Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa
File:                     14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa (raw, json)
Hash identifier:          0qEnLxbYAJQivd9B37vflsznFugsqDxJCsiwRi4UU4E=
Subject key identifier:   D0:47:49:E5:C2:4F:99:85:63:DB:DB:D7:B3:D7:88:D6:7A:5D:ED:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB05CB7525C9ABEE9B25C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36622
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:05:cb:75:25:c9:ab:ee:9b:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bafa179b-1db2-4445-bc18-6388770edc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:4a:59:34:fb:7f:6e:12:eb:91:7c:bc:20:
                    f7:3a:fb:04:f1:d4:af:92:f5:6a:34:f5:d0:40:32:
                    44:c5:a6:d1:95:89:21:e7:f1:c6:0d:46:e6:d8:b2:
                    d4:10:70:04:0b:93:12:a3:55:a6:fe:62:df:a2:8b:
                    cb:7e:82:e5:d3:85:11:5f:63:84:9f:09:56:27:85:
                    62:f1:13:cb:5b:7c:29:9f:e4:24:a2:74:55:a8:ab:
                    29:dd:81:85:86:24:19:e7:fe:fd:0b:d1:2c:ac:84:
                    a3:13:ef:25:21:05:63:cb:81:22:e1:d0:d4:3b:01:
                    1e:27:af:31:38:b6:7f:95:87:65:64:23:d8:10:70:
                    37:a7:de:59:10:0a:99:8c:41:c6:55:fd:4a:45:50:
                    70:bc:55:ed:f7:49:7e:db:ac:da:5e:da:5a:71:19:
                    07:d7:59:6b:35:9b:63:a1:dc:2d:be:af:7b:21:1a:
                    3c:13:f4:87:c2:a8:fe:3c:b7:05:90:6c:8d:0a:54:
                    00:95:2b:0b:d8:0d:80:2c:10:2f:87:a2:22:fa:2e:
                    fb:2f:78:57:4d:1b:7d:4b:07:8e:97:32:1f:34:ef:
                    9e:1b:33:dd:93:83:87:a0:2f:7c:14:ea:9f:8e:30:
                    dc:1b:9b:67:2b:9a:c5:65:c9:0d:92:d8:65:0e:b5:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:49:E5:C2:4F:99:85:63:DB:DB:D7:B3:D7:88:D6:7A:5D:ED:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:54:84:b8:73:f6:a9:bc:dc:44:07:9e:6c:be:ca:2a:de:eb:
         4f:3f:c0:66:5d:d4:c5:ad:62:96:f7:f3:db:70:bc:18:c2:f5:
         c9:f6:d6:ea:d0:a8:f6:2d:aa:63:94:da:61:ee:2e:36:cc:90:
         32:6f:33:63:4c:94:d3:81:44:96:b9:5a:3f:4a:08:85:f6:6a:
         1c:1c:d2:fe:0e:c3:bf:ba:2d:82:7f:cd:22:6e:12:c5:9b:7c:
         f8:43:e4:79:b5:bd:21:2c:6b:71:65:cf:3e:9e:af:7b:be:f3:
         e3:6e:8c:82:d3:e5:1f:7e:48:e6:a7:34:84:6f:63:ab:d8:de:
         cc:f5:c2:bc:8a:df:e3:80:ec:95:5a:5c:39:a5:0c:f2:9f:6e:
         85:90:c5:cd:7a:f6:12:88:38:6a:8d:3d:5d:3c:34:ed:f0:54:
         63:3e:27:4a:72:35:8f:d0:aa:85:c6:4a:47:15:99:6e:06:ac:
         ca:d0:f6:47:a6:e9:0b:68:d1:1e:09:3e:5b:ad:6e:60:61:b9:
         32:60:7e:4c:c2:ce:18:4c:ee:8d:2a:d2:56:ce:bf:60:50:34:
         9b:63:cb:dc:d5:13:b1:bc:8c:63:82:a1:42:7d:e8:10:c5:b7:
         6f:25:9b:93:ef:8b:a1:45:95:6b:27:19:3f:78:fb:31:e3:09:
         cb:78:8d:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2wXLdSXJq+6bJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YmFmYTE3OWItMWRiMi00NDQ1LWJjMTgtNjM4ODc3MGVkYzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6pKWTT7f24S65F8vCD3OvsE8dSvkvVqNPXQ
QDJExabRlYkh5/HGDUbm2LLUEHAEC5MSo1Wm/mLfoovLfoLl04URX2OEnwlWJ4Vi
8RPLW3wpn+QkonRVqKsp3YGFhiQZ5/79C9EsrISjE+8lIQVjy4Ei4dDUOwEeJ68x
OLZ/lYdlZCPYEHA3p95ZEAqZjEHGVf1KRVBwvFXt90l+26zaXtpacRkH11lrNZtj
odwtvq97IRo8E/SHwqj+PLcFkGyNClQAlSsL2A2ALBAvh6Ii+i77L3hXTRt9SweO
lzIfNO+eGzPdk4OHoC98FOqfjjDcG5tnK5rFZckNkthlDrWRMQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNBHSeXCT5mFY9vb17PXiNZ6Xe14MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQyNTdiNDUtNGYzZi0z
ZTU4LWE2ZDgtMTIzN2Y4ZWIwOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQByVIS4c/apvNxEB55svsoq3utPP8BmXdTFrWKW9/PbcLwYwvXJ9tbq
0Kj2LapjlNph7i42zJAybzNjTJTTgUSWuVo/SgiF9mocHNL+DsO/ui2Cf80ibhLF
m3z4Q+R5tb0hLGtxZc8+nq97vvPjboyC0+UffkjmpzSEb2Or2N7M9cK8it/jgOyV
Wlw5pQzyn26FkMXNevYSiDhqjT1dPDTt8FRjPidKcjWP0KqFxkpHFZluBqzK0PZH
pukLaNEeCT5brW5gYbkyYH5Mws4YTO6NKtJWzr9gUDSbY8vc1ROxvIxjgqFCfegQ
xbdvJZuT74uhRZVrJxk/ePsx4wnLeI2c
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:41:14 2025 by rpki-client