Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0243720a-23a3-36aa-b6bc-6e87a3e927dd.roa
File:                     0243720a-23a3-36aa-b6bc-6e87a3e927dd.roa (raw, json)
Hash identifier:          +AKHuZyeTVzFzgI2VK0rxQGlHhbpIBJvTnv2PH7P8fI=
Subject key identifier:   E3:63:F9:03:9B:6A:2E:38:B2:49:E9:A4:31:F9:4B:D1:60:D2:0C:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D0D62AC147E1866906B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0243720a-23a3-36aa-b6bc-6e87a3e927dd.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     397197
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d0:d6:2a:c1:47:e1:86:69:06:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=81cebbbc-af11-4b46-b09e-a9ce7bbe2bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:0a:bc:df:fd:3b:e0:bd:3d:cf:91:d1:19:
                    15:cc:89:6e:20:62:23:fa:5d:af:b4:39:80:5a:50:
                    66:56:33:cf:5e:78:c4:a5:67:cc:9c:4c:4b:cf:8a:
                    e4:34:9a:a6:80:ee:c5:5f:bf:7d:2d:07:fa:74:18:
                    43:25:11:4c:af:4c:fc:04:66:15:38:60:28:8a:a0:
                    52:0a:dd:a9:a4:c5:96:4b:07:5c:5f:e4:a7:c8:2d:
                    b3:cf:10:5e:e8:06:0d:63:a9:c1:43:51:e0:f5:f4:
                    1c:c0:47:cd:81:b7:35:78:96:9b:62:bf:6d:11:5c:
                    97:50:a6:b7:97:a5:42:13:a3:dd:88:52:ce:5a:6a:
                    57:c4:4a:75:be:61:41:a7:ea:44:01:a7:6e:23:2c:
                    95:4a:7d:aa:80:df:f9:c4:71:26:53:08:d4:df:23:
                    f9:a2:fa:bc:2d:e1:e4:df:60:80:2e:4f:36:fa:75:
                    ac:ee:3a:8d:98:42:7e:32:6e:35:e9:91:d5:88:77:
                    4b:c7:35:cb:16:bf:de:45:d7:14:d6:7c:dc:f6:af:
                    6f:64:66:6d:ce:a3:fa:96:79:e8:38:3f:0a:68:25:
                    ec:c2:c3:04:d0:12:b7:a5:cd:7c:5a:94:e7:e7:3d:
                    ac:dd:c2:ee:f2:7c:ca:5d:b6:80:86:ec:12:98:c0:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:F9:03:9B:6A:2E:38:B2:49:E9:A4:31:F9:4B:D1:60:D2:0C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0243720a-23a3-36aa-b6bc-6e87a3e927dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:59:5e:90:55:ce:0d:a2:45:6e:30:94:1f:b2:77:d6:fb:
         c1:61:7f:35:ca:96:5a:b6:4b:2a:33:40:d9:c3:25:0f:72:5c:
         0e:c5:a4:43:75:64:ca:74:85:a3:a2:b0:68:d3:ea:69:15:64:
         58:f2:62:73:60:47:79:74:53:a0:f8:be:2e:da:f7:6f:f0:5f:
         4f:11:b9:55:b5:47:c4:01:cd:e0:4a:6a:06:aa:a4:27:b7:13:
         ff:bc:62:78:68:3a:8c:72:fd:29:74:aa:bb:91:06:19:ba:91:
         70:25:30:a9:5a:1e:70:03:85:5a:41:96:b2:4a:f5:b0:83:90:
         74:2e:f2:91:6a:82:e8:20:08:11:47:fa:57:a5:2f:db:14:dc:
         11:f1:6e:9d:9b:48:6b:9b:a9:e2:01:0d:e8:c3:33:88:61:d9:
         85:db:17:49:04:82:b9:1a:b3:5c:94:a7:56:3b:1f:09:65:d3:
         24:03:0a:88:fe:8d:b7:72:97:ba:78:c1:c4:f7:94:c9:3f:8e:
         be:96:3e:ec:ad:1f:73:0c:d9:b2:ab:24:65:fe:78:f8:bf:51:
         fd:01:53:a3:51:3d:3e:3f:c0:18:f9:16:e7:09:7c:d2:7d:1b:
         31:41:85:c6:92:5f:3b:6f:fe:7f:29:a1:d0:e9:23:e9:c0:3e:
         77:31:a7:b4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tDWKsFH4YZpBrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
ODFjZWJiYmMtYWYxMS00YjQ2LWIwOWUtYTljZTdiYmUyYmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoIKvN/9O+C9Pc+R0RkVzIluIGIj+l2vtDmA
WlBmVjPPXnjEpWfMnExLz4rkNJqmgO7FX799LQf6dBhDJRFMr0z8BGYVOGAoiqBS
Ct2ppMWWSwdcX+SnyC2zzxBe6AYNY6nBQ1Hg9fQcwEfNgbc1eJabYr9tEVyXUKa3
l6VCE6PdiFLOWmpXxEp1vmFBp+pEAaduIyyVSn2qgN/5xHEmUwjU3yP5ovq8LeHk
32CALk82+nWs7jqNmEJ+Mm416ZHViHdLxzXLFr/eRdcU1nzc9q9vZGZtzqP6lnno
OD8KaCXswsME0BK3pc18WpTn5z2s3cLu8nzKXbaAhuwSmMCoEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFONj+QObai44sknppDH5S9Fg0gxHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDI0MzcyMGEtMjNhMy0z
NmFhLWI2YmMtNmU4N2EzZTkyN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCN31lekFXODaJFbjCUH7J31vvBYX81ypZatksqM0DZwyUPclwOxaRD
dWTKdIWjorBo0+ppFWRY8mJzYEd5dFOg+L4u2vdv8F9PEblVtUfEAc3gSmoGqqQn
txP/vGJ4aDqMcv0pdKq7kQYZupFwJTCpWh5wA4VaQZaySvWwg5B0LvKRaoLoIAgR
R/pXpS/bFNwR8W6dm0hrm6niAQ3owzOIYdmF2xdJBIK5GrNclKdWOx8JZdMkAwqI
/o23cpe6eMHE95TJP46+lj7srR9zDNmyqyRl/nj4v1H9AVOjUT0+P8AY+RbnCXzS
fRsxQYXGkl87b/5/KaHQ6SPpwD53Mae0
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:45:08 2025 by rpki-client