Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
File:                     63b4e509-3817-3ae3-bd43-c133943fcdae.roa (raw, json)
Hash identifier:          GTKxxrkD0wI8JY7Wxp3fjT0ZaOYiGqfX6DtHdtmoOeg=
Subject key identifier:   BF:A1:61:E2:B0:57:8B:39:5F:A1:E4:B9:48:4D:D1:1D:97:63:CA:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744C37DAB12C39BE626C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     36622
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4c:37:da:b1:2c:39:be:62:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=43c76082-39e9-4275-9ef7-1916af1b24e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:a2:5b:3a:a8:f2:c2:05:a0:7c:3f:84:eb:
                    da:0d:6e:4c:b4:39:b8:c6:a2:0d:c1:af:58:06:6d:
                    bb:fa:c9:f5:4f:c4:77:99:2f:d2:56:73:2f:3e:be:
                    4c:a3:f1:29:50:f5:f1:f2:4d:b6:da:83:4f:05:60:
                    27:ce:e6:29:3a:78:87:89:d1:f9:e1:f6:5f:c9:29:
                    ea:1d:64:dc:2d:6a:8f:4b:70:46:57:41:88:9f:5d:
                    b6:e5:4b:6c:8e:f5:6b:4c:9a:b6:b6:d7:b4:b1:50:
                    ba:7b:22:44:7d:b3:a7:b9:bd:1f:1e:41:0b:46:90:
                    93:32:62:12:9f:58:d8:e5:9a:e3:32:1d:91:f1:5a:
                    8b:81:17:26:b4:83:f9:e0:1d:fa:d4:e0:d9:1b:cb:
                    ec:80:e8:51:02:b3:22:ac:b3:e8:72:ae:5c:6c:d9:
                    09:74:f3:13:9b:da:f0:2e:87:7b:0e:62:53:03:6c:
                    60:bb:bd:17:74:43:e0:23:b4:0f:24:90:1e:68:6b:
                    9b:e6:9f:04:cb:45:7d:82:18:bf:93:15:45:3b:e8:
                    3f:ce:6b:96:66:9b:ce:d6:60:2f:70:af:bf:aa:4e:
                    0d:6a:27:e3:72:9c:51:7e:85:4a:f9:a6:ec:0a:9e:
                    09:26:30:28:0b:41:2f:3b:1d:84:ca:1c:75:60:78:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:61:E2:B0:57:8B:39:5F:A1:E4:B9:48:4D:D1:1D:97:63:CA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:80:c1:c9:91:8b:3b:96:3f:b0:2f:e1:8d:fc:cf:ec:38:
         16:fa:c8:6b:eb:11:0d:1b:15:22:27:42:6a:9d:6e:cf:a0:c2:
         53:e8:f0:db:0a:9a:7d:c9:19:c2:60:78:c0:b5:e1:5d:03:24:
         f8:37:2b:6c:20:fc:2d:4a:3f:75:ce:0d:22:03:db:80:b2:17:
         ca:00:56:91:70:b1:28:f1:10:d5:e7:bb:85:89:65:1d:fb:3c:
         b5:b7:c8:38:68:46:94:f2:07:e4:b2:20:3d:41:87:90:a8:f3:
         2d:7e:6c:f4:ee:1f:2b:e0:3f:6c:32:99:da:e4:0e:5a:c9:8a:
         16:ad:7b:9c:b2:90:17:8d:36:e9:04:67:7c:10:1f:2b:cf:45:
         12:1c:9e:51:83:0d:aa:a3:ad:0e:ae:21:ce:40:b8:81:95:6b:
         a0:12:4b:06:b2:87:76:ff:60:bf:f8:65:f2:ab:01:40:27:0b:
         dd:9a:c5:18:18:64:9e:ca:45:4f:a2:8d:1e:bf:6e:aa:4f:9c:
         5d:73:e2:15:2e:e1:7e:97:b3:c9:9b:9e:3e:19:82:23:e7:09:
         88:47:9c:b8:8c:aa:af:e9:38:39:72:4c:08:c9:18:53:96:c3:
         81:77:e7:ef:cd:55:9c:80:e5:a3:90:90:e5:08:56:4f:11:07:
         43:e3:3a:21
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dEw32rEsOb5ibIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
NDNjNzYwODItMzllOS00Mjc1LTllZjctMTkxNmFmMWIyNGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3+iWzqo8sIFoHw/hOvaDW5MtDm4xqINwa9Y
Bm27+sn1T8R3mS/SVnMvPr5Mo/EpUPXx8k222oNPBWAnzuYpOniHidH54fZfySnq
HWTcLWqPS3BGV0GIn1225UtsjvVrTJq2tte0sVC6eyJEfbOnub0fHkELRpCTMmIS
n1jY5ZrjMh2R8VqLgRcmtIP54B361ODZG8vsgOhRArMirLPocq5cbNkJdPMTm9rw
Lod7DmJTA2xgu70XdEPgI7QPJJAeaGub5p8Ey0V9ghi/kxVFO+g/zmuWZpvO1mAv
cK+/qk4NaifjcpxRfoVK+absCp4JJjAoC0EvOx2Eyhx1YHhCCQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL+hYeKwV4s5X6HkuUhN0R2XY8q2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjNiNGU1MDktMzgxNy0z
YWUzLWJkNDMtYzEzMzk0M2ZjZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLOYDByZGLO5Y/sC/hjfzP7DgW+shr6xENGxUiJ0JqnW7PoMJT6PDb
Cpp9yRnCYHjAteFdAyT4NytsIPwtSj91zg0iA9uAshfKAFaRcLEo8RDV57uFiWUd
+zy1t8g4aEaU8gfksiA9QYeQqPMtfmz07h8r4D9sMpna5A5ayYoWrXucspAXjTbp
BGd8EB8rz0USHJ5Rgw2qo60OriHOQLiBlWugEksGsod2/2C/+GXyqwFAJwvdmsUY
GGSeykVPoo0ev26qT5xdc+IVLuF+l7PJm54+GYIj5wmIR5y4jKqv6Tg5ckwIyRhT
lsOBd+fvzVWcgOWjkJDlCFZPEQdD4zoh
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:51 2025 by rpki-client