Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86df19d2-de76-3fff-9795-09ae81d4e438.roa
File:                     86df19d2-de76-3fff-9795-09ae81d4e438.roa (raw, json)
Hash identifier:          Nf8Ogn5x/XF2Equ4OPUaR+6Hs7FNclkaUO2RI69O2Og=
Subject key identifier:   55:3C:E5:B4:45:E3:07:D6:11:91:DF:BC:CF:A8:2B:78:A2:5C:C6:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B78445502BD1137B14C3ED20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86df19d2-de76-3fff-9795-09ae81d4e438.roa
Signing time:             Thu 30 Jan 2025 13:46:19 +0000
ROA not before:           Thu 30 Jan 2025 13:46:19 +0000
ROA not after:            Wed 30 Apr 2025 12:46:19 +0000
asID:                     396600
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:45:50:2b:d1:13:7b:14:c3:ed:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:19 2025 GMT
            Not After : Apr 30 12:46:19 2025 GMT
        Subject: CN=8f080324-9ebf-4761-a8a8-044d556d6b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:f7:c2:ca:9b:26:03:4e:65:c8:4a:ec:5f:
                    25:68:95:74:0d:81:dc:25:85:dd:15:46:d3:de:69:
                    8e:c7:8a:98:f7:10:1e:b2:4d:53:55:6a:43:6e:89:
                    63:3e:ab:58:d4:15:0a:c4:49:9c:da:b4:ee:de:27:
                    0c:24:c9:79:9d:bd:8a:8d:43:92:ab:b9:9e:43:ab:
                    a2:dc:0b:d1:4b:43:f8:5c:bb:f0:fc:bc:2e:0f:82:
                    07:53:72:7c:ae:6c:52:13:40:d0:c9:e1:de:4b:1a:
                    07:a7:e1:07:a3:69:aa:62:88:06:b6:56:fb:e2:de:
                    4d:55:d3:9e:37:73:aa:19:1c:bb:ea:23:f2:19:21:
                    2a:c0:36:7b:b8:83:8e:b8:4c:b0:e7:ce:27:49:48:
                    15:26:bb:c1:15:86:6e:bf:4d:a1:73:1d:c4:9b:dc:
                    d2:d1:20:45:5d:0a:27:7b:f5:23:bf:38:c8:5e:2e:
                    21:75:4b:ea:6f:ee:35:3a:25:d8:9d:8e:d4:f0:b6:
                    88:93:13:92:52:73:98:cf:f3:58:ae:81:de:8e:d3:
                    9f:76:a7:79:ec:dc:d1:91:dc:dc:e3:a7:39:f0:b7:
                    10:9d:53:09:66:37:7b:c8:b9:0f:f6:e4:73:6a:59:
                    72:cf:d2:40:b8:49:1e:26:34:a4:12:9b:41:26:2d:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:E5:B4:45:E3:07:D6:11:91:DF:BC:CF:A8:2B:78:A2:5C:C6:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86df19d2-de76-3fff-9795-09ae81d4e438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:77:d4:7f:3d:33:37:c7:6a:7c:a8:4d:a5:18:0d:a6:44:
         8f:da:b3:80:f9:d7:e5:bd:0d:09:5f:c5:e5:1a:de:97:b6:03:
         6a:77:83:28:a7:d1:b0:a8:b8:83:ae:f5:be:90:d7:3c:88:2f:
         59:24:1f:25:d8:94:8d:f0:e1:3a:07:0a:20:56:c7:b2:18:58:
         2e:27:b8:e3:77:6f:3d:26:14:c5:e8:6c:32:c2:e7:a7:49:de:
         db:37:12:e0:c9:b8:9d:98:33:72:53:c4:b4:92:2e:2a:6a:90:
         7b:95:4a:a1:b2:1b:f9:4f:36:a1:91:ce:44:47:87:4d:b1:7a:
         b0:d1:9b:2d:dd:25:36:b4:cf:e1:ef:46:45:48:74:f9:f3:ea:
         57:b1:eb:85:82:16:b6:61:7f:1d:21:83:0d:3e:a2:36:f8:30:
         79:f0:10:27:fd:70:ed:e3:83:5b:e0:8e:99:3e:e7:cf:81:c7:
         23:c0:66:c9:5d:58:b7:9e:02:c2:d0:54:b9:5b:a2:4b:4c:36:
         93:46:03:b9:3e:10:01:32:0b:64:bc:96:9a:2f:8e:12:1c:4b:
         a7:e4:fe:5e:f4:95:ee:8f:33:f2:85:44:1b:f9:f7:96:74:a8:
         fe:07:44:a5:47:d9:7c:9a:64:47:e1:e1:16:cc:89:6a:d7:47:
         34:81:11:92
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEVQK9ETexTD7SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxOVoXDTI1MDQzMDEyNDYxOVowLzEtMCsGA1UEAxMk
OGYwODAzMjQtOWViZi00NzYxLWE4YTgtMDQ0ZDU1NmQ2YjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqH3wsqbJgNOZchK7F8laJV0DYHcJYXdFUbT
3mmOx4qY9xAesk1TVWpDboljPqtY1BUKxEmc2rTu3icMJMl5nb2KjUOSq7meQ6ui
3AvRS0P4XLvw/LwuD4IHU3J8rmxSE0DQyeHeSxoHp+EHo2mqYogGtlb74t5NVdOe
N3OqGRy76iPyGSEqwDZ7uIOOuEyw584nSUgVJrvBFYZuv02hcx3Em9zS0SBFXQon
e/UjvzjIXi4hdUvqb+41OiXYnY7U8LaIkxOSUnOYz/NYroHejtOfdqd57NzRkdzc
46c58LcQnVMJZjd7yLkP9uRzallyz9JAuEkeJjSkEptBJi331wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFU85bRF4wfWEZHfvM+oK3iiXMZ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZkZjE5ZDItZGU3Ni0z
ZmZmLTk3OTUtMDlhZTgxZDRlNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAM23fUfz0zN8dqfKhNpRgNpkSP2rOA+dflvQ0JX8XlGt6XtgNqd4Mo
p9GwqLiDrvW+kNc8iC9ZJB8l2JSN8OE6BwogVseyGFguJ7jjd289JhTF6Gwywuen
Sd7bNxLgybidmDNyU8S0ki4qapB7lUqhshv5Tzahkc5ER4dNsXqw0Zst3SU2tM/h
70ZFSHT58+pXseuFgha2YX8dIYMNPqI2+DB58BAn/XDt44Nb4I6ZPufPgccjwGbJ
XVi3ngLC0FS5W6JLTDaTRgO5PhABMgtkvJaaL44SHEun5P5e9JXujzPyhUQb+feW
dKj+B0SlR9l8mmRH4eEWzIlq10c0gRGS
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:18 2025 by rpki-client