Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df60e7b-4b16-397f-afa3-a5eed5771162.roa
File:                     7df60e7b-4b16-397f-afa3-a5eed5771162.roa (raw, json)
Hash identifier:          9Isbv89XgR3tapDWAjL53wrwFyDD1/xtHu6h9IUOHQ0=
Subject key identifier:   F3:A2:7C:FE:57:0D:41:F8:5D:E5:BC:7E:E4:F7:D5:8D:BA:C7:6A:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A616DF198005739E834AD8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df60e7b-4b16-397f-afa3-a5eed5771162.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396544
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:16:df:19:80:05:73:9e:83:4a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=2f17e71d-e24d-4e60-9c34-986118b4618b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:80:f9:34:d9:63:c0:21:04:38:94:1a:ff:
                    3d:4d:f4:1b:9c:af:57:a7:fe:c3:f7:57:07:64:52:
                    cd:d8:e9:0b:f3:13:6b:1b:b8:a6:4a:c5:00:02:54:
                    20:9f:7b:f6:05:8a:ca:57:d6:b4:5c:36:86:f9:bf:
                    19:a2:03:d9:5d:1a:03:02:d9:00:42:e6:e8:33:a6:
                    81:7b:e4:9b:22:3c:ae:04:05:6b:28:03:74:92:6d:
                    ed:b3:c8:f8:fa:a4:d6:83:03:bd:b3:4d:a8:95:03:
                    ba:51:1f:21:96:f6:da:97:43:e8:e3:6a:48:bb:ba:
                    05:48:7c:e2:37:10:cc:41:d6:a2:44:78:ca:0d:ca:
                    02:11:9a:8e:32:6f:63:a3:a9:09:45:77:7d:21:44:
                    d9:75:be:82:6d:bf:e6:d1:34:ce:a3:0f:20:a7:ae:
                    e2:f9:97:a4:95:73:df:be:8b:00:11:a8:6c:7f:bb:
                    54:86:cf:55:31:b4:87:bf:5b:53:09:a1:3a:dd:06:
                    99:14:94:f1:8e:b0:a2:6d:96:28:57:49:5f:ff:15:
                    7d:79:ca:18:1e:11:d3:50:56:67:3e:d3:be:e7:80:
                    c6:f1:55:eb:dd:92:d7:a7:8a:d7:39:22:9c:36:a9:
                    28:36:06:88:1b:4a:38:4a:09:b8:49:90:dc:16:aa:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:7C:FE:57:0D:41:F8:5D:E5:BC:7E:E4:F7:D5:8D:BA:C7:6A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7df60e7b-4b16-397f-afa3-a5eed5771162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:6d:ec:29:69:78:c1:3b:7e:8f:0a:6d:d1:83:20:3e:8d:
         9c:1e:9c:04:12:dc:1f:68:0a:58:af:da:d3:f2:b0:30:18:4d:
         81:22:e1:6f:37:71:1e:d6:d6:01:48:71:39:0b:16:1c:b5:92:
         a0:ab:c4:c9:37:86:ae:44:30:42:b1:fe:80:9b:74:0b:f0:20:
         bf:25:72:f0:1e:a1:87:9a:d7:30:32:60:7f:44:c5:e6:83:bd:
         cd:20:a5:c8:ef:27:29:11:fe:2a:8c:59:18:5f:af:ec:1f:64:
         d2:c0:36:fa:a8:e2:f0:d8:1c:c2:f4:ef:77:a4:65:6f:76:e5:
         5c:dc:c5:1b:68:88:7b:86:4a:12:a6:3a:70:43:7a:e3:20:b8:
         0d:a7:af:8d:d4:47:c2:51:04:3e:ac:6e:dc:7f:c0:fe:4c:00:
         18:7a:aa:91:f9:bf:36:b6:19:d6:5a:9b:f1:6e:a9:31:ab:d5:
         8b:49:e1:fa:71:94:cb:78:04:57:21:40:52:b5:c9:ee:77:35:
         d6:9d:92:7d:4d:a0:00:e3:74:a0:c8:9a:4a:9a:9d:a9:a3:6c:
         5a:94:c4:54:21:09:e8:7d:d2:fa:38:c3:44:53:16:7f:7d:9a:
         92:67:96:9d:2d:3c:05:6e:76:5b:aa:65:57:fa:0f:0b:7b:6b:
         37:3e:58:45
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJphbfGYAFc56DStgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
MmYxN2U3MWQtZTI0ZC00ZTYwLTljMzQtOTg2MTE4YjQ2MThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptyA+TTZY8AhBDiUGv89TfQbnK9Xp/7D91cH
ZFLN2OkL8xNrG7imSsUAAlQgn3v2BYrKV9a0XDaG+b8ZogPZXRoDAtkAQuboM6aB
e+SbIjyuBAVrKAN0km3ts8j4+qTWgwO9s02olQO6UR8hlvbal0Po42pIu7oFSHzi
NxDMQdaiRHjKDcoCEZqOMm9jo6kJRXd9IUTZdb6Cbb/m0TTOow8gp67i+ZeklXPf
vosAEahsf7tUhs9VMbSHv1tTCaE63QaZFJTxjrCibZYoV0lf/xV9ecoYHhHTUFZn
PtO+54DG8VXr3ZLXp4rXOSKcNqkoNgaIG0o4Sgm4SZDcFqr0VwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPOifP5XDUH4XeW8fuT31Y26x2oEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RmNjBlN2ItNGIxNi0z
OTdmLWFmYTMtYTVlZWQ1NzcxMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA0623sKWl4wTt+jwpt0YMgPo2cHpwEEtwfaApYr9rT8rAwGE2BIuFv
N3Ee1tYBSHE5CxYctZKgq8TJN4auRDBCsf6Am3QL8CC/JXLwHqGHmtcwMmB/RMXm
g73NIKXI7ycpEf4qjFkYX6/sH2TSwDb6qOLw2BzC9O93pGVvduVc3MUbaIh7hkoS
pjpwQ3rjILgNp6+N1EfCUQQ+rG7cf8D+TAAYeqqR+b82thnWWpvxbqkxq9WLSeH6
cZTLeARXIUBStcnudzXWnZJ9TaAA43SgyJpKmp2po2xalMRUIQnofdL6OMNEUxZ/
fZqSZ5adLTwFbnZbqmVX+g8Le2s3PlhF
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:22 2025 by rpki-client