Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa
File:                     e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa (raw, json)
Hash identifier:          StDsM4cO1uQByrmAtSBwR8Pb6o5c4F9MH/V8fELHryc=
Subject key identifier:   BA:60:00:DE:07:F4:93:46:8A:00:27:4E:BA:A9:F9:3B:6A:FA:D5:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584953C4522CA84FD6F1F5DA0C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396572
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:52:2c:a8:4f:d6:f1:f5:da:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=e656875f-a72b-4b4e-9ad7-ddd75c03c7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:8a:d7:59:18:8f:af:0f:31:52:3d:e7:29:
                    aa:61:d5:7f:5b:df:51:21:c4:b8:d3:e7:99:9c:1a:
                    b1:04:75:c5:1c:84:3b:60:35:94:29:61:47:5b:ff:
                    a0:a1:03:8c:5e:03:f3:b0:6f:e7:a6:90:10:f4:ef:
                    d1:62:7a:70:27:43:62:53:01:40:41:72:58:8e:d4:
                    2a:6f:a2:7a:de:9e:94:c5:f5:eb:eb:5a:73:ca:5b:
                    03:ba:e4:e8:57:11:38:37:7b:46:bc:77:f3:34:17:
                    db:c7:92:67:45:23:12:6b:a1:d3:a7:67:46:3c:a5:
                    13:46:fe:53:cc:0d:ab:59:14:1b:93:76:88:56:86:
                    c0:e3:77:19:05:18:0c:d6:86:a4:a7:5f:82:98:a5:
                    57:bb:61:48:21:88:df:02:0e:71:e7:ab:bd:19:5a:
                    66:d7:56:a9:6e:83:73:26:fc:e7:be:62:83:da:dc:
                    ba:64:7e:33:c9:81:8b:c5:a8:af:80:36:bb:fe:b1:
                    1f:08:8b:bc:55:a6:73:02:39:b8:8c:9c:03:6a:10:
                    bc:ae:86:dd:d9:f6:a4:04:35:1a:35:3b:b6:f3:c4:
                    c1:7f:79:20:7c:ca:e2:8d:c8:2a:77:0c:b6:32:c6:
                    db:ce:11:80:d5:2d:8c:d7:1a:46:0f:86:85:16:b9:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:00:DE:07:F4:93:46:8A:00:27:4E:BA:A9:F9:3B:6A:FA:D5:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:81:40:f2:c0:59:4e:2d:df:bb:32:13:a7:d1:a2:8c:7f:a2:
         58:ad:68:6c:89:c7:9b:23:2c:e1:b1:ff:42:46:30:4f:ba:60:
         1c:41:71:c7:28:43:28:85:66:f1:c1:46:e4:be:2e:0b:43:54:
         0e:e6:70:4d:df:10:05:d4:e0:ad:bf:fc:38:82:b9:dc:97:8e:
         b6:58:f0:43:38:58:3a:71:59:69:0b:f5:6c:24:ea:2e:2e:48:
         3c:c8:6a:61:75:f1:96:cb:e5:d8:c9:14:c5:84:77:18:7e:94:
         d7:a0:12:a7:99:93:ed:e9:40:f5:25:ec:91:0f:e0:37:12:82:
         b8:1c:90:0e:31:81:a0:46:0c:43:a6:92:63:e5:5a:8d:6a:e6:
         3e:4a:27:43:65:65:bc:44:33:bd:c7:c0:44:0c:5f:c5:b9:a8:
         59:b6:8e:54:d3:26:73:86:43:38:71:b2:73:17:1d:4e:99:9b:
         b5:68:ae:c5:bf:12:c8:79:b3:f1:ac:c6:04:85:89:e0:a1:e0:
         2d:da:a8:34:14:47:3f:ef:ad:43:91:93:c5:09:f0:cf:ba:b8:
         04:90:3a:63:6c:4d:3a:37:7d:13:c5:1e:f0:f4:85:b9:0b:79:
         4d:b1:4d:57:14:2d:5c:87:cb:9d:b4:25:ea:11:c1:43:76:56:
         3b:40:11:1f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxFIsqE/W8fXaDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTY1Njg3NWYtYTcyYi00YjRlLTlhZDctZGRkNzVjMDNjN2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypWK11kYj68PMVI95ymqYdV/W99RIcS40+eZ
nBqxBHXFHIQ7YDWUKWFHW/+goQOMXgPzsG/nppAQ9O/RYnpwJ0NiUwFAQXJYjtQq
b6J63p6UxfXr61pzylsDuuToVxE4N3tGvHfzNBfbx5JnRSMSa6HTp2dGPKUTRv5T
zA2rWRQbk3aIVobA43cZBRgM1oakp1+CmKVXu2FIIYjfAg5x56u9GVpm11apboNz
JvznvmKD2ty6ZH4zyYGLxaivgDa7/rEfCIu8VaZzAjm4jJwDahC8robd2fakBDUa
NTu288TBf3kgfMrijcgqdwy2MsbbzhGA1S2M1xpGD4aFFrnuxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLpgAN4H9JNGigAnTrqp+Ttq+tW3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTQ0MjAzZWEtNzA4Zi0z
NmU2LTgxYjItOGZkZDE5ZmI4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAQgUDywFlOLd+7MhOn0aKMf6JYrWhsicebIyzhsf9CRjBPumAcQXHH
KEMohWbxwUbkvi4LQ1QO5nBN3xAF1OCtv/w4grncl462WPBDOFg6cVlpC/VsJOou
Lkg8yGphdfGWy+XYyRTFhHcYfpTXoBKnmZPt6UD1JeyRD+A3EoK4HJAOMYGgRgxD
ppJj5VqNauY+SidDZWW8RDO9x8BEDF/FuahZto5U0yZzhkM4cbJzFx1OmZu1aK7F
vxLIebPxrMYEhYngoeAt2qg0FEc/761DkZPFCfDPurgEkDpjbE06N30TxR7w9IW5
C3lNsU1XFC1ch8udtCXqEcFDdlY7QBEf
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:00:36 2025 by rpki-client