Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d770434b-7c27-333a-9b03-c4cc5c7a2887.roa
File:                     d770434b-7c27-333a-9b03-c4cc5c7a2887.roa (raw, json)
Hash identifier:          JMuCcnoc0kvBlYCCgRMVkIFz8i5noJE0qSPy53zq8AE=
Subject key identifier:   43:89:4C:AA:92:FD:8A:D2:99:2D:48:EE:F5:27:42:DC:E6:F0:FD:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DCA98050CA47F021F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d770434b-7c27-333a-9b03-c4cc5c7a2887.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396575
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:dc:a9:80:50:ca:47:f0:21:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ad542211-b6ca-4342-bf15-af76af83c258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:b4:e0:c8:ec:f2:9d:87:02:1b:34:75:83:
                    69:81:58:7c:93:88:8e:fb:46:ae:90:a9:8c:8a:97:
                    c0:b3:39:bc:a2:0d:e7:df:6a:c5:d7:13:36:c3:cc:
                    3f:53:32:b4:41:e6:33:d3:b4:52:a4:f6:3d:3e:47:
                    52:84:3e:74:61:71:53:8c:97:65:d7:a9:3b:0f:2e:
                    cb:e5:9f:18:9d:a5:27:5b:ba:b5:26:b0:bc:98:d5:
                    62:af:8a:95:3f:de:e8:dd:d7:a7:10:d1:88:7d:dd:
                    8a:b4:a0:4e:99:23:73:27:75:d5:64:ae:9b:fe:99:
                    5f:b9:94:5f:ad:82:ee:c7:ba:d8:22:fc:ee:b7:ca:
                    c5:47:e4:3e:a0:c2:1e:64:18:01:88:d9:90:49:d9:
                    cb:76:18:85:bc:e9:6b:14:ae:ff:64:e5:41:27:a2:
                    f9:28:1b:02:45:0d:fe:65:be:f4:e1:59:b5:61:1e:
                    eb:1b:44:d3:49:67:40:10:4b:d4:d0:80:14:e7:41:
                    14:5f:96:7a:d2:56:e3:b3:3c:31:b2:18:b3:b3:89:
                    f3:ba:23:21:4b:4e:d6:5d:29:5a:c1:3a:48:3f:b4:
                    42:e3:ec:ff:54:5d:82:5e:e0:1c:c2:3d:ac:ff:84:
                    94:88:7c:4e:d2:71:13:d0:dd:f1:f5:43:d3:3a:8a:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:4C:AA:92:FD:8A:D2:99:2D:48:EE:F5:27:42:DC:E6:F0:FD:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d770434b-7c27-333a-9b03-c4cc5c7a2887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:56:df:f8:ac:a6:44:41:00:0b:44:03:9e:b3:67:10:fc:
         64:73:b0:e3:ff:a9:55:ac:3c:ec:6c:b5:4f:dd:e4:f7:74:2b:
         68:05:ad:b3:86:82:f9:f7:ce:0e:5e:e1:4c:89:f3:da:e6:a2:
         50:69:73:36:ce:3d:45:df:ad:0d:5b:6c:91:31:f4:c7:48:b1:
         64:18:91:48:aa:42:6e:77:8e:1b:d4:b6:ee:03:0a:28:6d:d6:
         a5:99:14:c2:cc:39:70:11:dd:12:70:79:89:37:11:5f:8c:be:
         4f:c8:ed:89:a8:57:6a:f0:a9:eb:05:49:64:50:af:ff:c8:85:
         a8:4d:af:10:31:7f:09:fe:de:29:d6:75:f9:c5:83:c6:e6:6f:
         45:82:d1:43:71:8c:2e:07:b4:1c:ba:4b:ab:be:27:38:d4:25:
         c4:e0:79:89:e9:2b:fc:e3:08:61:4b:87:83:9b:de:3a:81:27:
         4f:39:71:47:15:9b:ed:f2:a9:43:98:3e:a2:c2:44:d2:4a:4a:
         63:92:f1:a5:c4:b8:58:c0:cb:12:c7:25:79:45:6e:93:71:79:
         07:03:4e:71:b9:bd:63:47:0c:76:52:85:4c:e0:98:e5:fb:be:
         a4:6c:45:60:f9:d5:88:87:a7:17:9d:e9:5a:da:22:d1:cd:5a:
         db:84:e8:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9ypgFDKR/Ah8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWQ1NDIyMTEtYjZjYS00MzQyLWJmMTUtYWY3NmFmODNjMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8G04Mjs8p2HAhs0dYNpgVh8k4iO+0aukKmM
ipfAszm8og3n32rF1xM2w8w/UzK0QeYz07RSpPY9PkdShD50YXFTjJdl16k7Dy7L
5Z8YnaUnW7q1JrC8mNVir4qVP97o3denENGIfd2KtKBOmSNzJ3XVZK6b/plfuZRf
rYLux7rYIvzut8rFR+Q+oMIeZBgBiNmQSdnLdhiFvOlrFK7/ZOVBJ6L5KBsCRQ3+
Zb704Vm1YR7rG0TTSWdAEEvU0IAU50EUX5Z60lbjszwxshizs4nzuiMhS07WXSla
wTpIP7RC4+z/VF2CXuAcwj2s/4SUiHxO0nET0N3x9UPTOoooUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEOJTKqS/YrSmS1I7vUnQtzm8P3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc3MDQzNGItN2MyNy0z
MzNhLTliMDMtYzRjYzVjN2EyODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAualbf+KymREEAC0QDnrNnEPxkc7Dj/6lVrDzsbLVP3eT3dCtoBa2z
hoL5984OXuFMifPa5qJQaXM2zj1F360NW2yRMfTHSLFkGJFIqkJud44b1LbuAwoo
bdalmRTCzDlwEd0ScHmJNxFfjL5PyO2JqFdq8KnrBUlkUK//yIWoTa8QMX8J/t4p
1nX5xYPG5m9FgtFDcYwuB7Qcukurvic41CXE4HmJ6Sv84whhS4eDm946gSdPOXFH
FZvt8qlDmD6iwkTSSkpjkvGlxLhYwMsSxyV5RW6TcXkHA05xub1jRwx2UoVM4Jjl
+76kbEVg+dWIh6cXnela2iLRzVrbhOg2
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:18 2025 by rpki-client