Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa
File:                     325418b4-a8bd-3522-a6b9-3974b428ea0a.roa (raw, json)
Hash identifier:          hf7YGItxLVVwhnWhi4BPQnRD7I6eRIq00e09bkxKwjk=
Subject key identifier:   45:A8:65:98:68:7D:D3:E3:90:CD:D1:CE:DE:1D:D9:7A:9B:9B:14:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0746D259054D75E923087140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     396590
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d2:59:05:4d:75:e9:23:08:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=f42d34aa-7131-46b1-a1ea-cf07f280fe45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:bd:e8:c8:89:31:5f:23:5e:3e:a2:1d:fb:
                    c0:d4:6b:fa:b3:77:37:1e:4c:75:eb:1f:72:b1:4a:
                    d0:c6:f5:ca:d7:f1:49:0b:ca:e5:64:22:cf:39:db:
                    3c:cd:34:5c:16:45:d2:bc:9b:2f:07:9e:48:7b:6c:
                    be:aa:70:25:18:df:7d:b9:5f:3e:8d:aa:7f:a0:45:
                    a4:d2:f8:af:76:d7:d8:91:36:d0:ab:34:00:6b:43:
                    af:b7:c4:41:26:4b:ad:b9:b2:61:4c:11:15:d4:0f:
                    70:49:43:8f:15:76:30:ed:bc:39:42:e2:fa:92:96:
                    c8:ae:6a:34:0a:14:70:87:41:20:7b:66:c3:0c:16:
                    d0:ba:75:9a:4c:11:47:0a:4a:a6:f0:82:50:6e:28:
                    de:cb:83:f5:af:41:9f:73:76:89:7f:cb:1b:4a:44:
                    9e:ea:0d:69:ef:e7:c4:5a:3d:aa:56:3f:e0:ee:82:
                    2b:dd:8b:1a:86:d2:66:e2:90:b3:80:4c:5d:00:e7:
                    e7:f4:0b:60:4a:bf:1c:f6:66:cb:ad:e3:87:90:c9:
                    fe:e9:75:59:cc:09:08:4f:c9:3e:be:35:2d:ce:a3:
                    9a:77:24:ac:5e:db:a9:0d:5f:a1:4b:7c:b3:f0:c9:
                    ad:55:f8:67:f9:f3:26:a2:ac:67:aa:1f:b9:fa:3f:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:65:98:68:7D:D3:E3:90:CD:D1:CE:DE:1D:D9:7A:9B:9B:14:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:98:51:6f:60:52:c7:0c:7a:a9:43:24:05:22:e0:79:55:d1:
         00:93:82:4c:ee:6b:06:f2:b6:ad:52:fc:18:24:ce:3f:d4:6a:
         9c:6e:69:99:e5:67:01:98:e5:af:b6:5a:c9:11:a2:16:66:29:
         79:08:e4:50:78:7f:a4:11:15:33:38:77:65:24:93:84:69:33:
         bf:3f:ca:11:0e:c5:1f:46:0d:87:e5:71:1f:0b:75:d2:1f:a7:
         6c:f2:bd:dd:51:66:79:3f:b6:c7:cb:a7:73:06:10:57:3b:ba:
         85:81:8c:16:34:49:81:69:c8:ea:fe:3f:08:bb:4b:8d:45:2e:
         5c:bc:97:65:4b:2e:b2:51:64:75:04:c3:7d:44:cd:df:ac:61:
         03:02:7d:b4:0b:ee:2e:de:62:09:e8:59:95:32:ea:e9:cb:c7:
         45:35:df:35:fb:a9:e1:b1:91:58:bb:11:b1:b5:e0:df:fd:ea:
         bc:08:2b:4e:18:4e:17:f2:c2:7a:dc:3e:fc:45:af:d5:19:59:
         59:27:3c:d0:ec:9f:e7:8e:2f:b7:52:12:2e:c3:eb:4e:ca:89:
         c8:ee:80:cf:51:6d:4f:2b:39:82:9b:af:74:1f:7b:ca:79:f6:
         a8:71:68:42:a2:30:ef:09:0b:85:9e:9a:da:25:50:d9:6b:d4:
         8f:d3:48:cd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsHRtJZBU116SMIcUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
ZjQyZDM0YWEtNzEzMS00NmIxLWExZWEtY2YwN2YyODBmZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoG96MiJMV8jXj6iHfvA1Gv6s3c3Hkx16x9y
sUrQxvXK1/FJC8rlZCLPOds8zTRcFkXSvJsvB55Ie2y+qnAlGN99uV8+jap/oEWk
0vivdtfYkTbQqzQAa0Ovt8RBJkutubJhTBEV1A9wSUOPFXYw7bw5QuL6kpbIrmo0
ChRwh0Ege2bDDBbQunWaTBFHCkqm8IJQbijey4P1r0Gfc3aJf8sbSkSe6g1p7+fE
Wj2qVj/g7oIr3YsahtJm4pCzgExdAOfn9AtgSr8c9mbLreOHkMn+6XVZzAkIT8k+
vjUtzqOadySsXtupDV+hS3yz8MmtVfhn+fMmoqxnqh+5+j+BSQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEWoZZhofdPjkM3Rzt4d2XqbmxTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI1NDE4YjQtYThiZC0z
NTIyLWE2YjktMzk3NGI0MjhlYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCDmFFvYFLHDHqpQyQFIuB5VdEAk4JM7msG8ratUvwYJM4/1GqcbmmZ
5WcBmOWvtlrJEaIWZil5CORQeH+kERUzOHdlJJOEaTO/P8oRDsUfRg2H5XEfC3XS
H6ds8r3dUWZ5P7bHy6dzBhBXO7qFgYwWNEmBacjq/j8Iu0uNRS5cvJdlSy6yUWR1
BMN9RM3frGEDAn20C+4u3mIJ6FmVMurpy8dFNd81+6nhsZFYuxGxteDf/eq8CCtO
GE4X8sJ63D78Ra/VGVlZJzzQ7J/nji+3UhIuw+tOyonI7oDPUW1PKzmCm690H3vK
efaocWhCojDvCQuFnpraJVDZa9SP00jN
-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:15 2025 by rpki-client