Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c89ce8f6-3302-3b61-a6c7-1e0e0884afa5.roa
File:                     c89ce8f6-3302-3b61-a6c7-1e0e0884afa5.roa (raw, json)
Hash identifier:          evWuuBC7HcLbclaiKLKXN2domlZWbVhxIrDP8limhm4=
Subject key identifier:   62:04:93:DF:C3:D4:22:B4:72:5A:97:6D:1B:4E:D2:C2:C6:44:8C:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C09222D7FC777682677FA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c89ce8f6-3302-3b61-a6c7-1e0e0884afa5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396610
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:22:2d:7f:c7:77:68:26:77:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=9ae89500-a644-4f51-83dc-9b74e281f70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:88:94:16:91:0d:54:b9:34:d8:12:9f:c4:
                    51:f7:24:2f:78:ae:d7:72:48:dd:f1:a4:80:0e:dc:
                    53:ca:4e:f9:14:fb:ae:0f:43:d1:48:6c:df:00:75:
                    5e:91:0a:39:9f:39:22:d4:14:fa:21:e1:c3:26:81:
                    29:fd:52:22:d9:60:7f:ba:0b:a8:34:51:09:fc:ee:
                    88:a8:c3:75:8a:c8:a0:bf:77:7d:33:0d:37:70:97:
                    ab:2a:91:c2:1e:e8:08:65:b5:a3:f2:64:97:24:f8:
                    c3:33:37:0c:c7:e2:76:c8:2b:7b:08:0c:d3:a1:d4:
                    b5:52:4b:b3:d6:6f:28:c6:36:82:08:e4:ee:49:57:
                    f7:ce:e5:16:4e:df:a4:e0:39:2e:cd:c7:bd:5c:31:
                    f5:ed:85:c2:f4:4b:43:71:f6:d6:df:c3:39:65:d2:
                    69:a4:79:28:86:e8:bc:81:0b:c1:aa:80:08:e1:d9:
                    81:45:0a:f9:58:f6:62:d1:78:95:98:66:4f:0f:f0:
                    c9:45:49:fd:04:48:05:2d:72:c6:bc:f5:08:b6:81:
                    53:c6:33:a8:0e:19:e0:15:cb:13:7f:e7:df:c4:58:
                    e8:04:eb:ee:26:84:3d:65:c8:3f:47:59:e5:6c:20:
                    f8:a5:14:54:8b:b8:17:07:e0:a2:aa:09:89:d2:5d:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:04:93:DF:C3:D4:22:B4:72:5A:97:6D:1B:4E:D2:C2:C6:44:8C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c89ce8f6-3302-3b61-a6c7-1e0e0884afa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:9b:73:c2:03:70:a1:d8:c1:02:8c:cd:54:08:92:45:bd:bd:
         16:f6:ea:01:2b:84:34:9f:4c:d4:86:8e:0f:d2:dc:5a:4a:a4:
         e0:c7:f8:6c:83:05:09:48:29:13:a3:c6:45:aa:9d:38:0f:f6:
         b2:4b:1f:c5:19:42:c8:5d:dd:92:2d:24:2a:07:00:f0:58:79:
         5e:d1:b8:eb:f9:d3:1b:5b:aa:e5:09:dd:31:64:d4:28:17:5f:
         69:be:15:12:4d:39:00:12:a1:7f:bf:1b:a4:8d:1c:02:77:3a:
         9b:52:fa:4d:82:ed:6d:e3:4e:1a:16:c3:9a:46:a8:7f:4e:dc:
         a4:b7:c5:b8:bf:6b:85:d0:67:3e:ee:50:75:ac:d9:08:1a:99:
         10:57:cf:02:e3:c3:b0:a4:73:95:ca:a7:d6:4f:a4:35:81:46:
         98:66:a1:01:51:63:5b:7c:ca:01:84:5f:ea:6e:18:61:fd:1d:
         36:0b:4e:93:bd:c9:cf:c0:d8:2f:0e:2e:a7:2f:85:3c:5a:27:
         f4:0f:c2:11:9b:14:3b:0f:b8:a5:ef:d0:3d:be:e5:d4:f2:83:
         94:39:8e:1c:24:78:f3:7c:6e:10:56:44:de:bf:09:d5:9d:a6:
         46:5c:b9:76:06:6c:f2:e1:7c:5c:78:46:5a:9c:36:af:ea:5d:
         12:90:d4:79
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMCSItf8d3aCZ3+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
OWFlODk1MDAtYTY0NC00ZjUxLTgzZGMtOWI3NGUyODFmNzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1OIlBaRDVS5NNgSn8RR9yQveK7Xckjd8aSA
DtxTyk75FPuuD0PRSGzfAHVekQo5nzki1BT6IeHDJoEp/VIi2WB/uguoNFEJ/O6I
qMN1isigv3d9Mw03cJerKpHCHugIZbWj8mSXJPjDMzcMx+J2yCt7CAzTodS1Ukuz
1m8oxjaCCOTuSVf3zuUWTt+k4Dkuzce9XDH17YXC9EtDcfbW38M5ZdJppHkohui8
gQvBqoAI4dmBRQr5WPZi0XiVmGZPD/DJRUn9BEgFLXLGvPUItoFTxjOoDhngFcsT
f+ffxFjoBOvuJoQ9Zcg/R1nlbCD4pRRUi7gXB+CiqgmJ0l1GzwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGIEk9/D1CK0clqXbRtO0sLGRIx6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg5Y2U4ZjYtMzMwMi0z
YjYxLWE2YzctMWUwZTA4ODRhZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCcm3PCA3Ch2MECjM1UCJJFvb0W9uoBK4Q0n0zUho4P0txaSqTgx/hs
gwUJSCkTo8ZFqp04D/aySx/FGULIXd2SLSQqBwDwWHle0bjr+dMbW6rlCd0xZNQo
F19pvhUSTTkAEqF/vxukjRwCdzqbUvpNgu1t404aFsOaRqh/Ttykt8W4v2uF0Gc+
7lB1rNkIGpkQV88C48OwpHOVyqfWT6Q1gUaYZqEBUWNbfMoBhF/qbhhh/R02C06T
vcnPwNgvDi6nL4U8Wif0D8IRmxQ7D7il79A9vuXU8oOUOY4cJHjzfG4QVkTevwnV
naZGXLl2Bmzy4XxceEZanDav6l0SkNR5
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:35:40 2025 by rpki-client