Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0a355c7-ec86-37d4-b93a-7af019d00000.roa
File:                     c0a355c7-ec86-37d4-b93a-7af019d00000.roa (raw, json)
Hash identifier:          DGtXv+phRitvJ2I4Wd/PtkeWwpvTrVZkkz7uIZGczeE=
Subject key identifier:   30:3E:C7:7D:06:ED:86:F0:89:86:B1:0B:91:F2:49:BF:C9:F0:7C:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6CA080B35989ED9579940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0a355c7-ec86-37d4-b93a-7af019d00000.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396579
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ca:08:0b:35:98:9e:d9:57:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=cbf940c4-1a31-4142-b74b-31a41cd59357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:58:56:63:d4:8b:a1:1b:41:24:75:31:4e:d2:
                    9b:b1:61:7a:f5:bb:f5:13:71:ba:f8:6a:4f:1f:f6:
                    a1:c9:88:91:cc:61:da:19:9f:66:f8:60:2f:76:2e:
                    cf:62:e7:6e:a4:eb:3c:6f:00:83:17:c5:44:dc:01:
                    2a:7a:39:31:82:35:33:80:c6:15:7b:d0:cf:4a:da:
                    21:81:55:ca:b3:29:5e:32:99:07:09:9e:ee:8e:54:
                    58:83:8b:6c:dd:aa:4a:12:54:a8:b1:ba:dc:5f:58:
                    b3:7b:01:e1:d1:ec:78:39:da:7b:f9:4d:fd:f8:72:
                    80:e9:f4:b4:16:d8:e8:92:73:34:34:c4:a5:de:bb:
                    36:a7:d3:ac:39:4f:bf:a6:0f:2d:01:9a:d2:22:6f:
                    ba:86:e3:63:23:54:05:6c:ab:e1:bd:53:d3:7d:ad:
                    bd:43:d5:1d:8f:26:5c:8c:90:03:83:b5:5b:8c:90:
                    d4:c1:83:96:81:d9:4c:ac:36:51:44:c6:e2:1a:c0:
                    50:ee:b2:cb:0f:15:e2:4f:6e:1a:c3:a9:69:13:d5:
                    47:52:72:ca:ab:d9:91:63:4c:de:75:7d:82:f7:89:
                    ff:c3:01:48:d1:e2:ba:b6:72:a0:6e:fc:56:e0:1d:
                    62:e9:6c:7d:54:ac:86:dd:b6:4d:be:e5:13:06:08:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3E:C7:7D:06:ED:86:F0:89:86:B1:0B:91:F2:49:BF:C9:F0:7C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0a355c7-ec86-37d4-b93a-7af019d00000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:73:b6:ae:1e:12:b0:7d:d4:5e:20:1c:72:b5:87:74:55:4f:
         68:89:2e:e9:aa:b7:ea:86:b8:db:fe:eb:8f:1b:cb:6c:99:a1:
         df:6c:4d:48:78:0e:aa:d3:3f:54:e4:bb:dd:61:16:34:07:65:
         3a:53:8a:32:10:f5:e5:0b:a9:43:4d:2a:7c:fd:1e:92:c7:25:
         6d:7a:8a:64:2a:fe:57:b1:7e:d9:9a:43:f3:d8:7c:c7:65:a5:
         a5:99:85:45:c3:0b:25:8b:42:82:78:d0:3b:4a:a4:c2:b5:fc:
         c7:55:ed:f4:6f:e1:b9:0b:ba:b7:85:5c:dc:93:8e:4d:a4:38:
         66:7c:44:bf:42:47:b8:e2:1c:48:b1:d1:2d:0e:16:99:66:e3:
         8b:b5:06:62:ce:2b:ea:bc:f6:c5:de:7c:c0:e5:99:07:0b:5b:
         90:18:41:27:55:a2:f6:79:37:59:0d:ff:b0:47:37:d9:31:2e:
         f9:5a:28:db:0c:4d:56:df:b2:af:fa:b3:8f:23:bf:03:18:02:
         b7:d2:81:b5:c0:3f:91:dc:8a:51:a6:01:12:3d:15:5d:9f:53:
         d1:17:fb:0b:8a:91:6c:fb:47:3d:ba:57:87:ff:95:fe:cb:35:
         ce:24:8e:42:64:5f:e3:2c:26:fe:89:34:ac:a5:ef:22:1f:35:
         6f:72:13:e6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr+5soICzWYntlXmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
Y2JmOTQwYzQtMWEzMS00MTQyLWI3NGItMzFhNDFjZDU5MzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFhWY9SLoRtBJHUxTtKbsWF69bv1E3G6+GpP
H/ahyYiRzGHaGZ9m+GAvdi7PYudupOs8bwCDF8VE3AEqejkxgjUzgMYVe9DPStoh
gVXKsyleMpkHCZ7ujlRYg4ts3apKElSosbrcX1izewHh0ex4Odp7+U39+HKA6fS0
FtjoknM0NMSl3rs2p9OsOU+/pg8tAZrSIm+6huNjI1QFbKvhvVPTfa29Q9UdjyZc
jJADg7VbjJDUwYOWgdlMrDZRRMbiGsBQ7rLLDxXiT24aw6lpE9VHUnLKq9mRY0ze
dX2C94n/wwFI0eK6tnKgbvxW4B1i6Wx9VKyG3bZNvuUTBgjglwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDA+x30G7YbwiYaxC5HySb/J8HzlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzBhMzU1YzctZWM4Ni0z
N2Q0LWI5M2EtN2FmMDE5ZDAwMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCnc7auHhKwfdReIBxytYd0VU9oiS7pqrfqhrjb/uuPG8tsmaHfbE1I
eA6q0z9U5LvdYRY0B2U6U4oyEPXlC6lDTSp8/R6SxyVteopkKv5XsX7ZmkPz2HzH
ZaWlmYVFwwsli0KCeNA7SqTCtfzHVe30b+G5C7q3hVzck45NpDhmfES/Qke44hxI
sdEtDhaZZuOLtQZizivqvPbF3nzA5ZkHC1uQGEEnVaL2eTdZDf+wRzfZMS75Wijb
DE1W37Kv+rOPI78DGAK30oG1wD+R3IpRpgESPRVdn1PRF/sLipFs+0c9uleH/5X+
yzXOJI5CZF/jLCb+iTSspe8iHzVvchPm
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:27 2025 by rpki-client