Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bdf49c0-3c47-314a-922c-045bc67645de.roa
File:                     1bdf49c0-3c47-314a-922c-045bc67645de.roa (raw, json)
Hash identifier:          doOgMoR81qleZweUe675boEfpj+h7w6kVCYJiAXUDGA=
Subject key identifier:   5E:2E:67:07:E1:16:08:FC:FC:AB:55:06:AE:B7:EF:E0:24:EA:B9:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A629097893D903327A1BD6100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bdf49c0-3c47-314a-922c-045bc67645de.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396583
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:97:89:3d:90:33:27:a1:bd:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=05993102-8c30-4efb-a13e-f049931d84c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:73:bf:02:68:fb:42:e2:54:f6:de:6c:14:
                    f6:03:21:f6:0b:22:f1:14:7b:36:40:1a:43:43:83:
                    72:f7:65:0b:7f:24:83:eb:d9:4c:57:6f:2b:f1:ef:
                    e8:19:f1:bb:41:d7:52:4d:55:90:07:f0:0f:ab:7e:
                    87:e0:79:f8:4f:ad:4e:f1:37:40:d9:49:ef:aa:72:
                    ef:bb:1a:79:40:1e:9d:07:bc:56:e4:ae:cc:60:33:
                    fb:0f:41:dc:31:37:33:d0:ca:2d:b9:9a:20:87:0c:
                    25:aa:8d:98:b4:3b:5f:3b:ad:ca:fb:de:70:31:24:
                    da:9d:60:9d:bc:4d:a6:4d:08:87:e6:83:ca:83:a4:
                    63:2f:36:72:78:47:d1:66:86:12:10:2f:a2:c8:13:
                    c2:f1:d8:b6:c6:96:9d:b1:4a:aa:3c:c9:7d:79:2d:
                    07:75:b2:09:39:45:d9:3a:1f:34:df:a7:b1:c6:db:
                    ea:dc:ca:33:0f:99:69:88:2c:63:53:2f:63:72:92:
                    ce:68:e9:8c:3d:04:df:f2:63:a3:bd:61:0f:10:6d:
                    b6:59:81:05:46:a8:fd:f0:e2:19:d1:9c:6a:69:39:
                    84:fb:9f:96:2c:0a:d6:23:42:0e:0e:33:1b:4d:1b:
                    91:8d:53:87:7e:a7:99:d5:18:f2:5c:93:14:ee:52:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:67:07:E1:16:08:FC:FC:AB:55:06:AE:B7:EF:E0:24:EA:B9:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bdf49c0-3c47-314a-922c-045bc67645de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:ae:4e:05:28:23:1c:4f:c6:b6:5b:87:c3:ae:d2:97:32:
         8e:a7:19:18:9b:b3:d3:ba:5d:60:77:18:c8:4f:cf:3e:64:da:
         6c:23:b1:32:78:09:3e:ef:ee:9b:c6:b0:99:c9:f7:d4:59:70:
         29:6b:5f:e3:01:4c:e0:33:47:47:9e:bf:7d:6b:bc:1e:50:a9:
         f6:87:15:49:2c:3f:91:8b:97:5f:92:55:72:e4:2f:fb:8a:00:
         16:59:cd:72:b0:61:3d:19:6d:7b:74:f2:7c:31:5d:6f:0f:e3:
         84:41:8e:01:74:11:ca:8f:54:f5:ad:9a:27:fc:a4:4e:7d:8f:
         8e:01:ed:d0:4e:ee:60:79:19:af:1b:8b:c5:d8:97:f0:1d:a0:
         32:dd:e6:4e:05:ed:fd:19:87:51:47:90:99:37:64:c6:10:e7:
         db:34:11:6c:8c:b8:57:96:73:83:e1:88:f1:1a:85:d8:01:aa:
         b2:1c:2b:01:4d:00:f0:90:58:ac:bd:38:b6:01:47:b2:92:be:
         47:89:d1:24:e9:c7:ea:06:12:2c:58:7c:20:48:94:d1:0b:e9:
         c8:2e:d8:b2:f0:12:04:f8:cf:8e:46:d4:1c:4c:09:70:29:06:
         f7:b2:5e:08:66:f5:49:a6:24:20:dc:77:04:d5:b0:36:fa:c2:
         fa:7a:94:4b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikJeJPZAzJ6G9YQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MDU5OTMxMDItOGMzMC00ZWZiLWExM2UtZjA0OTkzMWQ4NGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08VzvwJo+0LiVPbebBT2AyH2CyLxFHs2QBpD
Q4Ny92ULfySD69lMV28r8e/oGfG7QddSTVWQB/APq36H4Hn4T61O8TdA2UnvqnLv
uxp5QB6dB7xW5K7MYDP7D0HcMTcz0MotuZoghwwlqo2YtDtfO63K+95wMSTanWCd
vE2mTQiH5oPKg6RjLzZyeEfRZoYSEC+iyBPC8di2xpadsUqqPMl9eS0HdbIJOUXZ
Oh8036exxtvq3MozD5lpiCxjUy9jcpLOaOmMPQTf8mOjvWEPEG22WYEFRqj98OIZ
0ZxqaTmE+5+WLArWI0IODjMbTRuRjVOHfqeZ1RjyXJMU7lKVMQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF4uZwfhFgj8/KtVBq637+Ak6rmDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWJkZjQ5YzAtM2M0Ny0z
MTRhLTkyMmMtMDQ1YmM2NzY0NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAaQK5OBSgjHE/GtluHw67SlzKOpxkYm7PTul1gdxjIT88+ZNpsI7Ey
eAk+7+6bxrCZyffUWXApa1/jAUzgM0dHnr99a7weUKn2hxVJLD+Ri5dfklVy5C/7
igAWWc1ysGE9GW17dPJ8MV1vD+OEQY4BdBHKj1T1rZon/KROfY+OAe3QTu5geRmv
G4vF2JfwHaAy3eZOBe39GYdRR5CZN2TGEOfbNBFsjLhXlnOD4YjxGoXYAaqyHCsB
TQDwkFisvTi2AUeykr5HidEk6cfqBhIsWHwgSJTRC+nILtiy8BIE+M+ORtQcTAlw
KQb3sl4IZvVJpiQg3HcE1bA2+sL6epRL
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:58 2025 by rpki-client