ac:88:52:07:
                    ee:c4:95:d2:2b:a0:98:bb:03:33:be:6b:da:24:b4:
                    f6:3e:88:0e:30:63:4c:06:03:76:b8:56:52:f3:17:
                    a1:50:69:62:b6:ce:b0:8e:9b:33:02:29:16:0e:cf:
                    9b:51:41:fa:e1:1a:3b:ce:ba:ef:05:24:5e:9e:56:
                    73:8b:66:a4:c7:40:2f:dc:6b:63:41:c8:d7:da:b5:
                    1b:1c:85:ba:fb:02:54:4e:82:03:bf:2b:2a:ff:1d:
                    0c:2f:7f:e5:33:d8:c2:57:4b:7f:35:b8:09:34:ca:
                    95:1e:04:0b:47:ca:a8:45:f2:69:1f:35:28:5f:da:
                    1b:c1:f6:dc:09:fb:b9:a2:37:65:06:ea:da:1b:48:
                    50:97:2b:45:5b:42:1f:18:8a:33:b3:09:9a:7e:37:
                    47:bc:8a:56:0f:a5:3f:08:e2:82:d8:d9:ef:ca:7b:
                    0d:b5:cb:17:2e:e7:05:7e:15:67:5c:43:83:4c:12:
                    8e:01:e1:ed:a2:8f:57:d9:9c:91:4c:ac:c9:87:25:
                    80:61:68:ba:1d:aa:5d:6e:b3:af:5f:a5:ae:bc:c9:
                    9e:91:2e:cd:e4:98:eb:ec:a3:55:14:69:8d:da:85:
                    a4:78:1f:8b:f5:07:75:54:90:f3:bf:a4:4a:b8:13:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B6:08:70:5D:85:D3:CA:02:6D:CA:13:5E:41:CF:99:0B:3E:C9:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b92ec6-642a-3bfb-8b30-c3f2a17f66d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:c8:ae:da:68:d9:70:e4:81:e2:da:6e:40:15:c6:74:98:
         a0:5c:99:e6:ab:d8:4f:4b:b5:c1:76:4f:3c:5b:88:26:25:3d:
         a7:c4:db:ec:8e:22:4f:b0:b1:91:25:0c:54:a5:13:32:85:87:
         c5:47:dd:e4:09:9b:4b:51:64:a7:29:30:9b:68:ed:fc:02:78:
         b4:25:b4:60:5d:97:c3:da:e3:08:ca:42:c1:28:2a:87:e2:91:
         24:b6:e1:1f:ea:74:f1:66:de:ab:ef:02:be:74:5a:02:bb:d2:
         cc:00:3a:56:9a:ae:0f:1c:c4:75:ff:10:a8:67:dd:ce:f5:c0:
         cf:05:f2:ae:da:d2:38:39:86:90:93:c4:6d:d9:30:56:c7:f6:
         0a:56:80:42:e3:df:21:89:7a:4c:7f:27:7b:68:a4:00:ce:f8:
         9d:e2:7a:fd:47:6f:3f:22:a1:ef:c0:a0:a6:9a:8e:77:a8:2e:
         ae:13:4b:d0:69:b6:e0:3e:d8:6d:0c:11:64:83:21:b5:9c:e5:
         d3:d6:b8:74:c9:b1:35:d0:92:1e:48:8c:1e:d6:21:92:c4:35:
         ec:25:f2:e6:ea:18:64:74:e1:71:eb:1d:33:65:fd:58:05:a0:
         70:6d:5b:7e:d6:9e:85:7a:08:f4:ce:7f:9b:2e:25:b7:62:6c:
         22:f5:10:2c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpiumMiJqxO/r1iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
YmMwOTM3ODEtMjIwZC00NDZkLThlZjYtZjE0MDMyMTg5MDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVlG0SSBKib7uayIUgfuxJXSK6CYuwMzvmva
JLT2PogOMGNMBgN2uFZS8xehUGlits6wjpszAikWDs+bUUH64Ro7zrrvBSRenlZz
i2akx0Av3GtjQcjX2rUbHIW6+wJUToIDvysq/x0ML3/lM9jCV0t/NbgJNMqVHgQL
R8qoRfJpHzUoX9obwfbcCfu5ojdlBuraG0hQlytFW0IfGIozswmafjdHvIpWD6U/
COKC2NnvynsNtcsXLucFfhVnXEODTBKOAeHtoo9X2ZyRTKzJhyWAYWi6HapdbrOv
X6WuvMmekS7N5Jjr7KNVFGmN2oWkeB+L9Qd1VJDzv6RKuBO/owIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJu2CHBdhdPKAm3KE15Bz5kLPsk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDFiOTJlYzYtNjQyYS0z
YmZiLThiMzAtYzNmMmExN2Y2NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCj9siu2mjZcOSB4tpuQBXGdJigXJnmq9hPS7XBdk88W4gmJT2nxNvs
jiJPsLGRJQxUpRMyhYfFR93kCZtLUWSnKTCbaO38Ani0JbRgXZfD2uMIykLBKCqH
4pEktuEf6nTxZt6r7wK+dFoCu9LMADpWmq4PHMR1/xCoZ93O9cDPBfKu2tI4OYaQ
k8Rt2TBWx/YKVoBC498hiXpMfyd7aKQAzvid4nr9R28/IqHvwKCmmo53qC6uE0vQ
abbgPthtDBFkgyG1nOXT1rh0ybE10JIeSIwe1iGSxDXsJfLm6hhkdOFx6x0zZf1Y
BaBwbVt+1p6Fegj0zn+bLiW3Ymwi9RAs
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:38:13 2025 by rpki-client