Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa
File:                     ebb2ceae-320c-336b-bf49-95fc0448750d.roa (raw, json)
Hash identifier:          GDxiL5PwA08E2pF99qDYZhvz4hqt6JC9+I84OH3XdO4=
Subject key identifier:   69:F7:7B:EE:89:E2:D9:EE:F8:DF:68:A4:FB:CD:CB:A4:72:A7:D2:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0FAA2B67F9023AD54308
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396558
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0f:aa:2b:67:f9:02:3a:d5:43:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=78123bc6-3266-43b4-a5d9-85e2c81d20b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:e4:97:18:cf:78:83:dd:cd:48:51:4e:f2:
                    e7:8e:66:be:7c:69:7e:fa:96:bb:8d:84:90:ee:0e:
                    07:f1:38:b1:3c:f8:5d:61:b4:53:8f:22:0e:fe:ae:
                    01:bc:b1:67:0d:85:2e:eb:b4:21:65:78:f1:65:aa:
                    93:58:c2:b5:47:6b:c5:93:79:bb:c2:0f:3d:37:56:
                    ac:5b:ab:ac:f2:28:c2:29:32:4a:d4:cc:d1:0b:47:
                    e1:db:2a:ae:79:48:48:f2:f7:27:ca:cb:9c:14:75:
                    62:fb:f9:8e:81:b6:21:b3:23:f3:5e:94:18:40:5f:
                    42:2c:fb:7e:76:d5:ec:53:11:12:f7:d7:35:92:48:
                    a3:66:0f:85:55:52:47:c5:ce:4e:42:f0:b0:9f:b0:
                    57:3f:b1:5c:61:0c:3c:f5:6e:95:83:a9:8b:9b:56:
                    73:d4:f5:56:d3:11:46:82:62:53:a0:6b:bd:9e:3b:
                    81:26:59:9a:ab:dd:de:83:c3:88:de:b3:98:ff:f4:
                    83:df:a5:dd:fb:7f:88:df:7f:c8:45:70:68:fd:1c:
                    a8:0c:58:91:bd:15:2a:c0:3a:10:6d:8b:e2:fa:1f:
                    d6:0a:34:ae:34:13:2b:e6:01:2d:ad:b0:fc:b1:3b:
                    0d:3e:52:d0:40:d4:a3:23:58:55:b4:ad:c8:5b:54:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F7:7B:EE:89:E2:D9:EE:F8:DF:68:A4:FB:CD:CB:A4:72:A7:D2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:36:d2:2b:b6:43:20:11:7d:9b:b2:d9:df:a9:b7:88:98:c2:
         4a:7d:bd:3c:20:8c:2f:9d:bd:de:72:0e:9b:40:59:5d:b9:2a:
         5e:84:82:0c:71:79:ef:a5:53:a8:3f:57:41:3d:fa:b6:b6:0c:
         e6:73:83:2f:a7:db:a6:fb:7e:32:ea:b2:09:9f:3a:ec:25:ad:
         e6:c9:11:76:28:c8:ef:ba:76:b5:43:a9:76:a9:c6:e7:bf:67:
         a8:ea:35:0a:dd:ee:8e:59:56:d1:48:82:1a:d8:66:98:57:41:
         90:6b:37:b1:42:70:1d:2a:01:13:a5:86:80:8a:eb:b2:9e:52:
         04:67:fd:75:ea:21:7e:3d:86:76:35:79:33:a7:42:e2:08:bd:
         79:0f:20:0b:7a:0e:35:ef:11:fc:d7:00:a9:62:f3:56:0d:90:
         82:e6:db:ca:d0:81:63:4e:96:06:5f:03:8f:02:30:77:4c:6a:
         fa:65:da:70:86:4b:cc:bd:0e:44:22:d7:85:49:12:0f:57:c7:
         eb:60:38:9e:10:87:d4:0b:55:48:f8:fe:5b:d4:5e:30:52:b4:
         3a:28:12:f0:fb:e4:32:7a:70:87:82:c6:ba:82:6b:75:8e:b1:
         63:4c:9e:03:3b:55:84:e1:87:e1:d3:32:e0:4f:64:d4:12:c8:
         56:52:48:fe
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2w+qK2f5AjrVQwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NzgxMjNiYzYtMzI2Ni00M2I0LWE1ZDktODVlMmM4MWQyMGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7fklxjPeIPdzUhRTvLnjma+fGl++pa7jYSQ
7g4H8TixPPhdYbRTjyIO/q4BvLFnDYUu67QhZXjxZaqTWMK1R2vFk3m7wg89N1as
W6us8ijCKTJK1MzRC0fh2yqueUhI8vcnysucFHVi+/mOgbYhsyPzXpQYQF9CLPt+
dtXsUxES99c1kkijZg+FVVJHxc5OQvCwn7BXP7FcYQw89W6Vg6mLm1Zz1PVW0xFG
gmJToGu9njuBJlmaq93eg8OI3rOY//SD36Xd+3+I33/IRXBo/RyoDFiRvRUqwDoQ
bYvi+h/WCjSuNBMr5gEtrbD8sTsNPlLQQNSjI1hVtK3IW1RtNQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGn3e+6J4tnu+N9opPvNy6Ryp9J9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWJiMmNlYWUtMzIwYy0z
MzZiLWJmNDktOTVmYzA0NDg3NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAmNtIrtkMgEX2bstnfqbeImMJKfb08IIwvnb3ecg6bQFlduSpehIIM
cXnvpVOoP1dBPfq2tgzmc4Mvp9um+34y6rIJnzrsJa3myRF2KMjvuna1Q6l2qcbn
v2eo6jUK3e6OWVbRSIIa2GaYV0GQazexQnAdKgETpYaAiuuynlIEZ/116iF+PYZ2
NXkzp0LiCL15DyALeg417xH81wCpYvNWDZCC5tvK0IFjTpYGXwOPAjB3TGr6Zdpw
hkvMvQ5EIteFSRIPV8frYDieEIfUC1VI+P5b1F4wUrQ6KBLw++QyenCHgsa6gmt1
jrFjTJ4DO1WE4Yfh0zLgT2TUEshWUkj+
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:14 2025 by rpki-client