Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa
File:                     4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa (raw, json)
Hash identifier:          L9gm4Ptkzz2/qDAZi9MSoA8BS9S8//UwGhraCsN7xAk=
Subject key identifier:   F9:AA:0F:92:16:50:0F:9C:E8:0B:80:4A:5E:EE:A6:4F:BA:1B:D4:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C854B646C9B40EF7AF90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     25485
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c8:54:b6:46:c9:b4:0e:f7:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=0d5ea99c-1488-4a53-9c1d-98170aa3d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:07:df:e3:0e:50:f7:27:04:d4:cb:00:2b:
                    36:45:20:42:99:c6:f1:9a:9f:dd:ac:3b:ec:61:26:
                    67:3a:b0:70:d0:6c:8e:49:90:ea:77:c5:a1:cd:de:
                    9c:5a:32:4d:a5:e5:aa:21:27:cb:bd:30:25:e4:2a:
                    68:63:b6:c8:b5:49:3d:00:fc:c7:ce:23:f3:df:7b:
                    1b:34:05:6b:20:a1:6c:de:4c:78:38:5b:3a:93:3a:
                    1a:53:fa:2d:30:c6:02:e7:43:01:ef:a3:d2:7f:93:
                    47:3d:88:b0:3c:cc:2a:c8:10:d8:7b:ef:8c:61:29:
                    25:00:0e:b1:6e:11:7d:0c:31:9d:0f:b3:04:d6:62:
                    6b:8c:b5:8a:9a:7e:6a:8c:24:75:a2:28:7b:f3:95:
                    f7:ed:8c:a6:de:5e:ae:3a:77:03:5a:3c:78:5d:a0:
                    d9:ae:12:7a:7b:d6:7f:eb:9c:01:b9:9e:23:d2:e9:
                    20:88:7f:3c:cf:e7:72:8c:5f:be:a9:69:fc:50:10:
                    0a:27:22:31:e9:55:d8:65:4e:50:7e:3e:a9:92:53:
                    b4:db:66:69:82:c4:64:e3:96:fd:74:ca:7a:21:b7:
                    95:bb:f2:15:6a:cc:ac:87:35:38:cc:50:d0:f0:e5:
                    98:cc:50:3e:f6:50:f6:60:f3:da:8b:50:79:ac:e9:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AA:0F:92:16:50:0F:9C:E8:0B:80:4A:5E:EE:A6:4F:BA:1B:D4:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:26:0b:a3:97:c0:6b:04:89:ff:66:1c:a1:cc:73:4f:47:
         b9:a3:b8:ba:08:76:86:b0:3c:33:69:d5:1b:81:fc:22:46:ac:
         84:8c:07:f5:84:3b:93:67:4f:b5:fa:ee:27:c9:74:3c:fe:8e:
         1a:a6:20:2e:fd:e4:6c:df:99:27:31:e0:dc:d1:ae:c6:2d:c0:
         b7:b0:c1:b8:b7:86:58:7c:d2:9c:63:b9:0d:b6:ac:7f:d4:f1:
         93:aa:04:19:23:08:8a:b8:d9:13:e9:21:5e:8d:69:35:a7:8f:
         28:3f:4a:6a:93:a5:cf:d0:23:84:e0:a2:c4:28:f1:02:7d:37:
         e6:bd:85:71:0b:2e:5d:69:3a:2d:4e:54:37:7c:3e:e0:e1:3e:
         0b:03:4f:8b:f8:f2:54:be:20:80:d0:6c:c9:a7:98:e3:77:cd:
         e6:30:fc:98:a7:f1:b5:55:2f:15:a2:b0:cd:24:c4:e0:76:55:
         30:9e:ad:ee:77:cd:b8:8d:c0:4d:21:35:c9:35:f8:74:8f:29:
         41:62:15:1c:b5:08:8e:a6:d1:b9:38:e9:ac:37:4f:73:ca:20:
         16:76:f0:b4:4c:4f:f3:fa:f8:f5:85:43:76:71:60:d7:de:6c:
         f8:43:5b:4e:95:43:6e:88:5a:ac:a9:b6:d5:a6:9a:b7:29:f8:
         50:d8:06:cb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr+5shUtkbJtA73r5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
MGQ1ZWE5OWMtMTQ4OC00YTUzLTljMWQtOTgxNzBhYTNkOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg0H3+MOUPcnBNTLACs2RSBCmcbxmp/drDvs
YSZnOrBw0GyOSZDqd8Whzd6cWjJNpeWqISfLvTAl5CpoY7bItUk9APzHziPz33sb
NAVrIKFs3kx4OFs6kzoaU/otMMYC50MB76PSf5NHPYiwPMwqyBDYe++MYSklAA6x
bhF9DDGdD7ME1mJrjLWKmn5qjCR1oih785X37Yym3l6uOncDWjx4XaDZrhJ6e9Z/
65wBuZ4j0ukgiH88z+dyjF++qWn8UBAKJyIx6VXYZU5Qfj6pklO022ZpgsRk45b9
dMp6IbeVu/IVasyshzU4zFDQ8OWYzFA+9lD2YPPai1B5rOlrIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPmqD5IWUA+c6AuASl7upk+6G9QkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRhOWVlNDItNTc1ZC0z
YThjLThiM2YtNGNhMjhjMGQ4ZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBsVyYLo5fAawSJ/2YcocxzT0e5o7i6CHaGsDwzadUbgfwiRqyEjAf1
hDuTZ0+1+u4nyXQ8/o4apiAu/eRs35knMeDc0a7GLcC3sMG4t4ZYfNKcY7kNtqx/
1PGTqgQZIwiKuNkT6SFejWk1p48oP0pqk6XP0COE4KLEKPECfTfmvYVxCy5daTot
TlQ3fD7g4T4LA0+L+PJUviCA0GzJp5jjd83mMPyYp/G1VS8VorDNJMTgdlUwnq3u
d824jcBNITXJNfh0jylBYhUctQiOptG5OOmsN09zyiAWdvC0TE/z+vj1hUN2cWDX
3mz4Q1tOlUNuiFqsqbbVppq3KfhQ2AbL
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:16:13 2025 by rpki-client