Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccece16a-8e78-33e8-b5d9-be9eb0738885.roa
File:                     ccece16a-8e78-33e8-b5d9-be9eb0738885.roa (raw, json)
Hash identifier:          2T4QSFVVP4GdBjPvBLFxUlOxjH/qVDdVQ4mBWxpS85E=
Subject key identifier:   11:AD:62:B7:90:F8:82:3E:EC:85:35:CA:32:81:78:EF:87:2D:CC:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D0E9AD22B6BAB6C1A3A4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccece16a-8e78-33e8-b5d9-be9eb0738885.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     397205
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d0:e9:ad:22:b6:ba:b6:c1:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=8d82b4ca-c843-4db4-877f-24cad9e5809d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:05:31:e2:54:5f:c7:e8:b7:eb:b7:97:58:dd:
                    f3:07:98:90:8e:e7:22:8d:dc:a5:30:7b:c2:9e:f2:
                    5e:49:b0:53:6f:65:b7:98:0f:9c:fa:9d:a2:6b:40:
                    18:14:64:a2:93:83:a6:57:d4:f0:51:05:93:57:e1:
                    2b:c0:01:59:c9:ba:e2:58:a4:b5:95:37:8a:01:96:
                    46:05:af:f8:ef:84:d8:7a:0c:94:55:d0:31:5d:bf:
                    1d:1d:bb:9e:7c:4e:15:25:ad:29:09:1e:70:5f:e0:
                    f0:d9:d7:70:46:72:5a:c0:be:ab:9b:7d:ee:61:69:
                    ef:b7:04:45:c8:49:bc:61:ee:e5:4f:fd:dc:8e:20:
                    0a:08:c0:fb:7e:e8:62:ee:bd:fb:7b:78:72:fb:dc:
                    38:70:43:6d:e6:87:a2:2d:8c:3f:02:84:97:71:a4:
                    db:fe:0e:85:01:93:67:fb:f3:d7:f6:5d:08:5e:da:
                    84:b8:a1:39:eb:e0:60:71:d5:15:b4:57:dc:18:fe:
                    0c:9e:dc:fa:3a:db:84:f2:84:75:8e:a2:30:3d:ad:
                    c7:b9:49:fc:96:61:cc:4e:01:98:ac:15:f4:09:68:
                    ea:5e:cc:f2:af:fc:2b:ef:48:98:7d:8c:f1:73:31:
                    50:a8:3e:cb:74:c4:d0:13:fb:1a:bb:04:91:d6:9f:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:62:B7:90:F8:82:3E:EC:85:35:CA:32:81:78:EF:87:2D:CC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccece16a-8e78-33e8-b5d9-be9eb0738885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:46:67:d6:04:67:1b:4c:11:db:ae:24:05:b0:3e:5e:95:
         57:05:ba:1c:0e:05:e6:bf:6d:1d:3e:f9:47:43:17:12:26:b3:
         83:36:d4:80:6e:b2:08:16:01:ea:f7:1a:f5:cb:1c:e9:2b:60:
         02:24:89:70:b3:c7:42:4b:0a:ba:31:bd:aa:9a:96:00:f0:95:
         07:7e:97:72:00:b8:48:29:c0:43:3f:b8:d7:b0:39:33:01:6c:
         68:32:53:d0:95:00:d6:2d:01:c9:ab:93:5c:21:f6:80:2d:15:
         37:b7:67:16:7a:7f:83:4a:a6:d7:e1:7a:e9:29:ca:8e:d9:06:
         7c:9e:fd:ae:14:cb:1d:3b:7d:bc:d6:c1:b4:4c:0d:ab:f7:67:
         89:17:61:dc:d9:cb:5e:da:19:26:10:db:ba:a7:a8:c2:83:7f:
         69:6a:9b:c8:5d:4e:18:e4:5a:59:b8:5a:6a:f1:22:4e:97:a0:
         26:44:25:a9:c9:bb:26:c3:e2:d8:28:4d:56:d5:f0:ab:e5:5f:
         08:d3:46:29:62:04:c9:91:f2:79:b2:d1:87:7a:ff:fb:e9:ce:
         d4:7a:56:3c:0f:03:d5:df:5c:e2:fa:15:d8:67:19:46:a6:9e:
         05:74:87:77:33:b6:fb:22:c2:11:f8:37:72:e9:0b:17:89:f1:
         52:c1:a2:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tDprSK2urbBo6QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
OGQ4MmI0Y2EtYzg0My00ZGI0LTg3N2YtMjRjYWQ5ZTU4MDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAUx4lRfx+i367eXWN3zB5iQjucijdylMHvC
nvJeSbBTb2W3mA+c+p2ia0AYFGSik4OmV9TwUQWTV+ErwAFZybriWKS1lTeKAZZG
Ba/474TYegyUVdAxXb8dHbuefE4VJa0pCR5wX+Dw2ddwRnJawL6rm33uYWnvtwRF
yEm8Ye7lT/3cjiAKCMD7fuhi7r37e3hy+9w4cENt5oeiLYw/AoSXcaTb/g6FAZNn
+/PX9l0IXtqEuKE56+BgcdUVtFfcGP4Mntz6OtuE8oR1jqIwPa3HuUn8lmHMTgGY
rBX0CWjqXszyr/wr70iYfYzxczFQqD7LdMTQE/sauwSR1p/kswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBGtYreQ+II+7IU1yjKBeO+HLcx/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NlY2UxNmEtOGU3OC0z
M2U4LWI1ZDktYmU5ZWIwNzM4ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAH/0Zn1gRnG0wR264kBbA+XpVXBbocDgXmv20dPvlHQxcSJrODNtSA
brIIFgHq9xr1yxzpK2ACJIlws8dCSwq6Mb2qmpYA8JUHfpdyALhIKcBDP7jXsDkz
AWxoMlPQlQDWLQHJq5NcIfaALRU3t2cWen+DSqbX4XrpKcqO2QZ8nv2uFMsdO328
1sG0TA2r92eJF2Hc2cte2hkmENu6p6jCg39papvIXU4Y5FpZuFpq8SJOl6AmRCWp
ybsmw+LYKE1W1fCr5V8I00YpYgTJkfJ5stGHev/76c7UelY8DwPV31zi+hXYZxlG
pp4FdId3M7b7IsIR+Ddy6QsXifFSwaKm
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:47 2025 by rpki-client