Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
File:                     4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa (raw, json)
Hash identifier:          XIp74D5sj9QvQG2NC3tEBQBr81hzTUsWZf3iAV7YYhc=
Subject key identifier:   48:F2:33:D3:DD:4A:61:84:B0:69:E0:72:B9:4B:54:85:AC:A8:CA:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B9BC7275C75F69E4BCEC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396573
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b9:bc:72:75:c7:5f:69:e4:bc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=79ed4c37-8130-46c7-a1ae-8b2062f3f600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:2a:d7:a0:c4:90:fa:ba:94:3f:47:e0:d2:
                    52:34:d3:57:d8:75:3f:dc:7e:42:98:b2:9b:ee:cd:
                    18:9a:de:9a:71:35:bc:1c:27:97:8c:3b:85:65:c0:
                    2d:51:16:5c:fa:5f:56:a4:4b:83:c8:2a:1e:a8:cc:
                    96:c3:b8:c9:e9:c6:57:34:d3:cd:88:6a:cb:f1:83:
                    68:2a:63:b2:d4:4f:4d:ef:d6:a7:84:aa:68:3d:6c:
                    d2:ae:72:a1:da:7b:00:55:c0:fd:2f:fb:44:8f:f7:
                    36:8a:a8:e0:38:0c:39:e7:4e:67:8a:1a:75:56:92:
                    52:cf:38:a1:d7:dc:c7:48:52:a3:02:14:c9:49:cc:
                    8a:37:eb:d5:50:1e:3f:54:57:33:04:16:0b:96:85:
                    a0:6c:2a:62:5a:fc:c2:b9:94:95:e5:33:ff:ff:a0:
                    30:39:46:d4:5f:9f:20:66:37:88:05:6a:a2:76:b4:
                    22:0e:2a:e8:13:42:f7:9a:a2:f3:81:39:f9:4f:40:
                    e4:1d:a3:c5:89:6d:29:bf:69:0c:d2:0d:56:8e:84:
                    47:6b:be:c8:5b:87:e5:e1:1d:b9:b8:f8:2e:b5:a8:
                    56:d9:1b:0d:ee:f1:56:51:3b:82:b5:03:08:7a:43:
                    f0:1d:1b:d7:f8:b9:98:04:54:f4:1b:b7:4f:a7:b9:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F2:33:D3:DD:4A:61:84:B0:69:E0:72:B9:4B:54:85:AC:A8:CA:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:44:8a:56:57:13:67:8c:25:5d:3c:ee:99:b1:89:07:61:1e:
         80:51:c4:5b:fc:33:54:8a:46:2d:37:9d:db:21:dd:d2:c0:11:
         1a:06:b1:06:b7:94:87:7d:51:f5:ca:35:46:86:85:aa:bf:ac:
         f4:2f:dc:30:e5:a4:aa:5b:38:46:37:f2:06:be:5c:eb:8f:a8:
         ab:40:15:9d:a6:9a:87:ff:2f:54:c3:dc:3a:d7:9e:a6:6d:96:
         fa:56:6d:b6:b9:58:6d:3d:ad:55:82:5b:7f:c9:5f:5c:2f:ff:
         6c:df:80:74:f5:5d:85:71:9a:90:a2:6c:71:ee:a7:14:7d:e7:
         93:16:4e:05:88:46:4e:f8:79:94:df:3a:e3:69:a7:cd:5b:01:
         08:3d:47:b5:8d:cd:12:db:6c:45:de:94:62:7a:7e:be:57:02:
         2e:1b:8d:45:2f:50:d9:73:41:f7:64:48:50:1a:69:6d:7b:c0:
         3f:90:bf:6e:55:c0:18:82:56:00:51:5d:5f:41:80:51:59:98:
         92:f8:20:81:55:dc:90:a5:4e:00:b9:9c:03:06:6b:e4:5a:fe:
         ca:ac:fd:7e:0f:3e:43:9f:0e:a6:9b:05:dd:8b:b6:4d:69:13:
         2d:ac:06:8c:55:f0:8a:5b:c9:be:a3:52:03:d0:52:a5:7e:bf:
         65:ee:d9:c2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULm8cnXHX2nkvOwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
NzllZDRjMzctODEzMC00NmM3LWExYWUtOGIyMDYyZjNmNjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Qq16DEkPq6lD9H4NJSNNNX2HU/3H5CmLKb
7s0Ymt6acTW8HCeXjDuFZcAtURZc+l9WpEuDyCoeqMyWw7jJ6cZXNNPNiGrL8YNo
KmOy1E9N79anhKpoPWzSrnKh2nsAVcD9L/tEj/c2iqjgOAw5505nihp1VpJSzzih
19zHSFKjAhTJScyKN+vVUB4/VFczBBYLloWgbCpiWvzCuZSV5TP//6AwOUbUX58g
ZjeIBWqidrQiDiroE0L3mqLzgTn5T0DkHaPFiW0pv2kM0g1WjoRHa77IW4fl4R25
uPgutahW2RsN7vFWUTuCtQMIekPwHRvX+LmYBFT0G7dPp7nBBwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEjyM9PdSmGEsGngcrlLVIWsqMoEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc1NGM4ZjQtNzhlYy0z
ZWU4LWFhYTgtNmMyODNhNGVjNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCQRIpWVxNnjCVdPO6ZsYkHYR6AUcRb/DNUikYtN53bId3SwBEaBrEG
t5SHfVH1yjVGhoWqv6z0L9ww5aSqWzhGN/IGvlzrj6irQBWdppqH/y9Uw9w6156m
bZb6Vm22uVhtPa1Vglt/yV9cL/9s34B09V2FcZqQomxx7qcUfeeTFk4FiEZO+HmU
3zrjaafNWwEIPUe1jc0S22xF3pRien6+VwIuG41FL1DZc0H3ZEhQGmlte8A/kL9u
VcAYglYAUV1fQYBRWZiS+CCBVdyQpU4AuZwDBmvkWv7KrP1+Dz5Dnw6mmwXdi7ZN
aRMtrAaMVfCKW8m+o1ID0FKlfr9l7tnC
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:56:42 2025 by rpki-client