Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b6d5135-0727-3efa-8616-65fa4dc74c68.roa
File:                     4b6d5135-0727-3efa-8616-65fa4dc74c68.roa (raw, json)
Hash identifier:          o9ibKRcNdhiC/o/2yFAU4L96ms8/CdKwBDAkpSZtVfY=
Subject key identifier:   AE:9B:60:7C:F6:5E:9F:C6:FB:75:67:A9:FA:D2:5F:45:70:9C:7E:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B986D4F415EB50C55000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b6d5135-0727-3efa-8616-65fa4dc74c68.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     36618
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b9:86:d4:f4:15:eb:50:c5:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=82e0e6c8-5393-4673-8ca0-93ae46dd3e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:3d:d3:68:53:2d:81:8f:ff:f1:ee:77:db:
                    cf:3a:19:cf:d5:c1:9c:44:76:8d:94:65:f6:ee:68:
                    f3:9d:4f:b5:23:4b:7b:4e:18:4d:37:94:75:1b:45:
                    d2:cd:48:ae:a3:09:e7:f6:e2:7a:f9:de:91:b7:93:
                    69:c5:bd:82:09:e0:60:05:b0:a7:3c:3e:cd:ae:92:
                    a9:ab:d6:57:ae:76:02:d4:2d:64:c3:a6:c6:e4:61:
                    5b:dd:15:3b:82:32:a2:36:88:47:56:8c:f1:d9:57:
                    15:a0:57:23:0e:6d:7a:6d:55:b2:e4:75:cd:c7:6a:
                    19:40:aa:40:37:18:7e:30:80:19:ef:dc:d7:3b:5b:
                    8c:ff:a7:27:e0:f1:82:b3:c7:a6:5d:8e:42:fc:9b:
                    7b:71:8a:14:5e:82:89:be:e5:c1:c9:d7:a8:d5:79:
                    75:a6:18:ca:e0:1e:73:cc:83:1c:1a:52:3d:6c:17:
                    cb:6d:79:11:e3:1f:e6:d8:55:1e:9e:18:29:47:72:
                    05:dc:03:d2:49:22:d5:66:d0:1c:23:d6:28:b1:6e:
                    b1:1a:22:58:2a:47:c3:d6:16:59:da:f4:0e:fb:b4:
                    50:14:41:dc:06:87:fe:c5:5f:04:f9:c5:ad:fb:13:
                    b5:15:c9:e7:48:06:9f:33:0d:ef:51:f0:15:d9:6d:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9B:60:7C:F6:5E:9F:C6:FB:75:67:A9:FA:D2:5F:45:70:9C:7E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b6d5135-0727-3efa-8616-65fa4dc74c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:b1:0d:c4:00:9c:e3:f9:6b:85:5c:51:b0:f0:69:a3:2b:
         21:dd:cb:78:87:8e:8e:a7:ca:f6:06:74:ca:54:0e:23:98:ec:
         a4:bd:a5:64:5a:68:1c:98:50:0c:a3:0f:7d:0a:f1:90:ea:1c:
         a6:dd:66:85:6e:18:80:c7:0f:39:60:52:32:78:82:69:82:5c:
         21:c8:fd:7e:c0:ea:8f:a3:61:35:55:a4:4d:db:8b:dc:2f:03:
         d5:2f:d6:5a:f9:a0:87:07:9c:53:5f:8d:66:83:41:b8:65:f5:
         41:3e:87:5f:49:22:d9:79:d5:19:bc:7c:cf:fc:12:7e:cc:d9:
         47:d6:bd:e0:e6:d2:f6:ce:e3:6a:69:7c:bf:1e:24:b4:8b:4e:
         95:b9:67:13:a9:ac:20:e2:7b:4c:d3:0b:f9:ec:38:a7:53:d9:
         bf:99:99:1b:96:0d:a7:20:fa:3e:72:27:f0:bf:f6:0d:3f:6f:
         25:f1:73:27:e3:db:39:e4:3c:95:ba:cd:d9:55:0c:32:95:0f:
         6c:86:80:4c:5a:cb:7b:9b:b0:1c:c1:a9:c0:a6:d4:7c:43:cb:
         f1:a4:93:04:5c:6b:6c:93:88:bd:0e:b0:fb:a3:ae:df:f5:56:
         0d:94:a2:66:5d:0d:27:71:71:33:3b:63:1c:09:e8:07:d1:1c:
         1e:1a:1b:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULmG1PQV61DFUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
ODJlMGU2YzgtNTM5My00NjczLThjYTAtOTNhZTQ2ZGQzZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKE902hTLYGP//Hud9vPOhnP1cGcRHaNlGX2
7mjznU+1I0t7ThhNN5R1G0XSzUiuownn9uJ6+d6Rt5Npxb2CCeBgBbCnPD7NrpKp
q9ZXrnYC1C1kw6bG5GFb3RU7gjKiNohHVozx2VcVoFcjDm16bVWy5HXNx2oZQKpA
Nxh+MIAZ79zXO1uM/6cn4PGCs8emXY5C/Jt7cYoUXoKJvuXBydeo1Xl1phjK4B5z
zIMcGlI9bBfLbXkR4x/m2FUenhgpR3IF3APSSSLVZtAcI9YosW6xGiJYKkfD1hZZ
2vQO+7RQFEHcBof+xV8E+cWt+xO1FcnnSAafMw3vUfAV2W2zTQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK6bYHz2Xp/G+3VnqfrSX0VwnH43MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGI2ZDUxMzUtMDcyNy0z
ZWZhLTg2MTYtNjVmYTRkYzc0YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQByirENxACc4/lrhVxRsPBpoysh3ct4h46Op8r2BnTKVA4jmOykvaVk
WmgcmFAMow99CvGQ6hym3WaFbhiAxw85YFIyeIJpglwhyP1+wOqPo2E1VaRN24vc
LwPVL9Za+aCHB5xTX41mg0G4ZfVBPodfSSLZedUZvHzP/BJ+zNlH1r3g5tL2zuNq
aXy/HiS0i06VuWcTqawg4ntM0wv57DinU9m/mZkblg2nIPo+cifwv/YNP28l8XMn
49s55DyVus3ZVQwylQ9shoBMWst7m7AcwanAptR8Q8vxpJMEXGtsk4i9DrD7o67f
9VYNlKJmXQ0ncXEzO2McCegH0RweGhte
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:16 2025 by rpki-client