Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa
File:                     86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa (raw, json)
Hash identifier:          AdCagTRiqYsxOXPxgitsODWyB2Pv1MwzH9xHgepBLCk=
Subject key identifier:   30:05:7E:CA:40:0C:BF:56:53:45:11:79:79:41:8F:0B:61:5C:B9:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D217E6311F8BA4AD9900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396571
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d2:17:e6:31:1f:8b:a4:ad:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=fcb0e897-7c88-45be-80b9-52fdb099f23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:dc:4f:1c:b2:96:46:c8:55:b6:dc:62:78:
                    fe:fc:19:81:a2:68:24:b7:f4:32:bf:a4:04:1c:5c:
                    53:23:0f:d6:14:b6:0e:03:34:d6:f4:eb:a9:a3:a2:
                    0d:4e:34:7e:52:a8:da:89:81:3a:ed:9a:f5:1f:1e:
                    58:f5:8b:c3:0d:e1:c9:22:41:31:64:1e:5e:10:50:
                    43:14:2f:ea:f3:41:e9:6d:d9:0d:5a:e5:36:9c:7c:
                    09:1a:7c:7c:e3:84:45:48:c1:06:06:34:22:a0:cc:
                    3c:5c:1a:e1:fd:94:16:06:75:af:17:7e:bc:83:a7:
                    bb:56:0c:f9:81:d1:14:18:d0:88:72:60:ac:21:c3:
                    ee:97:14:49:77:cc:72:00:5a:af:0e:d5:2a:8c:f6:
                    f0:06:91:89:3d:c0:aa:0b:cb:27:a8:bc:16:97:d0:
                    e6:83:47:b7:7b:75:b9:fe:8e:31:40:bf:0a:0e:c9:
                    f0:e9:6a:0e:98:9e:2a:ee:88:57:b1:87:22:b9:34:
                    f0:a3:ac:10:22:bf:54:0b:a8:38:75:12:c7:26:01:
                    5c:63:ad:47:59:c7:e7:f2:5e:62:39:d6:16:ed:7d:
                    5e:ed:5d:93:4f:92:b3:1d:ea:6b:4d:91:5a:71:5a:
                    7c:33:59:25:e2:34:c8:68:ad:28:f0:11:e1:e4:0a:
                    d3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:05:7E:CA:40:0C:BF:56:53:45:11:79:79:41:8F:0B:61:5C:B9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:5c:f0:17:a6:5a:26:c2:7d:82:97:d6:91:98:72:a8:1f:
         be:66:ab:59:41:d0:0f:36:d0:85:37:cb:35:26:7f:d1:d2:8b:
         4c:c0:f3:be:2f:c4:c5:4d:b8:b1:fe:eb:c9:43:81:20:94:a5:
         54:7c:5d:2a:10:5f:56:d7:0b:10:05:6d:7d:31:8b:d8:26:75:
         15:46:89:e6:e1:78:56:9c:a5:8f:ca:40:22:3a:4c:8a:e9:ad:
         f4:cf:bd:5c:d6:44:b7:e2:52:64:2b:71:6e:0c:ea:27:4c:ab:
         6a:f8:8d:a5:cb:0c:ff:09:3d:27:d4:cb:39:e9:29:e8:e4:c1:
         db:c1:37:f4:a4:f4:3c:8b:1c:dc:52:7b:aa:c5:bb:31:84:48:
         47:a9:62:8f:0b:78:ce:af:64:15:26:c9:4f:4e:6f:56:fe:34:
         af:47:cf:2a:f3:b7:be:47:8c:08:02:2d:a0:de:84:79:a6:77:
         95:e7:23:13:a3:5e:0c:50:21:78:f5:34:0e:e0:79:5f:98:f9:
         ce:e2:37:a6:05:b6:1a:28:97:01:09:50:7d:5f:f8:57:df:45:
         4a:19:60:96:12:43:f0:37:38:0d:50:58:ae:6b:84:37:58:cc:
         fd:6e:76:eb:76:c9:6b:1f:19:82:2c:9e:b7:03:86:ea:de:3b:
         52:5d:b8:23
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9IX5jEfi6StmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZmNiMGU4OTctN2M4OC00NWJlLTgwYjktNTJmZGIwOTlmMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRzcTxyylkbIVbbcYnj+/BmBomgkt/Qyv6QE
HFxTIw/WFLYOAzTW9Oupo6INTjR+UqjaiYE67Zr1Hx5Y9YvDDeHJIkExZB5eEFBD
FC/q80HpbdkNWuU2nHwJGnx844RFSMEGBjQioMw8XBrh/ZQWBnWvF368g6e7Vgz5
gdEUGNCIcmCsIcPulxRJd8xyAFqvDtUqjPbwBpGJPcCqC8snqLwWl9Dmg0e3e3W5
/o4xQL8KDsnw6WoOmJ4q7ohXsYciuTTwo6wQIr9UC6g4dRLHJgFcY61HWcfn8l5i
OdYW7X1e7V2TT5KzHeprTZFacVp8M1kl4jTIaK0o8BHh5ArTAwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDAFfspADL9WU0UReXlBjwthXLlXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZmYzhjNDAtZDZiYS0z
MmE0LTg1YzktNzFkZjcxZGMyNjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAFD1zwF6ZaJsJ9gpfWkZhyqB++ZqtZQdAPNtCFN8s1Jn/R0otMwPO+
L8TFTbix/uvJQ4EglKVUfF0qEF9W1wsQBW19MYvYJnUVRonm4XhWnKWPykAiOkyK
6a30z71c1kS34lJkK3FuDOonTKtq+I2lywz/CT0n1Ms56Sno5MHbwTf0pPQ8ixzc
UnuqxbsxhEhHqWKPC3jOr2QVJslPTm9W/jSvR88q87e+R4wIAi2g3oR5pneV5yMT
o14MUCF49TQO4HlfmPnO4jemBbYaKJcBCVB9X/hX30VKGWCWEkPwNzgNUFiua4Q3
WMz9bnbrdslrHxmCLJ63A4bq3jtSXbgj
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:30 2025 by rpki-client