Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9117a74-47eb-343a-a9d6-b4da6bf8cd84.roa
File:                     c9117a74-47eb-343a-a9d6-b4da6bf8cd84.roa (raw, json)
Hash identifier:          MrulivnRqYwPRe3pmaK3oKIMm85sFTtPzA6OB+jiIa8=
Subject key identifier:   5A:1B:F4:2D:F8:09:BF:E3:7B:E3:E3:5D:2E:7B:12:89:4E:1F:11:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62AC6E21904DB06FAC780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9117a74-47eb-343a-a9d6-b4da6bf8cd84.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396613
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2a:c6:e2:19:04:db:06:fa:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=3a3889d0-a9a3-4754-82d6-8a76a61bddc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:05:47:6d:d6:49:9b:b5:47:bc:21:a5:fa:
                    f1:c4:49:ac:47:f5:68:71:03:7d:75:fe:68:03:57:
                    dc:c5:12:d0:d1:6f:93:09:62:7a:4c:fe:8d:65:f9:
                    82:56:75:09:ac:a0:43:1f:4a:d0:de:89:64:31:b6:
                    f3:47:4e:a7:d2:61:c7:3d:61:6a:90:76:6e:03:c6:
                    62:24:a5:8a:8f:9f:6a:b8:de:fb:c6:ed:5e:ae:b9:
                    62:83:5c:b6:f6:f0:e9:c2:b3:5d:82:b7:c1:b3:17:
                    2f:e6:3c:cf:23:85:de:9a:38:68:d4:7f:5f:29:c2:
                    db:c5:2a:bd:bb:92:d9:ce:0c:bd:55:ad:7b:bc:88:
                    d4:a6:c1:02:73:3f:b3:6b:6d:47:6d:2b:34:c1:78:
                    d7:27:64:14:9c:67:2a:5a:c9:20:a3:b0:d9:83:f6:
                    7e:a4:68:7a:4e:80:5d:59:2d:e6:66:e8:0e:ab:bc:
                    63:8b:f4:a5:2a:1e:d8:3b:ab:bb:6e:5c:81:11:20:
                    f1:56:1e:62:6a:b3:04:3b:3d:f6:d5:99:69:67:e4:
                    a4:ef:98:4a:36:cb:c8:61:1f:14:c7:30:b5:b5:fa:
                    91:aa:ab:30:d9:4a:a6:81:7b:36:b2:ec:f1:b4:a0:
                    18:69:bf:b5:6c:7a:9e:16:2c:38:ab:0e:0f:42:df:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:F4:2D:F8:09:BF:E3:7B:E3:E3:5D:2E:7B:12:89:4E:1F:11:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9117a74-47eb-343a-a9d6-b4da6bf8cd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:94:b0:a8:5a:77:a5:39:be:fa:29:70:ba:7a:69:f6:4d:
         fd:8d:35:00:84:bb:a5:6d:fd:81:fd:e1:89:f8:c1:c9:d9:cf:
         99:a6:73:21:6b:3a:69:2b:54:03:d1:49:8f:b6:0f:f9:a2:29:
         3c:1a:44:2b:ce:68:26:eb:cd:87:35:b9:02:f3:b6:86:5e:7d:
         2f:2d:c1:22:bd:11:d3:b4:0f:ba:33:6c:f1:97:c7:c2:9b:87:
         39:f1:e5:54:fb:c6:c5:88:1c:c9:63:e3:1f:b3:cf:33:6b:cf:
         fb:63:0f:f0:9a:ff:b3:1a:2e:42:76:1a:3f:5b:a1:5a:c1:a7:
         e7:be:05:e6:27:bb:35:ca:7e:a4:9a:c5:e2:fc:7b:95:68:c8:
         59:ba:90:42:1e:6f:4c:85:f1:ad:be:75:65:21:45:d4:1a:28:
         1f:e5:06:dd:43:99:f7:5d:92:2f:2e:c2:3d:8f:31:b9:f8:da:
         27:e9:a9:75:6d:b7:bb:0c:78:15:45:9e:e4:53:1c:d1:cc:dc:
         cc:6a:c7:36:28:4c:10:84:09:b7:f6:3b:f1:48:42:ba:18:5d:
         75:34:52:ee:95:85:5b:36:d7:46:d0:e6:f8:96:6c:88:40:a6:
         14:7f:98:ef:12:34:cd:70:6c:74:0f:af:49:51:2e:c2:e6:04:
         af:83:c9:27
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpirG4hkE2wb6x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
M2EzODg5ZDAtYTlhMy00NzU0LTgyZDYtOGE3NmE2MWJkZGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFQFR23WSZu1R7whpfrxxEmsR/VocQN9df5o
A1fcxRLQ0W+TCWJ6TP6NZfmCVnUJrKBDH0rQ3olkMbbzR06n0mHHPWFqkHZuA8Zi
JKWKj59quN77xu1errlig1y29vDpwrNdgrfBsxcv5jzPI4Xemjho1H9fKcLbxSq9
u5LZzgy9Va17vIjUpsECcz+za21HbSs0wXjXJ2QUnGcqWskgo7DZg/Z+pGh6ToBd
WS3mZugOq7xji/SlKh7YO6u7blyBESDxVh5iarMEOz321ZlpZ+Sk75hKNsvIYR8U
xzC1tfqRqqsw2UqmgXs2suzxtKAYab+1bHqeFiw4qw4PQt8f0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFob9C34Cb/je+PjXS57EolOHxFzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzkxMTdhNzQtNDdlYi0z
NDNhLWE5ZDYtYjRkYTZiZjhjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCq55SwqFp3pTm++ilwunpp9k39jTUAhLulbf2B/eGJ+MHJ2c+ZpnMh
azppK1QD0UmPtg/5oik8GkQrzmgm682HNbkC87aGXn0vLcEivRHTtA+6M2zxl8fC
m4c58eVU+8bFiBzJY+Mfs88za8/7Yw/wmv+zGi5Cdho/W6FawafnvgXmJ7s1yn6k
msXi/HuVaMhZupBCHm9MhfGtvnVlIUXUGigf5QbdQ5n3XZIvLsI9jzG5+Non6al1
bbe7DHgVRZ7kUxzRzNzMasc2KEwQhAm39jvxSEK6GF11NFLulYVbNtdG0Ob4lmyI
QKYUf5jvEjTNcGx0D69JUS7C5gSvg8kn
-----END CERTIFICATE-----
Generated at Fri Jul 25 10:59:28 2025 by rpki-client