Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac11c75d-c6ae-35c0-81a9-76999d83adb2.roa
File:                     ac11c75d-c6ae-35c0-81a9-76999d83adb2.roa (raw, json)
Hash identifier:          q1u6tYCpuEsvjfo7t5GzuOgcTXCot7j48LytpOMY5zc=
Subject key identifier:   E9:2C:E0:ED:53:34:A0:00:93:78:69:4A:46:8F:D6:68:59:E1:8E:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAF8777CE86103A1EAB180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac11c75d-c6ae-35c0-81a9-76999d83adb2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396543
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f8:77:7c:e8:61:03:a1:ea:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=702d7529-d521-43e7-8dcc-47ba5d535432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:73:d6:53:8b:00:63:46:1e:0d:04:6b:f3:
                    0b:ff:9b:86:53:30:8f:eb:40:79:0f:6f:38:ea:ae:
                    59:fa:93:e1:ab:29:29:ef:4c:78:9e:3c:97:3f:87:
                    1c:75:1b:10:79:95:37:d1:a4:a5:d4:ed:a8:72:5b:
                    ba:8d:8d:97:03:35:27:1b:15:dc:52:ea:8f:a9:3b:
                    54:e8:94:7a:6d:d4:aa:75:ee:d5:8c:98:0e:bc:e1:
                    69:e4:9d:10:c1:77:04:19:70:76:54:09:e4:16:b2:
                    69:84:db:ed:28:f5:fe:bd:79:a6:01:2b:e0:cf:db:
                    35:c8:cf:b2:e9:34:f8:5a:49:6c:bd:13:5c:39:aa:
                    2a:05:78:61:2e:c0:56:05:bb:df:ae:bd:52:9a:08:
                    50:b5:48:c4:b0:d5:1e:2b:ab:da:ea:0e:1d:12:46:
                    ca:8e:6e:e4:56:17:d2:ab:54:39:71:f1:df:03:15:
                    7e:f6:fe:ca:a8:81:db:2c:9b:50:1a:ae:1d:8c:f4:
                    45:81:1e:ec:35:b0:62:23:3f:15:ec:67:f3:e2:ec:
                    97:e6:52:9e:1e:81:47:29:86:65:63:af:9b:d8:0b:
                    df:a6:e3:d3:38:d0:27:36:ec:92:0f:aa:d7:ae:ee:
                    40:d4:44:cc:95:65:26:a1:26:64:ca:b1:fb:77:b6:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:E0:ED:53:34:A0:00:93:78:69:4A:46:8F:D6:68:59:E1:8E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac11c75d-c6ae-35c0-81a9-76999d83adb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:ce:f7:23:e9:b8:82:63:8f:5c:0a:5a:52:6d:39:74:af:
         6c:6b:3b:bb:b8:f4:a8:c3:5c:2d:34:79:d2:95:4a:56:7d:2f:
         54:10:da:22:0b:e8:03:1c:62:cd:e2:5f:f7:50:25:46:6c:51:
         be:59:da:2f:0a:b6:ac:1d:e4:d6:54:46:c9:8f:52:dd:4e:a6:
         72:fe:fe:4e:4a:99:27:01:31:cd:5b:a5:41:2c:a7:03:2b:92:
         7b:61:7a:98:ea:d1:bb:9e:1c:5f:fa:41:18:d4:2a:57:a0:f8:
         e5:a9:ee:17:4e:20:ff:8d:8e:85:60:be:a7:c6:54:63:7a:3b:
         94:d1:08:26:1f:f9:8d:98:86:48:10:08:32:7c:36:f0:b4:8a:
         9b:e0:2a:eb:ca:cb:1d:64:69:91:37:96:34:6c:74:94:59:a7:
         9f:ed:25:89:20:34:12:47:a1:51:00:11:8a:31:52:59:b9:03:
         bf:79:95:29:1a:83:96:d5:5f:96:1e:ed:c4:ac:27:26:3e:7b:
         19:6f:8e:80:1f:65:80:ba:3d:0b:78:ea:80:5b:8c:b3:c8:98:
         1a:40:62:6b:38:22:c1:d2:19:89:70:80:f3:1a:34:51:df:10:
         d8:e3:26:b2:31:87:73:c3:d9:72:18:9d:26:df:e5:3f:99:ed:
         b0:e9:5a:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2vh3fOhhA6HqsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NzAyZDc1MjktZDUyMS00M2U3LThkY2MtNDdiYTVkNTM1NDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlplz1lOLAGNGHg0Ea/ML/5uGUzCP60B5D284
6q5Z+pPhqykp70x4njyXP4ccdRsQeZU30aSl1O2oclu6jY2XAzUnGxXcUuqPqTtU
6JR6bdSqde7VjJgOvOFp5J0QwXcEGXB2VAnkFrJphNvtKPX+vXmmASvgz9s1yM+y
6TT4WklsvRNcOaoqBXhhLsBWBbvfrr1SmghQtUjEsNUeK6va6g4dEkbKjm7kVhfS
q1Q5cfHfAxV+9v7KqIHbLJtQGq4djPRFgR7sNbBiIz8V7Gfz4uyX5lKeHoFHKYZl
Y6+b2AvfpuPTONAnNuySD6rXru5A1ETMlWUmoSZkyrH7d7YLLQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOks4O1TNKAAk3hpSkaP1mhZ4Y65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWMxMWM3NWQtYzZhZS0z
NWMwLTgxYTktNzY5OTlkODNhZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBfgc73I+m4gmOPXApaUm05dK9sazu7uPSow1wtNHnSlUpWfS9UENoi
C+gDHGLN4l/3UCVGbFG+WdovCrasHeTWVEbJj1LdTqZy/v5OSpknATHNW6VBLKcD
K5J7YXqY6tG7nhxf+kEY1CpXoPjlqe4XTiD/jY6FYL6nxlRjejuU0QgmH/mNmIZI
EAgyfDbwtIqb4CrryssdZGmRN5Y0bHSUWaef7SWJIDQSR6FRABGKMVJZuQO/eZUp
GoOW1V+WHu3ErCcmPnsZb46AH2WAuj0LeOqAW4yzyJgaQGJrOCLB0hmJcIDzGjRR
3xDY4yayMYdzw9lyGJ0m3+U/me2w6Vp2
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:20 2025 by rpki-client