Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa
File:                     8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa (raw, json)
Hash identifier:          EybXnLLTOyiMQDMh6k+65cnqGFeCJ8nOhOivPkix0mo=
Subject key identifier:   94:EC:9F:04:AC:C0:65:99:6E:F6:57:4B:C4:AF:E1:12:14:17:7C:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B45C3B08A150E10961A50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     397212
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:45:c3:b0:8a:15:0e:10:96:1a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=1acec76b-c581-4321-9f25-9a6dc68f0be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:0a:ee:01:55:7e:75:39:03:9a:be:09:44:
                    ee:4f:f3:74:e2:1e:6d:0f:81:0c:a3:18:ad:e9:2f:
                    33:6e:51:80:85:1c:82:49:d9:3f:cb:ec:be:c7:8a:
                    c8:e0:71:88:2b:82:12:17:e5:3a:50:1c:4f:53:33:
                    7e:5e:16:db:a3:a0:c9:fd:6e:a9:7d:e5:9b:52:65:
                    72:4d:d3:b5:e2:af:c2:73:36:72:27:69:45:77:6e:
                    e8:8e:6d:30:98:76:2c:73:09:8a:ef:57:26:a8:2a:
                    20:cf:77:9e:56:c7:47:ea:dd:80:4a:28:53:50:42:
                    e2:ab:8f:64:d3:6e:2f:78:cc:a8:16:cf:85:e9:6f:
                    a4:07:17:be:6b:4f:14:09:f4:1e:2b:53:24:2f:1b:
                    58:21:fa:7e:13:79:80:15:7a:42:00:12:24:2f:4f:
                    1f:37:ae:a3:fb:94:93:aa:b7:ef:50:3b:0c:35:fb:
                    28:e5:ef:74:87:8b:4d:99:84:51:83:74:52:19:a6:
                    8c:b0:f7:4d:d3:c7:45:84:36:e2:64:de:23:1e:82:
                    28:fe:78:97:99:ca:03:1e:e0:c5:c0:cc:0e:bf:96:
                    39:89:ab:64:77:41:26:02:85:27:8b:c3:b6:63:40:
                    86:70:e2:9b:c6:07:7c:e3:08:71:85:f9:be:55:a5:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:9F:04:AC:C0:65:99:6E:F6:57:4B:C4:AF:E1:12:14:17:7C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e5e895d-3562-31d7-ae5b-b2703f6d4709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:73:f7:96:aa:ea:e8:ac:9e:bf:fe:2d:e7:eb:24:a4:d5:fe:
         59:cc:12:56:d8:79:c1:7b:af:bd:8d:1c:1c:df:db:ad:7a:dd:
         48:7b:70:aa:02:ea:30:c2:05:06:f1:16:15:75:cb:c0:0b:89:
         47:43:ee:4f:bc:5f:cb:db:14:38:a7:7e:57:f0:62:11:38:f6:
         87:e3:b4:68:b6:88:55:78:71:7a:00:85:4f:d9:2e:a1:a2:7f:
         44:dd:da:57:be:43:61:04:20:62:e9:30:b9:f6:15:f3:2e:ef:
         6c:75:d9:1c:c2:ec:85:87:e8:89:96:69:03:20:19:f9:b2:a9:
         b8:11:86:fe:8d:12:82:1b:aa:74:fd:35:3d:d5:b0:f5:84:2a:
         70:83:9c:48:a2:b6:33:ff:25:84:e6:2d:1d:ec:cd:d5:a7:e1:
         79:52:e9:77:0d:b3:6a:6e:58:aa:44:4f:c6:f0:2a:49:37:ac:
         2d:f7:98:24:de:5c:58:27:2d:9f:ac:f5:8c:0f:d8:04:65:fd:
         9f:3a:51:fa:3b:c3:c0:6b:3b:eb:10:8c:3a:48:09:0d:88:e9:
         9d:fa:2c:c6:bf:be:de:5e:8b:dc:26:56:a8:77:26:10:a6:16:
         18:d4:c6:63:ca:59:cc:ca:a0:a3:17:82:e3:f8:e9:21:e9:c9:
         87:04:1e:b5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp2G0XDsIoVDhCWGlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
MWFjZWM3NmItYzU4MS00MzIxLTlmMjUtOWE2ZGM2OGYwYmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxsK7gFVfnU5A5q+CUTuT/N04h5tD4EMoxit
6S8zblGAhRyCSdk/y+y+x4rI4HGIK4ISF+U6UBxPUzN+Xhbbo6DJ/W6pfeWbUmVy
TdO14q/CczZyJ2lFd27ojm0wmHYscwmK71cmqCogz3eeVsdH6t2ASihTUELiq49k
024veMyoFs+F6W+kBxe+a08UCfQeK1MkLxtYIfp+E3mAFXpCABIkL08fN66j+5ST
qrfvUDsMNfso5e90h4tNmYRRg3RSGaaMsPdN08dFhDbiZN4jHoIo/niXmcoDHuDF
wMwOv5Y5iatkd0EmAoUni8O2Y0CGcOKbxgd84whxhfm+VaWxDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJTsnwSswGWZbvZXS8Sv4RIUF3zxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGU1ZTg5NWQtMzU2Mi0z
MWQ3LWFlNWItYjI3MDNmNmQ0NzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFc/eWqurorJ6//i3n6ySk1f5ZzBJW2HnBe6+9jRwc39utet1Ie3Cq
AuowwgUG8RYVdcvAC4lHQ+5PvF/L2xQ4p35X8GIROPaH47RotohVeHF6AIVP2S6h
on9E3dpXvkNhBCBi6TC59hXzLu9sddkcwuyFh+iJlmkDIBn5sqm4EYb+jRKCG6p0
/TU91bD1hCpwg5xIorYz/yWE5i0d7M3Vp+F5Uul3DbNqbliqRE/G8CpJN6wt95gk
3lxYJy2frPWMD9gEZf2fOlH6O8PAazvrEIw6SAkNiOmd+izGv77eXovcJlaodyYQ
phYY1MZjylnMyqCjF4Lj+Okh6cmHBB61
-----END CERTIFICATE-----
Generated at Fri Jul 25 11:07:54 2025 by rpki-client