Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa
File:                     efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa (raw, json)
Hash identifier:          hDH6CIlQK7znGSrmoy6TlT3IyVVkuzRpXFEmO5PEeyc=
Subject key identifier:   CC:E3:CD:39:B4:2B:47:42:77:77:DE:6F:77:3A:A5:73:2E:51:A1:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62C8DB37F2540985FFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396570
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2c:8d:b3:7f:25:40:98:5f:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=45e96005-6d0b-4f0f-8f16-e99028af701b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:b7:13:4d:28:13:c1:69:e1:2f:80:e7:ee:
                    14:d7:78:20:6a:d0:ef:88:32:e6:77:f7:47:24:bd:
                    8a:4f:94:ac:fa:c0:15:39:77:b5:3e:93:e3:10:d1:
                    08:7b:00:b0:de:89:74:12:a1:e2:17:03:7c:88:d6:
                    b3:a2:9e:bc:99:e8:89:56:71:03:67:00:15:75:d6:
                    af:24:a5:8b:45:fd:66:ff:5b:22:72:32:b4:14:f9:
                    fc:51:4d:10:b2:8d:a6:9d:4f:3c:41:e0:97:7e:98:
                    cd:91:2d:20:a3:4d:88:b5:7d:50:9a:dc:7a:3f:b8:
                    e3:dd:e1:c3:3f:bb:6a:70:aa:06:3b:8c:43:c0:ae:
                    43:4d:2e:42:87:bc:17:c1:2a:dc:28:12:0b:eb:ed:
                    d4:cb:8f:7a:ed:32:a0:a5:f0:74:a5:98:6c:a5:3e:
                    e8:d4:ef:7c:d9:04:c0:8a:94:2e:52:f6:97:75:cc:
                    e2:99:91:31:f3:69:ba:c5:69:f4:fb:45:ca:db:38:
                    33:a3:d8:f6:6b:2e:0d:60:a5:98:a8:f1:55:9e:92:
                    ac:fe:bf:59:43:76:82:61:91:f9:58:ad:aa:be:9b:
                    43:a2:e3:1b:b8:6c:1b:3a:15:5c:1a:74:88:56:10:
                    b4:ed:fd:20:45:8d:e2:1c:76:e0:78:6f:fb:f7:4c:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E3:CD:39:B4:2B:47:42:77:77:DE:6F:77:3A:A5:73:2E:51:A1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:ab:d2:49:50:c8:3c:83:9f:06:5b:b5:68:ea:7e:2e:3c:
         33:b4:dd:3b:9e:33:34:07:b5:31:8f:a0:65:b9:3e:47:dc:d3:
         82:7c:4b:f9:29:c9:06:5d:ea:37:9f:8c:ac:83:88:a1:c6:f2:
         b3:a0:95:43:ef:e7:9a:48:8f:e2:62:4a:15:06:f6:a6:5a:04:
         91:7b:97:9e:57:3c:e4:e6:1e:11:07:9f:29:5d:f4:c3:9c:7e:
         b0:cb:89:c2:9f:c8:3c:51:fc:58:d5:7c:77:c6:b7:e3:3f:ed:
         1b:eb:f1:9c:0d:fb:63:40:0b:3a:b9:31:79:45:b8:f8:27:1f:
         ad:dc:dc:84:7a:1c:16:87:ca:0a:91:7c:fb:ca:57:a6:44:45:
         67:b6:d7:8a:40:96:4b:17:ef:9c:3f:49:1c:9c:75:60:f5:d7:
         34:21:bb:ac:1a:2b:34:bb:22:4f:ff:d9:59:de:51:2f:75:6c:
         80:bb:75:36:39:e8:aa:4f:6b:f5:a1:97:46:64:96:3b:5f:93:
         d1:83:c8:fc:95:c4:4c:d3:6c:c4:f0:f7:71:d0:ce:46:48:82:
         29:b3:31:1d:d8:27:17:f3:ee:34:3b:13:53:35:68:99:7a:30:
         02:a8:0e:bd:ff:7f:b8:99:12:82:25:f5:a9:a4:0a:1c:22:09:
         c2:b0:e7:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpiyNs38lQJhf+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
NDVlOTYwMDUtNmQwYi00ZjBmLThmMTYtZTk5MDI4YWY3MDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzO3E00oE8Fp4S+A5+4U13ggatDviDLmd/dH
JL2KT5Ss+sAVOXe1PpPjENEIewCw3ol0EqHiFwN8iNazop68meiJVnEDZwAVddav
JKWLRf1m/1sicjK0FPn8UU0Qso2mnU88QeCXfpjNkS0go02ItX1Qmtx6P7jj3eHD
P7tqcKoGO4xDwK5DTS5Ch7wXwSrcKBIL6+3Uy4967TKgpfB0pZhspT7o1O982QTA
ipQuUvaXdczimZEx82m6xWn0+0XK2zgzo9j2ay4NYKWYqPFVnpKs/r9ZQ3aCYZH5
WK2qvptDouMbuGwbOhVcGnSIVhC07f0gRY3iHHbgeG/790xjXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMzjzTm0K0dCd3feb3c6pXMuUaEqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZlZDg2MzQtZjZmZC0z
YzhmLWE5YTQtYzEzMmVkYTc0MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB7TKvSSVDIPIOfBlu1aOp+LjwztN07njM0B7Uxj6BluT5H3NOCfEv5
KckGXeo3n4ysg4ihxvKzoJVD7+eaSI/iYkoVBvamWgSRe5eeVzzk5h4RB58pXfTD
nH6wy4nCn8g8UfxY1Xx3xrfjP+0b6/GcDftjQAs6uTF5Rbj4Jx+t3NyEehwWh8oK
kXz7ylemREVntteKQJZLF++cP0kcnHVg9dc0IbusGis0uyJP/9lZ3lEvdWyAu3U2
OeiqT2v1oZdGZJY7X5PRg8j8lcRM02zE8Pdx0M5GSIIpszEd2CcX8+40OxNTNWiZ
ejACqA69/3+4mRKCJfWppAocIgnCsOem
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:52 2025 by rpki-client