Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b1f748-f3ec-31ae-a48f-3976f98fc592.roa
File:                     22b1f748-f3ec-31ae-a48f-3976f98fc592.roa (raw, json)
Hash identifier:          FTsBfDiKfxyyf8vWDXCRILaRHw45RWcQnBMqK6c2TA0=
Subject key identifier:   0C:94:F8:ED:19:00:AD:1A:14:7A:3C:B9:CB:99:38:E2:D9:69:2F:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BC02ACA583729A36F1A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b1f748-f3ec-31ae-a48f-3976f98fc592.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     397208
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bc:02:ac:a5:83:72:9a:36:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=1f6368c6-03ce-41a3-a339-735f9588a473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:49:f3:3b:d3:d8:fd:6e:0d:ff:54:a0:6e:
                    a1:35:5b:15:a0:f2:74:a1:b1:8c:ce:21:33:32:df:
                    39:c7:0f:be:32:45:58:93:6d:32:ad:94:d8:38:cc:
                    32:56:c7:48:14:2b:4b:e7:55:c7:3c:2f:e3:44:92:
                    a3:b4:d2:94:b6:16:6a:19:1c:20:ef:88:8f:df:15:
                    8f:c7:73:b0:92:a0:0e:83:c0:66:3c:70:48:f2:89:
                    0e:41:75:cb:7f:3e:bc:00:c6:0b:f8:b1:84:fe:07:
                    25:2a:c9:2a:a4:5b:82:55:54:82:83:3f:33:7d:39:
                    bf:13:5b:5d:00:80:d2:4a:e0:3e:a7:be:84:2d:c3:
                    1e:63:82:22:27:dd:27:a7:1f:2f:aa:3c:1a:2a:b5:
                    cd:5b:f2:28:98:76:dc:43:bf:b9:e7:54:ca:7e:02:
                    80:e2:44:28:57:b6:1f:99:79:73:1e:10:bd:49:e2:
                    62:e2:01:18:64:5b:86:52:7b:bf:7a:f1:93:8c:d3:
                    4c:c3:42:56:65:71:ca:69:f2:b0:a8:d0:ef:f6:fe:
                    a8:af:c2:fe:9c:60:95:17:60:ce:ad:bb:99:1b:c7:
                    7e:51:52:a8:6a:46:43:01:51:8e:93:d2:f6:68:dd:
                    a9:04:91:34:9f:3e:64:14:9e:68:f3:e7:42:56:6a:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:F8:ED:19:00:AD:1A:14:7A:3C:B9:CB:99:38:E2:D9:69:2F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b1f748-f3ec-31ae-a48f-3976f98fc592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:6d:3c:f7:14:a1:9b:7c:e0:9a:9d:73:14:19:3c:e9:0b:
         ac:df:2f:2a:7e:71:0d:07:5d:60:d4:b3:e1:ed:eb:8a:4f:3c:
         df:59:bf:d4:38:d7:77:f5:3e:63:a6:5c:06:a5:17:fc:34:f5:
         57:d6:d3:08:d4:77:99:73:71:ae:a0:83:49:6d:2b:c0:58:aa:
         15:cd:c0:55:0d:13:77:5a:91:93:05:95:93:ee:bc:41:4f:be:
         a1:71:c1:a3:10:ec:f2:47:04:a5:df:92:7d:bf:86:08:d9:b1:
         df:d8:4b:ee:fb:d0:10:21:b0:b1:31:37:fd:ef:a6:e4:ad:22:
         9e:3e:23:99:c3:7b:e3:45:9a:12:d2:78:47:af:1e:77:23:74:
         b6:0c:7c:e1:ff:34:73:0d:d2:b7:6b:55:86:0d:84:43:f3:cf:
         eb:dc:cd:87:74:cd:cd:a1:90:a4:e0:49:a3:09:0e:d7:7a:6d:
         bb:ac:55:69:2c:5b:77:ee:26:08:35:fb:33:b0:7f:0e:2d:24:
         90:1f:c5:15:c5:c8:d4:31:12:36:c6:ba:26:b6:8c:8d:a0:03:
         10:3e:38:41:db:86:16:5e:62:93:d1:82:bd:e4:4d:92:17:5a:
         24:b5:6b:ee:29:4e:b7:44:38:dd:b6:07:32:a2:35:0f:82:62:
         01:21:a9:63
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULwCrKWDcpo28aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
MWY2MzY4YzYtMDNjZS00MWEzLWEzMzktNzM1Zjk1ODhhNDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvxJ8zvT2P1uDf9UoG6hNVsVoPJ0obGMziEz
Mt85xw++MkVYk20yrZTYOMwyVsdIFCtL51XHPC/jRJKjtNKUthZqGRwg74iP3xWP
x3OwkqAOg8BmPHBI8okOQXXLfz68AMYL+LGE/gclKskqpFuCVVSCgz8zfTm/E1td
AIDSSuA+p76ELcMeY4IiJ90npx8vqjwaKrXNW/IomHbcQ7+551TKfgKA4kQoV7Yf
mXlzHhC9SeJi4gEYZFuGUnu/evGTjNNMw0JWZXHKafKwqNDv9v6or8L+nGCVF2DO
rbuZG8d+UVKoakZDAVGOk9L2aN2pBJE0nz5kFJ5o8+dCVmoACwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAyU+O0ZAK0aFHo8ucuZOOLZaS8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjJiMWY3NDgtZjNlYy0z
MWFlLWE0OGYtMzk3NmY5OGZjNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBbM2089xShm3zgmp1zFBk86Qus3y8qfnENB11g1LPh7euKTzzfWb/U
ONd39T5jplwGpRf8NPVX1tMI1HeZc3GuoINJbSvAWKoVzcBVDRN3WpGTBZWT7rxB
T76hccGjEOzyRwSl35J9v4YI2bHf2Evu+9AQIbCxMTf976bkrSKePiOZw3vjRZoS
0nhHrx53I3S2DHzh/zRzDdK3a1WGDYRD88/r3M2HdM3NoZCk4EmjCQ7Xem27rFVp
LFt37iYINfszsH8OLSSQH8UVxcjUMRI2xromtoyNoAMQPjhB24YWXmKT0YK95E2S
F1oktWvuKU63RDjdtgcyojUPgmIBIalj
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:29 2025 by rpki-client