Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa
File:                     4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa (raw, json)
Hash identifier:          p7V1Xa5FMWeRnckiNnXVm4HS5c03PFlHuJbrrJQPwK4=
Subject key identifier:   E7:18:2B:0D:8C:6B:96:EF:9E:09:CE:51:43:89:66:D9:E4:08:20:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0F2CABE81FAB6DF7D8AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     396597
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f2:ca:be:81:fa:b6:df:7d:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=96435035-8e44-4ec9-a84a-4b5c3a447ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:74:7b:fc:b2:4b:67:58:2e:a3:07:bf:f2:
                    bb:4e:84:69:c6:86:3c:bd:99:0c:0b:16:90:5e:56:
                    e5:b6:4a:3f:ab:3a:58:a0:bf:63:13:29:b9:e3:45:
                    77:50:d7:b2:fc:71:75:1c:98:41:76:55:89:3b:f1:
                    43:5f:53:12:4b:db:7d:6e:c1:cb:33:57:45:4c:f5:
                    4e:c1:3e:72:d6:c4:b2:19:ed:f4:1e:2f:e7:4e:94:
                    c4:c3:11:da:f7:7b:00:7d:12:04:d3:63:fd:e7:24:
                    7c:23:d0:ae:39:28:a6:a9:9d:3d:af:89:59:97:18:
                    6f:d5:ff:d6:36:18:9d:24:77:48:c4:a2:ee:33:dc:
                    be:6b:19:65:e8:92:9b:47:ae:3d:bb:27:4a:ef:16:
                    60:39:49:05:db:7f:75:65:bb:8f:8e:a5:cc:20:7b:
                    8e:8d:e9:3b:75:44:8e:e8:65:cf:d1:d9:9d:3c:65:
                    b4:d1:d9:bf:bb:14:1f:65:fd:4e:fc:c1:da:d5:f1:
                    67:4f:87:7a:ed:55:c1:cb:ab:2b:db:c0:83:13:c8:
                    8d:b8:1b:70:59:41:28:60:a6:68:31:45:dd:11:72:
                    22:68:52:8f:2e:d9:33:cb:11:06:ed:65:03:bf:13:
                    0e:6e:6f:b6:da:c4:5e:29:3b:02:89:cb:86:c3:cd:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:2B:0D:8C:6B:96:EF:9E:09:CE:51:43:89:66:D9:E4:08:20:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:93:07:e9:fd:61:03:4a:4a:01:3f:70:69:b8:9a:86:75:ff:
         fb:c6:f7:77:f6:76:6d:9a:56:25:36:98:25:49:8f:5b:93:86:
         ee:fc:b7:cc:d8:f6:85:ed:22:0e:4b:68:09:6d:13:bf:e4:47:
         0e:54:be:c3:24:e3:70:53:4f:79:8c:75:69:a8:cc:20:86:7f:
         9b:28:2c:00:fe:ba:b2:b8:cb:cd:04:5a:cd:df:01:f1:ad:c7:
         bf:3f:a6:67:b0:71:20:cd:fe:2a:3e:d7:9e:d9:72:df:f7:43:
         ad:e4:57:c3:18:34:a0:d6:aa:96:5e:f0:1c:ea:0b:c8:06:02:
         12:11:40:90:3c:f9:e5:c8:d7:56:23:85:e9:4f:f4:21:82:ae:
         db:e1:22:0e:a2:7f:89:cc:f1:8a:17:74:ee:ec:72:ec:b2:d7:
         ee:f4:00:89:77:f6:c7:fc:bc:05:a0:97:78:1c:ad:d9:ba:1a:
         85:24:28:38:92:ef:34:b3:2f:54:0a:bc:97:c3:45:d0:6f:d5:
         b6:c4:16:82:b9:c4:e8:ba:b5:6e:c5:57:9e:8d:33:40:4e:ae:
         b5:2c:5e:cb:92:37:39:79:a9:69:1d:13:28:ea:80:d0:50:82:
         58:f1:df:85:a6:73:da:57:df:3f:bd:69:fc:2f:dd:a5:02:14:
         0b:77:4e:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi0wPLKvoH6tt99isAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
OTY0MzUwMzUtOGU0NC00ZWM5LWE4NGEtNGI1YzNhNDQ3Y2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprt0e/yyS2dYLqMHv/K7ToRpxoY8vZkMCxaQ
Xlbltko/qzpYoL9jEym540V3UNey/HF1HJhBdlWJO/FDX1MSS9t9bsHLM1dFTPVO
wT5y1sSyGe30Hi/nTpTEwxHa93sAfRIE02P95yR8I9CuOSimqZ09r4lZlxhv1f/W
NhidJHdIxKLuM9y+axll6JKbR649uydK7xZgOUkF2391ZbuPjqXMIHuOjek7dUSO
6GXP0dmdPGW00dm/uxQfZf1O/MHa1fFnT4d67VXBy6sr28CDE8iNuBtwWUEoYKZo
MUXdEXIiaFKPLtkzyxEG7WUDvxMObm+22sReKTsCicuGw80lWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOcYKw2Ma5bvngnOUUOJZtnkCCDPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGEwMjk2YzItZGU2Zi0z
YzMyLWExMWUtOTFkZmU2ODEyZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnkwfp/WEDSkoBP3BpuJqGdf/7xvd39nZtmlYlNpglSY9bk4bu/LfM
2PaF7SIOS2gJbRO/5EcOVL7DJONwU095jHVpqMwghn+bKCwA/rqyuMvNBFrN3wHx
rce/P6ZnsHEgzf4qPtee2XLf90Ot5FfDGDSg1qqWXvAc6gvIBgISEUCQPPnlyNdW
I4XpT/Qhgq7b4SIOon+JzPGKF3Tu7HLsstfu9ACJd/bH/LwFoJd4HK3ZuhqFJCg4
ku80sy9UCryXw0XQb9W2xBaCucTourVuxVeejTNATq61LF7Lkjc5ealpHRMo6oDQ
UIJY8d+FpnPaV98/vWn8L92lAhQLd04Z
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:51 2025 by rpki-client