Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa
File:                     670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa (raw, json)
Hash identifier:          /xCHONGNN7vimknEUyA8QY0oyzglKCnyQaRf9xWosn0=
Subject key identifier:   16:A7:EA:FA:DE:92:70:AE:E1:CC:FF:64:BA:54:3D:A4:00:C8:B7:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290983CB3810388E5C80B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396574
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:98:3c:b3:81:03:88:e5:c8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=63eae981-a870-4da9-9589-69d6823238c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:61:cf:a9:95:65:81:51:f5:43:90:90:f5:
                    cf:38:a6:dd:0f:3d:5d:48:e8:55:17:b3:06:ba:e7:
                    ab:13:0d:ac:ea:81:a7:fd:7c:88:d7:09:24:26:32:
                    82:af:18:ef:29:52:f6:3d:8b:f3:40:05:3f:75:8b:
                    25:49:03:fb:e7:d4:a5:a7:6a:35:41:27:d9:9c:db:
                    1e:d1:39:05:ba:74:3f:6b:0a:b4:84:81:6b:7f:2d:
                    1f:62:09:17:c3:3d:be:64:4d:4b:89:3a:2a:be:a3:
                    92:0c:1d:c1:d8:a2:46:98:8b:7a:bd:fc:7b:31:e7:
                    0f:f3:29:b3:a1:d7:4a:43:ca:1d:6e:93:0a:31:ca:
                    77:50:1d:30:71:b4:92:79:ed:31:12:4d:df:9b:f0:
                    3a:67:c7:9f:8f:b1:31:73:72:9e:44:fa:54:bf:73:
                    9b:f6:e6:92:3b:56:6e:1d:9e:30:b4:5b:5d:85:0b:
                    30:08:19:e7:f2:b6:f6:1d:69:e8:81:72:e8:6f:b2:
                    9a:14:e4:8d:10:5e:be:13:f8:4f:50:4a:00:14:eb:
                    01:78:53:8a:e4:02:a9:83:b1:a3:cf:44:dd:37:2e:
                    a5:cc:20:f1:5c:6a:31:e7:ad:dc:dd:0a:b6:d3:b7:
                    ca:6b:06:26:9e:cd:6b:0a:9c:e1:66:b0:0c:86:3e:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:EA:FA:DE:92:70:AE:E1:CC:FF:64:BA:54:3D:A4:00:C8:B7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8e:c6:69:c2:bd:16:bd:99:64:47:f3:3d:cf:f8:55:e8:3d:
         2a:92:ba:bc:5a:7b:03:04:12:22:20:c3:dc:68:3e:93:14:07:
         4e:b4:8d:aa:24:55:c4:bf:82:b9:12:e6:e0:53:9b:bb:f0:47:
         0c:32:80:39:ed:1f:57:6b:ee:6f:89:14:d3:50:0b:8f:04:df:
         af:05:28:92:54:e8:c1:23:7f:98:26:62:2f:71:dd:f2:a9:a1:
         f4:3c:66:64:11:be:c5:f4:6f:13:65:f0:7b:d7:07:d3:2d:80:
         0e:5a:a2:45:3b:e2:2b:67:d2:f4:f0:6f:dd:16:54:a6:fa:99:
         a6:61:50:e3:46:cb:f6:9a:5d:9b:7b:60:fa:cf:29:c5:ad:ba:
         0a:13:22:e7:36:b8:bb:7c:3c:e2:61:40:73:ee:da:b9:87:91:
         97:ca:5f:03:2e:e5:98:81:e0:16:46:e6:6b:ba:ea:92:d9:c7:
         c7:a8:2c:40:83:73:61:be:59:b3:ee:a4:d1:10:16:0d:60:af:
         5f:cf:07:e1:85:33:a5:52:69:50:1e:d6:16:ba:39:67:90:78:
         aa:04:fc:63:89:4b:02:0f:d8:c5:03:71:96:4c:2d:b1:f8:e5:
         93:d1:c6:8f:dd:fb:e3:e0:ab:35:05:c3:39:ca:08:e2:78:d4:
         48:84:12:e9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpikJg8s4EDiOXICwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NjNlYWU5ODEtYTg3MC00ZGE5LTk1ODktNjlkNjgyMzIzOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvdhz6mVZYFR9UOQkPXPOKbdDz1dSOhVF7MG
uuerEw2s6oGn/XyI1wkkJjKCrxjvKVL2PYvzQAU/dYslSQP759Slp2o1QSfZnNse
0TkFunQ/awq0hIFrfy0fYgkXwz2+ZE1LiToqvqOSDB3B2KJGmIt6vfx7MecP8ymz
oddKQ8odbpMKMcp3UB0wcbSSee0xEk3fm/A6Z8efj7Exc3KeRPpUv3Ob9uaSO1Zu
HZ4wtFtdhQswCBnn8rb2HWnogXLob7KaFOSNEF6+E/hPUEoAFOsBeFOK5AKpg7Gj
z0TdNy6lzCDxXGox563c3Qq207fKawYmns1rCpzhZrAMhj4CzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBan6vreknCu4cz/ZLpUPaQAyLfoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjcwZTdhYzQtZmQyZS0z
MDJiLWJlZDYtMWNhNWJiZjdkZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAPjsZpwr0WvZlkR/M9z/hV6D0qkrq8WnsDBBIiIMPcaD6TFAdOtI2q
JFXEv4K5EubgU5u78EcMMoA57R9Xa+5viRTTUAuPBN+vBSiSVOjBI3+YJmIvcd3y
qaH0PGZkEb7F9G8TZfB71wfTLYAOWqJFO+IrZ9L08G/dFlSm+pmmYVDjRsv2ml2b
e2D6zynFrboKEyLnNri7fDziYUBz7tq5h5GXyl8DLuWYgeAWRuZruuqS2cfHqCxA
g3Nhvlmz7qTREBYNYK9fzwfhhTOlUmlQHtYWujlnkHiqBPxjiUsCD9jFA3GWTC2x
+OWT0caP3fvj4Ks1BcM5ygjieNRIhBLp
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:19 2025 by rpki-client