Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ec1f77a-833b-3b0d-ac5c-91d385b4b48a.roa
File:                     4ec1f77a-833b-3b0d-ac5c-91d385b4b48a.roa (raw, json)
Hash identifier:          vJpQe6so1ljARlgJaYUfqX7E/lKAWWxT8YuLA/qJ4f4=
Subject key identifier:   B7:65:48:43:BE:96:D5:2A:AE:9F:FA:98:B4:BE:C2:F9:E6:A2:A5:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB6139859244BCD7BB5800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ec1f77a-833b-3b0d-ac5c-91d385b4b48a.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     397210
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:61:39:85:92:44:bc:d7:bb:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=9459eeab-a4cf-400d-923a-b9317de0fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:6e:cf:59:1e:30:22:09:3d:32:24:95:da:
                    93:db:19:57:f7:95:eb:22:02:db:ed:22:6a:ca:5b:
                    8f:20:90:e2:3a:93:e3:78:7d:43:78:7b:fb:da:c1:
                    79:17:54:41:ab:39:d7:9f:d8:8e:bf:c0:b4:67:37:
                    87:bb:67:3e:c8:43:b6:58:95:05:7c:a3:fb:3d:48:
                    dd:ef:b6:a2:d5:86:3c:9e:ee:21:30:5b:3c:58:c8:
                    86:0a:ec:7e:01:f1:ae:e2:37:87:90:04:d1:d9:2b:
                    14:2a:f8:e6:5d:d9:80:49:2f:92:39:58:06:07:30:
                    ca:68:79:b7:f2:dc:90:4e:b3:42:e6:67:e3:fe:e7:
                    fe:76:29:bb:50:1d:96:a0:05:36:85:dc:0b:ef:18:
                    1a:5e:29:d8:88:16:cb:3d:44:e7:ec:cf:4d:8c:b5:
                    f5:4c:82:81:07:3b:3e:31:1f:d3:58:f2:04:a3:27:
                    7f:98:ca:de:90:5c:5c:0e:6c:91:bb:aa:21:74:36:
                    1e:cd:05:09:cd:47:52:33:a3:67:b2:36:66:d8:27:
                    8d:be:c8:54:dd:28:0c:4b:3a:82:76:29:bb:8d:3c:
                    f5:2d:58:56:0e:70:f1:43:37:f2:e0:18:d2:3a:98:
                    4b:d6:2b:a3:af:0c:7d:ed:c4:ef:9d:2b:17:39:c7:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:65:48:43:BE:96:D5:2A:AE:9F:FA:98:B4:BE:C2:F9:E6:A2:A5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ec1f77a-833b-3b0d-ac5c-91d385b4b48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:60:6e:48:a6:39:c8:6d:77:bc:53:2e:17:df:eb:9d:23:
         37:83:05:17:5a:67:38:01:23:fe:18:e1:09:71:2d:da:82:34:
         43:a9:3b:11:04:90:6b:76:d3:a7:0b:f8:ff:50:06:a7:65:79:
         50:58:58:c4:44:23:6d:92:7b:3b:2d:8d:90:51:52:e8:3a:9f:
         16:c1:a3:94:67:f6:06:63:21:c2:e6:27:66:c9:c5:09:e6:20:
         ff:6a:17:44:22:42:60:09:8a:10:fe:9c:bb:13:cf:6d:de:01:
         eb:10:9f:6d:ce:90:9a:da:28:91:dd:77:3b:19:55:9c:06:57:
         68:ab:42:92:80:63:7f:70:52:5d:1f:71:8e:e3:79:85:28:3e:
         9f:d9:d6:7a:b1:78:58:a6:c2:ad:65:e5:5d:7a:4d:da:5b:5f:
         ca:d1:45:90:46:3f:da:a7:c0:64:c2:2e:1d:7f:0a:1f:35:4b:
         16:1a:e0:5c:5c:77:fb:49:fa:16:da:5e:a4:e5:ff:bd:ed:e3:
         99:70:99:d4:f5:97:02:cb:c8:4e:9f:6a:d5:b5:28:69:1a:ef:
         31:53:82:4f:3d:de:b5:09:3a:2f:e1:75:a9:ec:8e:ef:ae:6f:
         21:7f:ce:e5:55:3b:c6:c8:5f:68:ad:47:fe:a2:22:c2:6f:29:
         55:93:1e:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEptu2E5hZJEvNe7WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
OTQ1OWVlYWItYTRjZi00MDBkLTkyM2EtYjkzMTdkZTBmZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Otuz1keMCIJPTIkldqT2xlX95XrIgLb7SJq
yluPIJDiOpPjeH1DeHv72sF5F1RBqznXn9iOv8C0ZzeHu2c+yEO2WJUFfKP7PUjd
77ai1YY8nu4hMFs8WMiGCux+AfGu4jeHkATR2SsUKvjmXdmASS+SOVgGBzDKaHm3
8tyQTrNC5mfj/uf+dim7UB2WoAU2hdwL7xgaXinYiBbLPUTn7M9NjLX1TIKBBzs+
MR/TWPIEoyd/mMrekFxcDmyRu6ohdDYezQUJzUdSM6NnsjZm2CeNvshU3SgMSzqC
dim7jTz1LVhWDnDxQzfy4BjSOphL1iujrwx97cTvnSsXOcf/hQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLdlSEO+ltUqrp/6mLS+wvnmoqWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVjMWY3N2EtODMzYi0z
YjBkLWFjNWMtOTFkMzg1YjRiNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBuP2BuSKY5yG13vFMuF9/rnSM3gwUXWmc4ASP+GOEJcS3agjRDqTsR
BJBrdtOnC/j/UAanZXlQWFjERCNtkns7LY2QUVLoOp8WwaOUZ/YGYyHC5idmycUJ
5iD/ahdEIkJgCYoQ/py7E89t3gHrEJ9tzpCa2iiR3Xc7GVWcBldoq0KSgGN/cFJd
H3GO43mFKD6f2dZ6sXhYpsKtZeVdek3aW1/K0UWQRj/ap8Bkwi4dfwofNUsWGuBc
XHf7SfoW2l6k5f+97eOZcJnU9ZcCy8hOn2rVtShpGu8xU4JPPd61CTov4XWp7I7v
rm8hf87lVTvGyF9orUf+oiLCbylVkx45
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:18 2025 by rpki-client