Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa
File:                     b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa (raw, json)
Hash identifier:          wTR5jXIjZXwYUFnVy4B+qaGG2DvITbyUxSWDVfoC7Y0=
Subject key identifier:   26:44:1E:0D:19:AF:81:56:61:1C:96:ED:C2:BE:20:EF:9E:B0:BB:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B6CD1B55CB8CE9079940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396566
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b6:cd:1b:55:cb:8c:e9:07:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=15fa3254-a54a-4b9d-b83d-1bb94d9582fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:d4:02:7f:a5:dc:03:69:ff:87:67:3c:3d:
                    85:9c:32:fd:b5:5d:90:83:5a:63:6b:ee:4d:be:1c:
                    93:54:d3:87:db:50:9c:14:1f:75:ce:e6:86:2b:4e:
                    aa:f6:c7:01:3f:2b:58:7a:02:75:4d:5c:29:98:20:
                    a8:e3:a5:69:37:4c:11:6e:36:52:9a:80:23:d1:6a:
                    0e:f9:bc:03:6e:62:dd:ca:e1:f1:72:73:c7:6c:1e:
                    e3:87:37:e6:91:13:2c:bb:f1:38:44:fa:7c:5d:36:
                    6b:1f:21:fd:c4:22:78:f8:d4:55:54:1f:2d:8f:49:
                    f5:a5:93:e7:1a:2c:a1:4e:c5:6e:41:39:ad:8f:be:
                    53:9f:3c:d0:1b:fe:9b:a4:63:ce:f4:9c:69:92:76:
                    af:c3:1e:82:cb:61:39:65:e8:fc:55:cd:ef:d4:16:
                    7e:b2:05:dd:17:e0:66:c0:41:8b:84:ae:c7:8b:7c:
                    13:1b:ec:f7:e9:e1:eb:c7:31:6f:35:f2:43:df:59:
                    53:49:4a:e8:fa:96:98:04:af:ee:75:c0:47:38:e3:
                    a5:4d:0e:3e:e8:ce:ea:69:f0:0c:bb:04:ea:8e:35:
                    8b:01:97:91:8d:be:26:e8:2f:20:54:fb:33:8d:62:
                    c2:94:e7:86:6d:68:2f:d2:bf:6f:5b:56:bb:19:1a:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:44:1E:0D:19:AF:81:56:61:1C:96:ED:C2:BE:20:EF:9E:B0:BB:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:fa:40:de:35:ab:1f:f0:41:79:6e:0f:ce:0a:ed:3d:a7:
         03:20:26:33:47:aa:9d:3b:69:46:11:e3:43:cc:4d:5a:60:3e:
         43:7e:f0:01:ad:c1:c9:08:6a:59:d0:83:c6:45:58:44:7f:41:
         cc:64:ef:3e:13:fd:94:81:b5:4c:0a:2a:07:d0:8c:11:73:f2:
         dc:60:99:5a:fc:26:17:5f:64:80:bc:61:cd:99:07:7a:05:2c:
         e7:01:f1:cd:3d:35:84:7e:fb:56:77:b1:00:9d:69:ff:07:80:
         cd:46:88:bc:1b:a1:16:96:af:a5:fe:f9:50:62:19:e1:96:a7:
         bf:83:83:0f:fb:c6:c3:14:5f:6a:c7:6e:77:f8:f8:e6:73:b2:
         69:c8:20:03:7b:28:98:8f:8e:2a:b1:5a:70:bf:fc:e5:e6:7d:
         7b:13:05:c5:bd:5d:bb:7b:cf:58:9a:e0:ea:bb:81:8b:ef:a2:
         1a:13:20:ab:9d:47:20:03:b0:20:db:ad:22:33:24:85:53:14:
         1f:ae:71:cc:51:72:f1:ca:f8:e5:e9:82:23:44:db:d0:20:56:
         8f:b5:28:9d:3f:90:d5:91:a4:3f:b3:73:92:a6:5b:0e:3b:42:
         2b:2a:83:0b:48:22:05:2f:1d:94:c4:2c:27:b1:96:9b:11:99:
         e7:38:58:87
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzULbNG1XLjOkHmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
MTVmYTMyNTQtYTU0YS00YjlkLWI4M2QtMWJiOTRkOTU4MmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskjUAn+l3ANp/4dnPD2FnDL9tV2Qg1pja+5N
vhyTVNOH21CcFB91zuaGK06q9scBPytYegJ1TVwpmCCo46VpN0wRbjZSmoAj0WoO
+bwDbmLdyuHxcnPHbB7jhzfmkRMsu/E4RPp8XTZrHyH9xCJ4+NRVVB8tj0n1pZPn
GiyhTsVuQTmtj75TnzzQG/6bpGPO9Jxpknavwx6Cy2E5Zej8Vc3v1BZ+sgXdF+Bm
wEGLhK7Hi3wTG+z36eHrxzFvNfJD31lTSUro+paYBK/udcBHOOOlTQ4+6M7qafAM
uwTqjjWLAZeRjb4m6C8gVPszjWLClOeGbWgv0r9vW1a7GRoAWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCZEHg0Zr4FWYRyW7cK+IO+esLumMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRiOThmZmQtOTMzMi0z
NzRhLTgyYWEtNGI2ODg3OWZkNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUGvpA3jWrH/BBeW4PzgrtPacDICYzR6qdO2lGEeNDzE1aYD5DfvAB
rcHJCGpZ0IPGRVhEf0HMZO8+E/2UgbVMCioH0IwRc/LcYJla/CYXX2SAvGHNmQd6
BSznAfHNPTWEfvtWd7EAnWn/B4DNRoi8G6EWlq+l/vlQYhnhlqe/g4MP+8bDFF9q
x253+Pjmc7JpyCADeyiYj44qsVpwv/zl5n17EwXFvV27e89YmuDqu4GL76IaEyCr
nUcgA7Ag260iMySFUxQfrnHMUXLxyvjl6YIjRNvQIFaPtSidP5DVkaQ/s3OSplsO
O0IrKoMLSCIFLx2UxCwnsZabEZnnOFiH
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:42:44 2025 by rpki-client