Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b14c4c0-90ca-340a-8ab1-cc9d772a864f.roa
File:                     8b14c4c0-90ca-340a-8ab1-cc9d772a864f.roa (raw, json)
Hash identifier:          VB2Fef4y2awlmFxtLExeMq+yFwqHt15D0jL6Nx2pK3Y=
Subject key identifier:   1A:20:CF:DA:A2:EB:1B:34:EC:02:3B:7B:50:B2:20:67:CC:35:4C:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A66C0802D630457D49B5DD7A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b14c4c0-90ca-340a-8ab1-cc9d772a864f.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     22547
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:80:2d:63:04:57:d4:9b:5d:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=ce1fde1d-0f6d-497d-aded-df589bb84584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:22:6b:79:0b:0f:5a:10:26:ab:28:a6:95:
                    41:3a:2c:ca:67:24:a4:af:86:c8:e8:a8:78:0d:30:
                    15:c5:d0:17:f0:a5:c6:87:b0:d3:2e:a4:cf:82:93:
                    cd:02:00:9f:31:1b:96:ac:29:ff:b3:9b:db:9d:b0:
                    4f:d3:08:62:a8:60:30:7a:35:8e:0f:ca:37:70:97:
                    f0:de:27:30:31:53:23:c8:84:ec:3d:43:a8:48:ba:
                    3d:54:be:f9:13:e6:e8:46:22:ff:28:0c:ea:97:e4:
                    67:28:16:16:95:43:52:de:62:13:1b:71:11:9d:ca:
                    00:c7:a3:f7:16:56:2e:eb:49:c1:d0:ab:38:6f:95:
                    4a:36:26:de:98:d2:40:92:9e:96:9f:a1:93:42:cf:
                    6f:64:ad:f0:7e:a4:23:75:9b:06:32:84:24:6e:bd:
                    51:58:97:df:c6:65:ae:7a:b0:1c:56:42:d4:ea:ab:
                    a5:86:d7:5e:ea:bc:ab:84:2a:24:44:58:b5:ab:80:
                    70:41:02:dc:50:ba:a3:b3:b2:2e:04:78:e6:a6:10:
                    af:6b:4e:f1:6d:8e:4a:1d:51:f6:97:fe:7e:8e:aa:
                    85:56:94:67:50:30:21:3b:58:6e:22:04:ee:9c:37:
                    5e:b7:b0:3d:a5:99:d3:bb:da:67:dd:e8:38:a4:eb:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:CF:DA:A2:EB:1B:34:EC:02:3B:7B:50:B2:20:67:CC:35:4C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b14c4c0-90ca-340a-8ab1-cc9d772a864f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:d6:23:8e:d5:c1:0a:89:50:79:34:10:b6:34:1a:f4:fc:
         6e:ac:dc:0b:8b:3a:0e:87:c5:02:05:a3:1c:98:66:69:21:a7:
         cc:d1:4a:bd:90:a4:47:26:b1:34:ab:9c:ec:3f:de:3f:42:1d:
         9d:b0:36:b8:96:9e:41:52:7b:98:22:72:9c:2d:8e:72:63:8a:
         df:26:e1:4e:7a:60:23:e4:33:99:f9:b7:dd:a4:26:2b:2c:70:
         c5:bc:76:75:62:9b:d7:4e:53:fa:8b:b9:6e:1a:3b:2b:7a:6d:
         ab:9d:f1:c7:b0:22:24:40:a0:d3:12:57:4a:10:80:19:eb:0e:
         d0:04:20:b9:0e:0b:71:f2:c0:06:08:b8:e0:ca:ae:e3:e7:be:
         a3:e3:a4:ac:93:cc:33:a1:24:47:6f:f5:d9:bc:e8:ef:ca:7b:
         ea:12:49:a3:bb:d6:de:94:ae:11:90:a1:07:59:08:0b:c7:12:
         9b:28:6a:f7:02:6b:04:ea:31:03:18:8c:70:89:8a:56:f7:98:
         40:6c:0c:a8:2f:4b:c5:04:1f:1f:be:10:e0:e1:34:8e:76:d1:
         68:c9:a7:f9:82:17:f8:ef:74:39:f3:25:17:43:42:4d:29:68:
         21:de:c7:32:2e:0a:12:94:4f:05:ff:fe:1b:39:cb:86:30:d4:
         39:95:61:25
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpmwIAtYwRX1Jtd16AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
Y2UxZmRlMWQtMGY2ZC00OTdkLWFkZWQtZGY1ODliYjg0NTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswwia3kLD1oQJqsoppVBOizKZySkr4bI6Kh4
DTAVxdAX8KXGh7DTLqTPgpPNAgCfMRuWrCn/s5vbnbBP0whiqGAwejWOD8o3cJfw
3icwMVMjyITsPUOoSLo9VL75E+boRiL/KAzql+RnKBYWlUNS3mITG3ERncoAx6P3
FlYu60nB0Ks4b5VKNibemNJAkp6Wn6GTQs9vZK3wfqQjdZsGMoQkbr1RWJffxmWu
erAcVkLU6qulhtde6ryrhCokRFi1q4BwQQLcULqjs7IuBHjmphCva07xbY5KHVH2
l/5+jqqFVpRnUDAhO1huIgTunDdet7A9pZnTu9pn3eg4pOsXiwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBogz9qi6xs07AI7e1CyIGfMNUyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGIxNGM0YzAtOTBjYS0z
NDBhLThhYjEtY2M5ZDc3MmE4NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6/dYjjtXBColQeTQQtjQa9PxurNwLizoOh8UCBaMcmGZpIafM0Uq9
kKRHJrE0q5zsP94/Qh2dsDa4lp5BUnuYInKcLY5yY4rfJuFOemAj5DOZ+bfdpCYr
LHDFvHZ1YpvXTlP6i7luGjsrem2rnfHHsCIkQKDTEldKEIAZ6w7QBCC5Dgtx8sAG
CLjgyq7j576j46Ssk8wzoSRHb/XZvOjvynvqEkmju9belK4RkKEHWQgLxxKbKGr3
AmsE6jEDGIxwiYpW95hAbAyoL0vFBB8fvhDg4TSOdtFoyaf5ghf473Q58yUXQ0JN
KWgh3scyLgoSlE8F//4bOcuGMNQ5lWEl
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:27 2025 by rpki-client