Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446c912a-6cfc-3744-aba1-93d3dfa00017.roa
File:                     446c912a-6cfc-3744-aba1-93d3dfa00017.roa (raw, json)
Hash identifier:          wdQsVGwGgbuELY7r7GyD/9Jr3dDyEMRwMupXoTah5WU=
Subject key identifier:   91:49:C1:9D:C3:F4:94:65:A0:3B:CD:18:67:BB:BB:75:5F:9B:5B:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496EFD5C249C2F5E7ECE340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446c912a-6cfc-3744-aba1-93d3dfa00017.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     36630
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ef:d5:c2:49:c2:f5:e7:ec:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=8db707b8-d5bd-442a-b3ed-6556a1701b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:68:73:6f:35:80:cc:e7:23:32:a8:c9:2c:
                    c5:41:7c:6e:27:cb:42:c0:2c:c8:3d:e3:da:3a:f0:
                    59:23:77:22:c6:71:93:54:09:3f:68:47:ef:73:3f:
                    8b:dd:9d:a3:f3:9a:eb:99:53:a1:c0:b6:c9:b3:41:
                    3b:4b:b3:93:6e:4b:8e:c5:db:2b:22:21:e7:0e:fa:
                    19:bc:be:e3:d1:a3:5a:33:44:b8:8f:15:48:be:99:
                    8e:38:17:4b:36:bd:4e:71:18:07:9a:73:0f:4a:68:
                    67:75:a6:bf:c2:9c:8d:e6:8a:13:74:07:88:3a:e8:
                    03:7d:25:7c:e6:be:2c:cb:b6:77:09:49:66:76:63:
                    f4:68:04:3c:41:30:0c:98:7b:eb:5a:d0:18:72:19:
                    8e:06:ae:d6:f4:90:9a:db:15:ed:1a:8e:be:9e:5a:
                    96:d1:06:dc:12:d2:d8:4a:c3:c8:a3:81:d3:93:a6:
                    bf:aa:a5:71:a1:e7:74:4f:d5:bf:99:32:00:6d:c8:
                    d3:8a:c3:f7:94:9c:aa:2e:61:fd:ee:d3:7b:6e:13:
                    8e:4a:48:e3:ac:56:5f:e2:b2:7c:b8:41:6c:21:40:
                    c6:af:c6:04:a8:88:0a:4f:04:f3:bd:cf:8a:dd:65:
                    04:ba:48:b2:40:2f:b4:0b:34:81:19:0e:d8:b4:00:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:C1:9D:C3:F4:94:65:A0:3B:CD:18:67:BB:BB:75:5F:9B:5B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446c912a-6cfc-3744-aba1-93d3dfa00017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:56:54:21:9a:02:b9:14:f4:35:38:c9:a0:5f:de:89:ed:e0:
         3a:d7:2d:7f:cc:10:ec:e5:c9:2f:cf:43:d1:da:1b:bf:92:09:
         2f:b3:54:16:6e:54:db:43:4a:a2:d0:84:ea:b4:f3:a2:66:f7:
         21:cb:ec:cb:65:c9:be:8b:05:8b:6d:2c:50:2f:fc:f5:36:3e:
         24:53:02:fb:25:25:8c:8a:68:39:30:ce:a8:f3:52:d4:66:15:
         4b:3b:20:da:61:bd:ab:b1:51:f1:60:18:b6:a2:4d:de:ad:90:
         e6:21:ba:06:71:af:48:bd:f0:68:71:76:4f:7b:49:9e:93:65:
         89:c5:97:94:fc:51:90:80:83:14:87:7e:62:84:1c:1f:56:a2:
         c0:38:f5:1c:b9:6e:e4:eb:d5:1f:8e:0d:41:3c:d0:28:a7:2f:
         7a:ca:06:b6:42:08:de:8d:68:be:2e:47:b9:83:98:36:50:db:
         cf:c6:b5:97:36:d1:27:ba:9f:e3:b8:52:e5:fe:8a:27:37:e0:
         78:90:e1:a1:ca:97:5d:a7:52:ad:08:7e:97:49:a8:49:bb:85:
         a3:7f:5a:71:0b:69:8c:5f:5b:65:39:d3:8e:32:60:55:14:ba:
         a1:68:fa:19:07:37:6f:c7:04:37:9e:b0:38:2c:ce:76:bf:09:
         9c:98:22:92
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsklu/VwknC9efs40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
OGRiNzA3YjgtZDViZC00NDJhLWIzZWQtNjU1NmExNzAxYjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTRoc281gMznIzKoySzFQXxuJ8tCwCzIPePa
OvBZI3cixnGTVAk/aEfvcz+L3Z2j85rrmVOhwLbJs0E7S7OTbkuOxdsrIiHnDvoZ
vL7j0aNaM0S4jxVIvpmOOBdLNr1OcRgHmnMPSmhndaa/wpyN5ooTdAeIOugDfSV8
5r4sy7Z3CUlmdmP0aAQ8QTAMmHvrWtAYchmOBq7W9JCa2xXtGo6+nlqW0QbcEtLY
SsPIo4HTk6a/qqVxoed0T9W/mTIAbcjTisP3lJyqLmH97tN7bhOOSkjjrFZf4rJ8
uEFsIUDGr8YEqIgKTwTzvc+K3WUEukiyQC+0CzSBGQ7YtAB+2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJFJwZ3D9JRloDvNGGe7u3Vfm1vwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDQ2YzkxMmEtNmNmYy0z
NzQ0LWFiYTEtOTNkM2RmYTAwMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBAVlQhmgK5FPQ1OMmgX96J7eA61y1/zBDs5ckvz0PR2hu/kgkvs1QW
blTbQ0qi0ITqtPOiZvchy+zLZcm+iwWLbSxQL/z1Nj4kUwL7JSWMimg5MM6o81LU
ZhVLOyDaYb2rsVHxYBi2ok3erZDmIboGca9IvfBocXZPe0mek2WJxZeU/FGQgIMU
h35ihBwfVqLAOPUcuW7k69Ufjg1BPNAopy96yga2QgjejWi+Lke5g5g2UNvPxrWX
NtEnup/juFLl/oonN+B4kOGhypddp1KtCH6XSahJu4Wjf1pxC2mMX1tlOdOOMmBV
FLqhaPoZBzdvxwQ3nrA4LM52vwmcmCKS
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:16 2025 by rpki-client