Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36a980aa-84de-395a-b357-ae4c1607e985.roa
File:                     36a980aa-84de-395a-b357-ae4c1607e985.roa (raw, json)
Hash identifier:          n5f1X0oOaLiu3YqpW0PDtQ9RBj0cwJgPwb9Kch5NO+M=
Subject key identifier:   93:53:C3:9B:74:CB:5B:F0:63:FC:4D:BB:15:5D:F5:38:D5:A7:25:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B4375EBCDE3A3A41A3800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36a980aa-84de-395a-b357-ae4c1607e985.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396606
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:43:75:eb:cd:e3:a3:a4:1a:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=f95f49a8-39ce-48d5-a65d-9d8be3b63f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:61:13:26:d0:50:5b:8b:84:eb:cf:8f:fc:
                    11:e3:83:0b:37:4a:87:c3:6d:03:41:fa:2a:9f:44:
                    19:79:38:a5:71:ba:16:f1:70:de:6a:37:f6:1d:4f:
                    65:0f:b3:5f:7c:b9:7d:95:b1:17:82:77:b2:94:20:
                    74:85:f2:21:aa:21:95:94:e9:23:c0:fe:82:7c:d6:
                    ac:46:eb:75:e6:b1:f2:05:6b:74:57:ad:16:3a:eb:
                    a6:51:7c:03:f1:1b:c4:fd:22:8c:b0:08:06:d9:5e:
                    82:32:70:ab:bb:a1:d2:ef:79:61:5e:e4:97:6d:49:
                    fa:3c:25:63:05:02:18:e5:1e:26:c1:bc:b5:d2:9b:
                    de:41:b4:a5:ac:c5:b7:68:a4:4e:09:96:d6:03:11:
                    55:c5:a9:e5:77:59:0f:a1:bc:93:de:49:75:7d:96:
                    76:b4:bf:b2:38:15:76:a8:8f:e9:10:56:82:c1:29:
                    b4:83:51:e3:69:b4:45:a5:43:ae:88:1d:10:49:ff:
                    f4:3a:84:40:55:7a:51:5f:6b:f2:02:b4:77:69:51:
                    27:2b:09:8e:bf:7f:36:d0:c9:ea:a6:f7:22:18:5f:
                    e8:d7:e1:df:8c:4a:3a:1c:8a:84:bd:35:b0:90:69:
                    37:f7:ec:f3:12:40:69:69:18:30:07:6a:a4:72:0c:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:C3:9B:74:CB:5B:F0:63:FC:4D:BB:15:5D:F5:38:D5:A7:25:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36a980aa-84de-395a-b357-ae4c1607e985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:10:fd:44:27:f5:b7:4a:09:e6:3b:8d:55:04:ea:c3:e8:
         f9:00:c8:da:e0:02:a5:96:41:c4:13:7b:d9:7f:45:23:8d:b7:
         c0:62:b9:71:27:2a:03:15:dd:dc:d9:96:19:63:08:ee:06:86:
         f6:3d:01:52:0e:a4:fb:7d:7f:49:f6:9c:42:e2:2c:2a:04:9c:
         9c:fa:c6:01:96:6a:c2:4e:aa:67:77:1d:83:72:ca:68:ee:5a:
         6d:d1:c8:ac:30:67:18:90:53:c3:fd:6d:4d:20:36:92:2c:82:
         a2:d1:ec:28:2a:ba:2d:54:24:0d:e0:32:46:b8:36:73:39:38:
         bd:28:71:35:30:56:e7:40:64:d2:47:8e:83:43:ea:1d:a5:70:
         91:21:a1:c1:03:c7:ac:19:31:57:06:da:64:f2:dd:91:7e:4f:
         97:92:e9:00:0b:f9:72:d4:cc:53:b9:9e:6c:62:8f:10:ad:3f:
         d6:fb:ce:88:bc:04:84:48:70:21:d0:4d:5d:5f:e9:d3:2a:07:
         1e:e3:e8:ff:9f:e9:b9:05:0c:57:97:ec:1e:84:28:d4:2c:bf:
         da:c8:36:bb:b1:4b:e1:c5:98:d2:83:62:0e:cf:61:ad:bd:23:
         3f:24:2a:bb:65:7b:28:90:b8:f4:b3:6a:b4:f8:5f:ba:04:8e:
         f9:b4:18:71
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G0N1683jo6QaOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
Zjk1ZjQ5YTgtMzljZS00OGQ1LWE2NWQtOWQ4YmUzYjYzZjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8NhEybQUFuLhOvPj/wR44MLN0qHw20DQfoq
n0QZeTilcboW8XDeajf2HU9lD7NffLl9lbEXgneylCB0hfIhqiGVlOkjwP6CfNas
Rut15rHyBWt0V60WOuumUXwD8RvE/SKMsAgG2V6CMnCru6HS73lhXuSXbUn6PCVj
BQIY5R4mwby10pveQbSlrMW3aKROCZbWAxFVxanld1kPobyT3kl1fZZ2tL+yOBV2
qI/pEFaCwSm0g1HjabRFpUOuiB0QSf/0OoRAVXpRX2vyArR3aVEnKwmOv3820Mnq
pvciGF/o1+HfjEo6HIqEvTWwkGk39+zzEkBpaRgwB2qkcgwccwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJNTw5t0y1vwY/xNuxVd9TjVpyUPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzZhOTgwYWEtODRkZS0z
OTVhLWIzNTctYWU0YzE2MDdlOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA11BD9RCf1t0oJ5juNVQTqw+j5AMja4AKllkHEE3vZf0UjjbfAYrlx
JyoDFd3c2ZYZYwjuBob2PQFSDqT7fX9J9pxC4iwqBJyc+sYBlmrCTqpndx2Dcspo
7lpt0cisMGcYkFPD/W1NIDaSLIKi0ewoKrotVCQN4DJGuDZzOTi9KHE1MFbnQGTS
R46DQ+odpXCRIaHBA8esGTFXBtpk8t2Rfk+XkukAC/ly1MxTuZ5sYo8QrT/W+86I
vASESHAh0E1dX+nTKgce4+j/n+m5BQxXl+wehCjULL/ayDa7sUvhxZjSg2IOz2Gt
vSM/JCq7ZXsokLj0s2q0+F+6BI75tBhx
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:14 2025 by rpki-client