Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa
File:                     36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa (raw, json)
Hash identifier:          Ng7UGJ9oQCaEytwuTbNSKCUZYjjaOiEi3HNiMotcIOw=
Subject key identifier:   3B:67:BB:62:54:B8:F9:75:8E:28:8C:62:5B:9D:9A:A7:7D:8F:6D:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844491EBD5A3B18C5EF480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa
Signing time:             Thu 30 Jan 2025 13:46:19 +0000
ROA not before:           Thu 30 Jan 2025 13:46:19 +0000
ROA not after:            Wed 30 Apr 2025 12:46:19 +0000
asID:                     396547
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:44:91:eb:d5:a3:b1:8c:5e:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:19 2025 GMT
            Not After : Apr 30 12:46:19 2025 GMT
        Subject: CN=e3140bd3-2d3f-4cf6-b441-26893c9eeb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:09:a2:6b:17:1e:08:6e:00:4f:c5:6a:36:
                    e7:65:3f:92:f7:55:2e:0d:97:ef:08:70:a9:00:01:
                    9e:27:4a:9a:a4:92:4e:cb:92:bb:0b:5a:62:78:2e:
                    64:67:2b:1b:bd:85:50:e7:66:87:1e:5f:81:35:07:
                    8b:73:e5:9e:b5:d9:89:62:02:88:8f:de:fe:4e:94:
                    26:ab:7d:34:3f:db:c9:04:ca:8b:3d:4f:c2:e3:d2:
                    65:86:54:cd:9b:42:c1:26:b9:f5:c1:a0:e9:37:64:
                    a0:d6:69:14:1e:dc:d0:3e:ad:a4:e8:b3:23:59:1c:
                    b4:69:2b:40:fb:3c:cf:81:30:d7:a1:e0:aa:e3:9f:
                    e4:ed:fc:7b:07:62:bc:f4:69:27:eb:6d:7b:70:42:
                    75:e6:7c:f0:93:d6:5b:b8:8b:85:22:7c:a3:38:be:
                    01:43:dc:a9:00:0a:f3:dc:96:54:be:e1:24:bf:81:
                    20:45:16:31:4a:73:e1:32:5d:67:20:77:8a:34:fb:
                    97:bf:01:3f:82:a2:58:8f:eb:52:95:fb:e6:1a:06:
                    e6:a3:df:df:c4:15:51:0d:fb:30:e3:42:5d:ff:75:
                    ae:2a:6c:5d:a6:fa:4f:bb:ec:bc:0a:e9:0e:1b:ad:
                    23:b3:d1:ed:3f:f8:dc:6f:b2:db:dc:32:53:06:cf:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:BB:62:54:B8:F9:75:8E:28:8C:62:5B:9D:9A:A7:7D:8F:6D:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:9c:fe:23:0f:c4:a3:25:72:b1:9b:e3:d2:e5:b4:44:3f:a1:
         90:32:05:f6:9a:0c:ed:5e:eb:6c:cf:f2:bd:0d:0f:92:8a:c4:
         3c:33:12:de:3f:e1:4c:14:35:07:84:b6:23:ef:1a:af:52:dd:
         de:b5:69:13:2f:1e:6a:da:87:2f:1d:50:b8:5a:15:84:f2:75:
         94:56:9f:df:b1:70:68:89:33:23:e6:18:0e:9b:00:b1:1d:23:
         4e:c8:dc:26:6a:0b:ac:e6:ef:aa:ba:b6:43:5d:01:f0:62:f4:
         fc:14:5a:45:ee:de:20:12:f7:d2:60:c0:99:9c:67:c8:c0:72:
         1c:8a:bf:16:6e:d3:de:f1:6e:ac:3b:0c:b5:b2:4c:91:5f:0b:
         e7:eb:80:75:52:48:5f:2f:0d:39:48:b0:8f:53:bd:ca:0c:79:
         2f:a1:aa:13:b1:3e:4a:d5:31:b8:63:8b:de:d2:4d:4e:52:ce:
         9b:53:f2:19:bf:c1:73:e8:ec:a1:79:d1:94:07:15:2a:f0:b9:
         18:5b:de:e6:3e:25:a5:60:44:24:69:8c:81:cf:7b:24:cc:b4:
         5f:7c:ef:3a:60:49:87:e4:c1:01:6b:e8:66:25:d1:24:0f:af:
         11:e4:bd:15:ee:7c:74:60:55:af:5f:f4:3f:bf:67:0a:88:cc:
         ef:c3:0b:a2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hESR69WjsYxe9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxOVoXDTI1MDQzMDEyNDYxOVowLzEtMCsGA1UEAxMk
ZTMxNDBiZDMtMmQzZi00Y2Y2LWI0NDEtMjY4OTNjOWVlYjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+UJomsXHghuAE/FajbnZT+S91UuDZfvCHCp
AAGeJ0qapJJOy5K7C1pieC5kZysbvYVQ52aHHl+BNQeLc+WetdmJYgKIj97+TpQm
q300P9vJBMqLPU/C49JlhlTNm0LBJrn1waDpN2Sg1mkUHtzQPq2k6LMjWRy0aStA
+zzPgTDXoeCq45/k7fx7B2K89Gkn6217cEJ15nzwk9ZbuIuFInyjOL4BQ9ypAArz
3JZUvuEkv4EgRRYxSnPhMl1nIHeKNPuXvwE/gqJYj+tSlfvmGgbmo9/fxBVRDfsw
40Jd/3WuKmxdpvpPu+y8CukOG60js9HtP/jcb7Lb3DJTBs/ZwwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDtnu2JUuPl1jiiMYludmqd9j23zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzZkZDM0M2EtNTJmMS0z
MWQyLTgxOTctMDVlNmIyZTQ0ZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCvnP4jD8SjJXKxm+PS5bREP6GQMgX2mgztXutsz/K9DQ+SisQ8MxLe
P+FMFDUHhLYj7xqvUt3etWkTLx5q2ocvHVC4WhWE8nWUVp/fsXBoiTMj5hgOmwCx
HSNOyNwmagus5u+qurZDXQHwYvT8FFpF7t4gEvfSYMCZnGfIwHIcir8WbtPe8W6s
Owy1skyRXwvn64B1UkhfLw05SLCPU73KDHkvoaoTsT5K1TG4Y4ve0k1OUs6bU/IZ
v8Fz6OyhedGUBxUq8LkYW97mPiWlYEQkaYyBz3skzLRffO86YEmH5MEBa+hmJdEk
D68R5L0V7nx0YFWvX/Q/v2cKiMzvwwui
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:07 2025 by rpki-client