Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa
File:                     a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa (raw, json)
Hash identifier:          jeJKFIExA9Hr1ZL96ox3WSA2xS4rcPrrXOpNC+23A8A=
Subject key identifier:   C8:0C:75:E1:E7:9D:BC:F6:AA:B3:FD:86:CF:9D:69:DC:BA:EF:A9:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584953C454067699A5A5B0688F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396602
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:54:06:76:99:a5:a5:b0:68:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=4a98f3a8-dd9e-42f4-ac66-ccd3e5d30041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:02:49:d9:c8:30:5c:12:04:f1:05:d4:a5:
                    54:c2:7c:45:16:05:6d:64:28:c8:29:58:01:a0:e8:
                    e2:98:59:5d:ad:fa:be:b6:74:be:69:bd:83:e7:60:
                    22:71:17:f8:5c:21:0a:34:9f:77:50:e7:af:66:2b:
                    a8:85:fc:bc:48:32:d5:ae:30:4f:cc:95:47:8b:9a:
                    c1:2e:ee:bb:4f:85:d8:83:19:89:16:68:81:62:6e:
                    71:29:09:d4:ba:2d:ed:65:81:91:76:52:26:cc:06:
                    c8:ca:2e:be:c1:e1:b9:3e:ca:b6:09:0b:f4:38:35:
                    7c:d5:3e:78:cf:2c:c3:b0:fc:7c:aa:a1:28:f7:a2:
                    a1:15:15:4c:98:54:ba:1b:34:bd:16:56:20:af:43:
                    64:b0:f7:dc:ca:de:09:12:88:63:c3:60:6e:bf:0f:
                    0e:8d:80:7d:be:d8:83:6d:ba:99:1a:4e:07:b9:bd:
                    63:3d:6b:91:7b:00:89:c1:45:e8:15:89:7c:dc:bc:
                    fc:99:5c:b6:6a:af:52:bf:db:68:37:13:a7:ec:e5:
                    3a:47:bf:dd:56:d9:4c:bf:f8:d3:62:36:03:2d:4b:
                    f0:2a:7d:96:7e:4b:3b:b8:68:54:15:8e:d6:21:7c:
                    06:34:b0:ef:d9:3f:41:f4:be:27:9c:02:8b:5c:b4:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0C:75:E1:E7:9D:BC:F6:AA:B3:FD:86:CF:9D:69:DC:BA:EF:A9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:69:d7:85:5b:d0:f5:d9:80:0b:0f:82:c9:8f:c7:d1:8a:
         68:b8:f3:6f:97:8b:69:72:c1:8f:ac:5c:0c:63:1b:bd:58:02:
         7c:35:56:af:8a:20:48:57:2b:59:a7:13:df:6e:2c:91:9e:58:
         1e:a0:84:f6:26:89:da:f5:a7:47:bd:c1:8a:0e:45:c0:3e:54:
         89:8b:be:fe:b9:a3:45:66:39:1c:cf:85:3c:f4:da:70:0f:3d:
         2b:6f:c2:c7:2b:ee:e3:d4:ac:7e:8d:d7:9c:7a:0d:b0:5d:ed:
         81:77:80:38:a4:d2:8e:cf:43:61:63:fb:0b:00:98:10:50:92:
         2f:46:43:2c:de:5b:55:18:5c:84:d3:7f:a3:42:a1:25:5d:9b:
         54:2b:94:16:4e:c5:0f:2e:dd:67:dc:67:6e:ec:92:53:99:f1:
         45:78:3b:b3:f5:a1:be:51:8e:be:a0:cf:02:2c:dd:92:9a:ed:
         7e:78:d9:19:b3:89:4c:6e:0e:b9:19:a1:fb:aa:9c:75:58:5d:
         f4:af:c9:59:43:c1:4c:08:e3:46:01:4d:f6:90:5b:2f:c8:76:
         bd:38:20:dc:cd:08:2a:d8:ea:57:7a:7d:3c:8c:ee:78:d1:d3:
         97:d2:12:d0:b9:b0:07:39:54:43:05:0b:5f:4f:d5:60:09:ac:
         67:b8:70:87
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxFQGdpmlpbBoj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGE5OGYzYTgtZGQ5ZS00MmY0LWFjNjYtY2NkM2U1ZDMwMDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ8CSdnIMFwSBPEF1KVUwnxFFgVtZCjIKVgB
oOjimFldrfq+tnS+ab2D52AicRf4XCEKNJ93UOevZiuohfy8SDLVrjBPzJVHi5rB
Lu67T4XYgxmJFmiBYm5xKQnUui3tZYGRdlImzAbIyi6+weG5Psq2CQv0ODV81T54
zyzDsPx8qqEo96KhFRVMmFS6GzS9FlYgr0NksPfcyt4JEohjw2Buvw8OjYB9vtiD
bbqZGk4Hub1jPWuRewCJwUXoFYl83Lz8mVy2aq9Sv9toNxOn7OU6R7/dVtlMv/jT
YjYDLUvwKn2Wfks7uGhUFY7WIXwGNLDv2T9B9L4nnAKLXLQalwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMgMdeHnnbz2qrP9hs+dady676m3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQ2YjdlYzUtODJjYS0z
ZWY5LWJkNzMtYWRkMWQ5YTEwMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBTKmnXhVvQ9dmACw+CyY/H0YpouPNvl4tpcsGPrFwMYxu9WAJ8NVav
iiBIVytZpxPfbiyRnlgeoIT2Jona9adHvcGKDkXAPlSJi77+uaNFZjkcz4U89Npw
Dz0rb8LHK+7j1Kx+jdeceg2wXe2Bd4A4pNKOz0NhY/sLAJgQUJIvRkMs3ltVGFyE
03+jQqElXZtUK5QWTsUPLt1n3Gdu7JJTmfFFeDuz9aG+UY6+oM8CLN2Smu1+eNkZ
s4lMbg65GaH7qpx1WF30r8lZQ8FMCONGAU32kFsvyHa9OCDczQgq2OpXen08jO54
0dOX0hLQubAHOVRDBQtfT9VgCaxnuHCH
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:39 2025 by rpki-client