Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc49a7b0-73d7-3f5c-9105-5ce8978e7e21.roa
File:                     fc49a7b0-73d7-3f5c-9105-5ce8978e7e21.roa (raw, json)
Hash identifier:          XBHZ9LGnUTmrE/M6LACViKKhe2exeSliQCndv7Q/cqk=
Subject key identifier:   52:4B:16:B9:16:6D:34:B8:2F:6E:77:07:08:F9:4E:49:F2:72:E1:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844B20C996B09E69C101E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc49a7b0-73d7-3f5c-9105-5ce8978e7e21.roa
Signing time:             Thu 30 Jan 2025 13:46:22 +0000
ROA not before:           Thu 30 Jan 2025 13:46:22 +0000
ROA not after:            Wed 30 Apr 2025 12:46:22 +0000
asID:                     397209
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:4b:20:c9:96:b0:9e:69:c1:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:22 2025 GMT
            Not After : Apr 30 12:46:22 2025 GMT
        Subject: CN=3e11b897-bfbe-4f74-beef-74d9072e7f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:a5:ed:6f:37:33:89:db:c9:aa:5f:8c:d2:
                    a8:f9:06:06:59:8b:09:69:69:36:28:fe:45:71:5e:
                    08:c3:02:e0:0b:35:58:2e:6c:77:ee:cc:23:cc:c5:
                    ff:cf:6b:4d:f9:2c:51:39:62:0b:5a:63:0a:ee:62:
                    a9:9c:ee:f3:ec:c1:28:11:2d:96:f1:20:a6:18:b4:
                    18:17:6d:56:b7:3f:be:77:73:b1:8e:4b:05:d0:69:
                    aa:a0:de:be:c8:d7:d4:6d:47:38:5f:0f:13:2f:c4:
                    bc:9d:50:64:86:ae:7d:30:bd:41:63:3e:9a:06:fb:
                    95:70:f8:a3:72:3d:ff:83:dd:62:2d:89:3b:06:a6:
                    ac:33:d3:89:11:5a:82:f2:dc:c0:9d:88:53:ab:20:
                    42:e8:df:ea:fc:11:81:e1:8e:06:1a:84:58:ba:89:
                    91:c4:a2:dd:4c:3a:3f:5e:e0:24:e0:45:de:d9:19:
                    d9:fa:f8:d1:23:0a:91:9b:ba:0f:65:7d:fd:15:39:
                    5e:67:18:f7:4b:ad:86:1c:57:67:3f:20:79:84:76:
                    00:f8:3a:59:8c:06:ec:10:c7:00:d7:3a:3c:5c:de:
                    27:4a:08:c0:a4:0f:f4:15:01:af:49:bb:48:72:b0:
                    b1:15:64:71:72:eb:d9:a0:88:cc:38:28:7b:69:04:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:16:B9:16:6D:34:B8:2F:6E:77:07:08:F9:4E:49:F2:72:E1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc49a7b0-73d7-3f5c-9105-5ce8978e7e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:99:67:6a:60:f2:7e:93:ca:18:db:42:ea:b5:a5:b2:34:
         0c:fb:d0:4d:77:08:27:dd:af:d9:e0:83:02:fa:02:3b:cb:4e:
         a1:b4:19:b0:50:8d:ea:63:fa:55:e6:d6:29:d7:72:90:de:e6:
         6c:33:5e:69:c3:2a:19:96:60:38:8c:12:6e:3d:bd:43:7a:27:
         b1:ee:74:d3:6a:7b:19:ca:d3:53:a2:ac:59:c2:2c:99:e9:15:
         66:83:bb:82:2b:e8:7e:c2:af:df:a1:d9:f0:a2:74:01:5c:13:
         c3:a3:ef:c4:0d:e9:c0:81:77:21:ab:c0:13:a5:29:3b:09:b3:
         33:87:09:09:16:c7:06:09:fa:db:f6:2b:be:b7:a2:2e:95:e4:
         cd:bc:9d:24:e6:cc:ad:8d:47:85:fa:54:f7:d3:ae:9c:0c:0f:
         c8:8d:2f:2b:84:28:7e:6e:8c:e5:ae:e2:ae:85:0b:8f:19:75:
         57:88:e4:86:bf:38:34:6d:f9:30:4e:19:28:88:a5:55:74:fc:
         27:32:7d:b1:72:d8:d5:e9:37:96:50:86:25:12:6d:87:29:21:
         4b:e6:21:69:35:a1:4a:8c:52:1e:8a:99:5d:2f:1d:1f:c7:7e:
         07:36:ea:11:e3:d1:ff:7e:f0:a6:46:0a:8b:c3:a2:f4:23:74:
         37:f1:63:aa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hEsgyZawnmnBAeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYyMloXDTI1MDQzMDEyNDYyMlowLzEtMCsGA1UEAxMk
M2UxMWI4OTctYmZiZS00Zjc0LWJlZWYtNzRkOTA3MmU3ZjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyul7W83M4nbyapfjNKo+QYGWYsJaWk2KP5F
cV4IwwLgCzVYLmx37swjzMX/z2tN+SxROWILWmMK7mKpnO7z7MEoES2W8SCmGLQY
F21Wtz++d3OxjksF0GmqoN6+yNfUbUc4Xw8TL8S8nVBkhq59ML1BYz6aBvuVcPij
cj3/g91iLYk7BqasM9OJEVqC8tzAnYhTqyBC6N/q/BGB4Y4GGoRYuomRxKLdTDo/
XuAk4EXe2RnZ+vjRIwqRm7oPZX39FTleZxj3S62GHFdnPyB5hHYA+DpZjAbsEMcA
1zo8XN4nSgjApA/0FQGvSbtIcrCxFWRxcuvZoIjMOCh7aQQQMQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFJLFrkWbTS4L253Bwj5TknycuFTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmM0OWE3YjAtNzNkNy0z
ZjVjLTkxMDUtNWNlODk3OGU3ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAcY5lnamDyfpPKGNtC6rWlsjQM+9BNdwgn3a/Z4IMC+gI7y06htBmw
UI3qY/pV5tYp13KQ3uZsM15pwyoZlmA4jBJuPb1Deiex7nTTansZytNToqxZwiyZ
6RVmg7uCK+h+wq/fodnwonQBXBPDo+/EDenAgXchq8ATpSk7CbMzhwkJFscGCfrb
9iu+t6IuleTNvJ0k5sytjUeF+lT3066cDA/IjS8rhCh+bozlruKuhQuPGXVXiOSG
vzg0bfkwThkoiKVVdPwnMn2xctjV6TeWUIYlEm2HKSFL5iFpNaFKjFIeipldLx0f
x34HNuoR49H/fvCmRgqLw6L0I3Q38WOq
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:47 2025 by rpki-client