Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a59110-e169-3d90-a0a3-33333fd93cd1.roa
File:                     48a59110-e169-3d90-a0a3-33333fd93cd1.roa (raw, json)
Hash identifier:          37d2kuEcAl/Q/HSKvn21xmXtQgCBwrHvAX462+yixjs=
Subject key identifier:   20:9C:84:E9:0A:F2:64:21:69:67:E3:32:07:50:7A:A5:6E:22:92:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C07ED52C3DA90735E19080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a59110-e169-3d90-a0a3-33333fd93cd1.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396550
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:7e:d5:2c:3d:a9:07:35:e1:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=c4f0ad6a-f36e-44d6-8887-2eaa486cf1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:75:43:90:b9:6f:fd:87:42:af:67:ac:a1:
                    a8:2b:22:32:ac:0a:d7:0e:f4:4f:39:8a:93:59:72:
                    f1:80:bb:4c:fa:87:11:9c:4e:90:41:05:82:3a:bf:
                    1b:48:f9:b9:30:f9:e4:fa:c4:63:95:44:7e:e2:63:
                    32:59:d2:90:8f:18:bc:b7:9d:ee:b4:e2:1b:8a:f1:
                    92:42:4f:8f:28:48:cd:3e:3f:9a:90:26:2c:09:4b:
                    d1:be:11:d1:35:23:4b:90:7c:ca:56:00:a9:9d:8a:
                    cd:09:89:0b:44:83:80:8c:42:e9:83:27:f0:45:e4:
                    0b:53:b1:59:fb:5c:0d:05:0e:fe:b5:4c:06:3c:85:
                    0c:16:51:0f:47:8c:35:c8:63:68:8c:5b:f1:82:72:
                    9d:c9:32:7a:ed:33:b9:e2:db:6f:60:6a:ae:c1:ce:
                    07:5f:29:b8:cc:9b:e9:f2:92:05:36:ab:50:53:fc:
                    f2:1f:48:c6:9d:07:2e:ef:33:0b:1e:90:fe:a0:4a:
                    44:08:8e:ef:b7:6a:28:52:7a:8d:d8:4d:90:13:6c:
                    b7:2e:5e:5f:dc:d6:fd:2f:ad:bf:37:09:d1:6c:c1:
                    fb:40:bc:61:0d:40:db:49:d6:19:e8:39:7b:35:f8:
                    f5:a4:e8:f5:6d:df:89:6b:38:3a:ab:a1:5d:ba:10:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:84:E9:0A:F2:64:21:69:67:E3:32:07:50:7A:A5:6E:22:92:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a59110-e169-3d90-a0a3-33333fd93cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:54:b2:e9:51:35:f0:d4:8f:2f:2f:b6:b5:82:0b:e0:76:
         78:ed:ac:a0:01:6a:96:67:57:5f:5f:35:49:e7:e5:f0:11:13:
         6e:54:6c:70:de:4b:c2:23:35:e5:23:5d:c6:20:71:45:c8:f8:
         14:4e:c4:5f:5e:07:0d:05:3d:d3:94:97:dc:c2:46:4b:42:92:
         02:45:76:42:33:c6:0c:6e:3c:62:62:6a:06:ca:19:53:5b:03:
         75:81:ad:ec:63:94:e7:5a:21:9b:9a:77:23:34:ff:dd:ce:6a:
         84:57:ef:70:a3:8a:a5:03:4b:d4:89:9b:03:c0:86:62:d2:5f:
         e6:41:f7:55:33:71:11:23:41:75:06:1e:65:b9:29:90:72:ef:
         ac:1b:27:10:4c:45:7b:81:90:33:47:ba:ef:f5:1f:f1:4a:d9:
         cb:57:34:01:e7:89:15:c7:6e:e9:1c:ec:1e:75:85:02:84:f8:
         07:c3:8f:36:52:6f:ba:ee:ae:ce:64:3a:05:bf:67:37:b7:5c:
         cf:68:0a:19:a0:a5:b0:14:97:79:4e:e0:c5:20:ba:e3:69:b2:
         75:60:25:b2:ae:45:a5:5a:03:76:6d:01:0a:83:78:fd:e0:53:
         6d:07:37:44:41:14:25:90:44:ee:3d:0e:df:e8:4b:4e:a2:6c:
         1d:33:cb:68
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwH7VLD2pBzXhkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
YzRmMGFkNmEtZjM2ZS00NGQ2LTg4ODctMmVhYTQ4NmNmMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrN1Q5C5b/2HQq9nrKGoKyIyrArXDvRPOYqT
WXLxgLtM+ocRnE6QQQWCOr8bSPm5MPnk+sRjlUR+4mMyWdKQjxi8t53utOIbivGS
Qk+PKEjNPj+akCYsCUvRvhHRNSNLkHzKVgCpnYrNCYkLRIOAjELpgyfwReQLU7FZ
+1wNBQ7+tUwGPIUMFlEPR4w1yGNojFvxgnKdyTJ67TO54ttvYGquwc4HXym4zJvp
8pIFNqtQU/zyH0jGnQcu7zMLHpD+oEpECI7vt2ooUnqN2E2QE2y3Ll5f3Nb9L62/
NwnRbMH7QLxhDUDbSdYZ6Dl7Nfj1pOj1bd+Jazg6q6FduhATSwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCCchOkK8mQhaWfjMgdQeqVuIpJGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhhNTkxMTAtZTE2OS0z
ZDkwLWEwYTMtMzMzMzNmZDkzY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA21lSy6VE18NSPLy+2tYIL4HZ47aygAWqWZ1dfXzVJ5+XwERNuVGxw
3kvCIzXlI13GIHFFyPgUTsRfXgcNBT3TlJfcwkZLQpICRXZCM8YMbjxiYmoGyhlT
WwN1ga3sY5TnWiGbmncjNP/dzmqEV+9wo4qlA0vUiZsDwIZi0l/mQfdVM3ERI0F1
Bh5luSmQcu+sGycQTEV7gZAzR7rv9R/xStnLVzQB54kVx27pHOwedYUChPgHw482
Um+67q7OZDoFv2c3t1zPaAoZoKWwFJd5TuDFILrjabJ1YCWyrkWlWgN2bQEKg3j9
4FNtBzdEQRQlkETuPQ7f6EtOomwdM8to
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:28 2025 by rpki-client