Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5280ca98-9e06-308b-a102-c40923201223.roa
File:                     5280ca98-9e06-308b-a102-c40923201223.roa (raw, json)
Hash identifier:          BQtHGG3Vv8oOEKmsZgBeXH6JCPXulEw0K7Kva4vvhs0=
Subject key identifier:   C3:6F:BD:2E:23:E0:79:33:69:29:49:0C:4F:09:95:EB:87:88:88:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183EBB97183B380D180D8B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5280ca98-9e06-308b-a102-c40923201223.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     36626
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:eb:b9:71:83:b3:80:d1:80:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=fd8bec0e-b54b-4254-aafa-8904e0a47f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:94:bf:0d:e1:bf:f9:17:39:72:2f:36:d4:
                    42:7d:01:09:41:ff:9f:3c:06:b8:ef:75:6b:03:2f:
                    c5:43:6b:05:05:3d:2b:df:01:b1:17:5c:22:45:1c:
                    13:79:aa:d5:9b:ef:3d:c6:81:e8:c3:77:d7:ea:f5:
                    79:06:ba:e5:14:7b:34:f1:2e:1b:6c:10:d2:ee:33:
                    6f:8f:df:f4:2e:3d:86:62:52:31:07:a9:82:28:13:
                    1d:23:78:ad:57:f2:4d:7c:c5:e2:42:37:f9:59:2d:
                    64:8f:69:91:dc:53:2f:5f:fb:46:9f:a7:44:d3:87:
                    86:c1:19:26:a3:34:56:f2:18:7a:85:dd:39:41:d5:
                    eb:70:9c:e6:3f:2a:b8:ee:ab:43:f1:c4:fd:8d:91:
                    d6:04:e4:a2:87:b4:dd:d5:b6:61:76:e9:f1:bf:2d:
                    05:9f:70:ba:6d:3c:2a:5c:0d:a0:4c:36:3b:32:38:
                    fa:41:ff:c7:1c:0c:19:ef:98:e3:2e:2d:40:aa:6d:
                    b6:a9:67:c1:1f:5d:0a:00:33:23:c1:8b:7e:4e:85:
                    fd:42:ca:81:5a:b7:76:26:5f:b0:ee:1e:30:b8:82:
                    eb:01:c0:90:f5:04:88:c4:fd:c3:09:bf:8a:1e:a4:
                    89:18:2a:d9:8e:14:7e:97:2c:88:44:45:64:8f:b1:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6F:BD:2E:23:E0:79:33:69:29:49:0C:4F:09:95:EB:87:88:88:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5280ca98-9e06-308b-a102-c40923201223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:9a:0c:d4:c2:63:9a:11:50:52:c7:03:50:5f:c4:c4:f3:
         04:49:37:92:ce:0a:89:63:48:43:dd:2a:16:5d:2f:f3:e6:d4:
         ed:16:41:af:2e:03:80:63:78:9f:5d:5f:9b:a4:a9:24:a3:1d:
         83:9a:e1:a5:8d:da:22:33:c6:f8:53:81:22:7a:82:18:0d:07:
         28:8b:1d:51:e0:1e:ef:64:27:b0:b5:9f:a4:03:a1:53:eb:02:
         5c:bc:12:17:6e:a7:0c:f3:99:cd:a9:52:84:10:d4:79:5b:d5:
         98:ea:aa:1a:24:d2:d2:12:4b:f3:e5:75:2c:7a:67:12:b3:da:
         06:ea:9a:29:87:11:38:14:9c:11:f1:3b:72:73:12:4c:72:83:
         47:81:80:6c:3e:1e:d9:01:82:8e:66:33:e6:46:62:21:e4:36:
         54:aa:fc:58:33:9f:2d:bb:c0:8c:2a:44:d0:bc:d4:d5:15:52:
         fd:a7:4b:27:39:8c:7c:03:88:f5:50:96:4d:17:8f:ee:28:17:
         63:4d:2e:50:94:e2:a4:7b:ef:f6:64:30:75:47:44:4a:29:5c:
         c9:85:d6:06:8b:18:b2:ec:86:b5:b0:b9:d0:8c:62:ab:25:0a:
         aa:35:7d:8f:ad:5a:d9:92:51:f5:ab:f9:ba:65:4d:88:34:91:
         5c:59:9b:87
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg+u5cYOzgNGA2LAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZmQ4YmVjMGUtYjU0Yi00MjU0LWFhZmEtODkwNGUwYTQ3ZjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6+Uvw3hv/kXOXIvNtRCfQEJQf+fPAa473Vr
Ay/FQ2sFBT0r3wGxF1wiRRwTearVm+89xoHow3fX6vV5BrrlFHs08S4bbBDS7jNv
j9/0Lj2GYlIxB6mCKBMdI3itV/JNfMXiQjf5WS1kj2mR3FMvX/tGn6dE04eGwRkm
ozRW8hh6hd05QdXrcJzmPyq47qtD8cT9jZHWBOSih7Td1bZhdunxvy0Fn3C6bTwq
XA2gTDY7Mjj6Qf/HHAwZ75jjLi1Aqm22qWfBH10KADMjwYt+ToX9QsqBWrd2Jl+w
7h4wuILrAcCQ9QSIxP3DCb+KHqSJGCrZjhR+lyyIREVkj7HEjwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMNvvS4j4HkzaSlJDE8JleuHiIglMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI4MGNhOTgtOWUwNi0z
MDhiLWExMDItYzQwOTIzMjAxMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBwWpoM1MJjmhFQUscDUF/ExPMESTeSzgqJY0hD3SoWXS/z5tTtFkGv
LgOAY3ifXV+bpKkkox2DmuGljdoiM8b4U4EieoIYDQcoix1R4B7vZCewtZ+kA6FT
6wJcvBIXbqcM85nNqVKEENR5W9WY6qoaJNLSEkvz5XUsemcSs9oG6pophxE4FJwR
8TtycxJMcoNHgYBsPh7ZAYKOZjPmRmIh5DZUqvxYM58tu8CMKkTQvNTVFVL9p0sn
OYx8A4j1UJZNF4/uKBdjTS5QlOKke+/2ZDB1R0RKKVzJhdYGixiy7Ia1sLnQjGKr
JQqqNX2PrVrZklH1q/m6ZU2INJFcWZuH
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:05 2025 by rpki-client