Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa
File:                     baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa (raw, json)
Hash identifier:          Ku/D/7NU2WD2RZFeZ8nwLAp0hKDMnI1clIh7SZ7IxWI=
Subject key identifier:   B7:13:0C:17:BA:DB:ED:28:C6:7D:E8:7D:E8:8D:87:7C:D8:5E:0F:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF78B3B62DCD02D418780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     40647
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f7:8b:3b:62:dc:d0:2d:41:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=1584fc18-e52b-4306-b53b-95fd9834a749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:d3:05:f8:60:c7:00:3b:b9:0d:df:0f:67:
                    61:a7:4a:42:91:99:ec:9c:c4:da:5c:9b:fa:75:0c:
                    03:bf:15:6e:4e:3a:fd:53:bf:01:1b:67:02:73:b7:
                    06:ba:07:ea:a4:61:9b:9b:94:07:88:33:c4:11:74:
                    18:0e:52:c9:2a:b4:73:71:08:d2:a9:c1:25:be:44:
                    ea:dc:90:f8:66:b9:58:5e:7a:b8:22:1b:72:1b:c9:
                    6d:b5:25:fd:5f:4f:a9:ef:02:db:8d:38:2c:10:1c:
                    b4:30:68:05:a2:fa:50:c6:e4:e3:fd:44:c0:ba:cd:
                    0e:02:e7:ab:55:07:50:8f:30:62:1a:40:29:19:99:
                    00:e1:fe:8d:2c:bc:13:42:c1:a9:8e:f7:7c:ed:75:
                    7c:c7:98:51:90:3a:3b:03:bb:0e:4d:13:36:68:8f:
                    66:f0:9f:1b:34:5b:3e:64:be:55:6b:80:2a:81:93:
                    4c:63:eb:00:28:26:63:cd:d8:5e:e2:27:71:24:2a:
                    10:1b:7b:b9:41:8b:d4:4a:39:46:e4:a1:8b:e9:d2:
                    4e:2e:e2:4a:9a:33:8c:71:4f:74:2e:81:ff:66:4b:
                    84:cd:38:3b:4f:e5:83:b1:99:fa:13:e4:f1:a4:a4:
                    d8:66:99:ff:2e:35:6a:70:df:5f:10:ea:6d:9c:c0:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:0C:17:BA:DB:ED:28:C6:7D:E8:7D:E8:8D:87:7C:D8:5E:0F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baf1d6b6-98d0-3ae4-836c-e1932bcbca96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:32:b9:d2:ec:fe:3d:92:f4:d8:4c:05:0f:16:9e:81:37:
         25:71:3c:66:a3:25:99:22:1f:99:3b:21:04:c0:af:03:b0:c6:
         fb:43:ff:9d:70:a2:b0:90:93:63:4c:22:8e:1b:7d:39:03:ac:
         4b:ce:a7:da:31:88:ca:14:1d:5a:0e:66:e4:35:f8:46:e9:f4:
         1b:1c:86:94:20:8c:30:00:b2:56:c5:c8:a4:1f:c5:88:d5:c7:
         06:9f:2f:95:07:2e:1e:a9:78:9a:c5:6d:1d:d2:d1:69:6c:c6:
         97:59:63:8d:0c:08:b0:57:44:e9:cf:5e:40:ed:57:a8:44:5a:
         6f:cd:57:f8:c5:c6:85:97:95:1c:6e:de:9f:40:b5:14:23:cf:
         19:a5:7d:f9:83:97:bc:86:6f:8b:f6:8d:0e:89:02:95:53:f6:
         93:7f:99:12:fd:84:ed:1f:d1:72:8d:3f:c4:75:ac:62:b3:d3:
         2d:58:e3:51:c6:cf:b3:09:b9:bb:c1:50:34:5b:d2:c8:65:bf:
         36:11:ef:8b:a8:85:37:d4:3e:0f:df:23:04:4d:b8:b4:ba:50:
         86:38:42:25:1a:b7:62:e8:5e:73:f5:8f:01:00:55:92:7b:cb:
         77:27:ad:b1:1b:9d:92:3e:6c:3e:f0:03:eb:e8:5f:f9:43:7f:
         fe:65:fc:0c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElz3veLO2Lc0C1Bh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
MTU4NGZjMTgtZTUyYi00MzA2LWI1M2ItOTVmZDk4MzRhNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtXTBfhgxwA7uQ3fD2dhp0pCkZnsnMTaXJv6
dQwDvxVuTjr9U78BG2cCc7cGugfqpGGbm5QHiDPEEXQYDlLJKrRzcQjSqcElvkTq
3JD4ZrlYXnq4IhtyG8lttSX9X0+p7wLbjTgsEBy0MGgFovpQxuTj/UTAus0OAuer
VQdQjzBiGkApGZkA4f6NLLwTQsGpjvd87XV8x5hRkDo7A7sOTRM2aI9m8J8bNFs+
ZL5Va4AqgZNMY+sAKCZjzdhe4idxJCoQG3u5QYvUSjlG5KGL6dJOLuJKmjOMcU90
LoH/ZkuEzTg7T+WDsZn6E+TxpKTYZpn/LjVqcN9fEOptnMBvbQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLcTDBe62+0oxn3ofeiNh3zYXg9wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFmMWQ2YjYtOThkMC0z
YWU0LTgzNmMtZTE5MzJiY2JjYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+GTK50uz+PZL02EwFDxaegTclcTxmoyWZIh+ZOyEEwK8DsMb7Q/+d
cKKwkJNjTCKOG305A6xLzqfaMYjKFB1aDmbkNfhG6fQbHIaUIIwwALJWxcikH8WI
1ccGny+VBy4eqXiaxW0d0tFpbMaXWWONDAiwV0Tpz15A7VeoRFpvzVf4xcaFl5Uc
bt6fQLUUI88ZpX35g5e8hm+L9o0OiQKVU/aTf5kS/YTtH9FyjT/Edaxis9MtWONR
xs+zCbm7wVA0W9LIZb82Ee+LqIU31D4P3yMETbi0ulCGOEIlGrdi6F5z9Y8BAFWS
e8t3J62xG52SPmw+8APr6F/5Q3/+ZfwM
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:03:28 2025 by rpki-client