Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/819b3606-416e-38d0-a461-9427402439b4.roa
File:                     819b3606-416e-38d0-a461-9427402439b4.roa (raw, json)
Hash identifier:          Y0KJMf0wqgz+g9B62HsW1EgAashdD29DIdRMqSpdq98=
Subject key identifier:   BC:3C:C0:A2:2A:82:E0:27:CF:DF:F3:22:3A:95:29:8F:9D:DC:A9:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584964845A27983A9419AF78F0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/819b3606-416e-38d0-a461-9427402439b4.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     396585
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:5a:27:98:3a:94:19:af:78:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=14e2aeab-ead8-43b0-8721-0a268cbdd9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:9e:44:07:02:0f:d7:0c:12:67:22:48:8b:
                    81:70:f1:50:8e:40:9e:dd:9d:f1:58:df:37:ad:a1:
                    fd:eb:17:0d:82:11:de:23:6e:da:40:25:57:bf:c5:
                    5d:8d:16:f5:08:61:2a:d8:72:ec:5b:af:0c:b0:19:
                    ba:ce:2f:f2:6a:8b:0c:2a:cf:e3:48:96:c0:ee:f0:
                    f0:df:5c:ea:98:80:f7:8e:09:31:f5:30:24:bd:1e:
                    c3:9b:e6:50:cd:53:35:d1:cd:0e:da:5a:8f:24:a7:
                    41:39:97:6a:d0:52:a3:14:0c:dd:49:c4:91:c8:ef:
                    9b:95:af:d0:bf:58:24:bd:52:95:69:5f:06:18:39:
                    0e:05:be:22:19:d1:ea:2b:01:57:8a:4c:ed:09:d0:
                    06:07:cd:73:8c:4f:e9:2f:17:64:38:da:32:0e:aa:
                    33:c8:de:16:83:d7:34:63:44:74:4f:d3:0c:aa:a4:
                    56:72:84:b3:a9:1a:ed:cc:f3:dc:4c:84:26:e2:94:
                    5e:87:ea:ff:8a:17:8c:ac:93:8f:a3:57:d8:c6:91:
                    2c:4c:ec:9b:a3:4a:d7:cb:db:a8:32:52:ad:b2:ac:
                    b5:69:31:7b:d1:45:a2:bb:77:0e:87:ed:6e:0e:38:
                    c9:ab:28:b3:ea:59:88:27:a0:5c:64:9e:ee:7a:3b:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:C0:A2:2A:82:E0:27:CF:DF:F3:22:3A:95:29:8F:9D:DC:A9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/819b3606-416e-38d0-a461-9427402439b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:b1:90:97:02:1a:23:c9:b0:1b:b9:27:76:52:b6:57:d0:
         58:57:e0:ad:de:12:3a:be:52:93:d9:a1:6e:a4:c7:5b:34:75:
         c0:ce:44:69:7d:dd:23:b6:e6:1d:fe:54:28:ff:21:23:41:60:
         94:62:06:3a:29:c2:42:2a:08:10:d5:ed:ee:7b:bb:a3:ef:13:
         e4:88:8b:ce:9e:f6:23:dc:b3:cf:1b:47:cf:3f:c2:25:16:bc:
         6b:bb:c8:ca:9d:cd:5c:05:c0:04:0d:1d:4c:6a:91:9c:46:43:
         cb:58:f9:38:16:9a:74:52:d2:5c:9f:3d:45:e6:70:c7:4b:36:
         01:ad:ae:29:35:8c:6f:64:2d:c9:75:47:40:59:ba:d8:09:13:
         1f:e3:c5:21:33:a0:02:8d:32:96:bf:66:e6:7c:f5:f3:e0:ab:
         54:8d:d8:b2:a0:91:fe:f6:4a:30:7b:97:c0:f6:05:7f:c6:a7:
         a2:d2:24:c4:25:91:97:49:5a:fc:92:74:f6:29:e7:ca:73:6c:
         1c:1a:40:e6:bb:2d:9c:0a:57:9d:dc:52:df:bb:d8:25:2a:44:
         c4:8a:72:b1:a3:2a:8d:b9:26:62:34:28:49:4a:ef:48:f4:64:
         77:b3:a0:f4:26:42:a4:be:ba:a7:03:15:f3:98:02:89:ad:55:
         88:1a:3c:d2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElkhFonmDqUGa948MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MTRlMmFlYWItZWFkOC00M2IwLTg3MjEtMGEyNjhjYmRkOWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQeeRAcCD9cMEmciSIuBcPFQjkCe3Z3xWN83
raH96xcNghHeI27aQCVXv8VdjRb1CGEq2HLsW68MsBm6zi/yaosMKs/jSJbA7vDw
31zqmID3jgkx9TAkvR7Dm+ZQzVM10c0O2lqPJKdBOZdq0FKjFAzdScSRyO+bla/Q
v1gkvVKVaV8GGDkOBb4iGdHqKwFXikztCdAGB81zjE/pLxdkONoyDqozyN4Wg9c0
Y0R0T9MMqqRWcoSzqRrtzPPcTIQm4pReh+r/iheMrJOPo1fYxpEsTOybo0rXy9uo
MlKtsqy1aTF70UWiu3cOh+1uDjjJqyiz6lmIJ6BcZJ7uejuNtQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLw8wKIqguAnz9/zIjqVKY+d3KnmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODE5YjM2MDYtNDE2ZS0z
OGQwLWE0NjEtOTQyNzQwMjQzOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB9yLGQlwIaI8mwG7kndlK2V9BYV+Ct3hI6vlKT2aFupMdbNHXAzkRp
fd0jtuYd/lQo/yEjQWCUYgY6KcJCKggQ1e3ue7uj7xPkiIvOnvYj3LPPG0fPP8Il
Frxru8jKnc1cBcAEDR1MapGcRkPLWPk4Fpp0UtJcnz1F5nDHSzYBra4pNYxvZC3J
dUdAWbrYCRMf48UhM6ACjTKWv2bmfPXz4KtUjdiyoJH+9kowe5fA9gV/xqei0iTE
JZGXSVr8knT2KefKc2wcGkDmuy2cCled3FLfu9glKkTEinKxoyqNuSZiNChJSu9I
9GR3s6D0JkKkvrqnAxXzmAKJrVWIGjzS
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:50 2025 by rpki-client