Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0557792d-4cfd-3dbd-be88-784fc5b1e354.roa
File:                     0557792d-4cfd-3dbd-be88-784fc5b1e354.roa (raw, json)
Hash identifier:          Oktgy4js3nsXx0bXGZV/0l2XjSzQVuzgZ9nAHMfNXIc=
Subject key identifier:   C2:A7:49:DE:B0:D4:D3:54:F3:14:F3:58:0C:7D:70:64:E3:62:5D:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1AC9A3A3C431C573F4180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0557792d-4cfd-3dbd-be88-784fc5b1e354.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396575
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ac:9a:3a:3c:43:1c:57:3f:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=9fafed35-50d5-4771-a63f-fc598e8fcb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:3e:53:68:21:b1:d0:24:0f:a5:35:af:e2:
                    ce:66:22:e3:03:ee:f7:93:ce:a8:a6:8a:b8:69:1a:
                    48:67:2d:a7:b5:19:9d:23:4d:15:a6:68:f0:d0:d3:
                    1d:8e:37:14:fe:9a:3e:a4:2b:f0:e3:92:93:0a:bd:
                    9c:46:19:1b:3e:55:2f:29:17:96:98:89:46:b8:3c:
                    e6:e3:6e:3c:d4:4e:8b:bb:05:3d:48:99:d8:0d:4c:
                    c7:5b:7a:d7:7b:4b:cb:78:96:ee:4f:98:ba:fe:bb:
                    d3:24:97:05:25:3f:6d:03:ce:a1:2f:12:1a:89:21:
                    c3:9b:9e:d9:27:ac:a1:43:93:b8:f1:c1:13:de:a2:
                    b2:9e:e3:de:8d:83:c0:a8:b3:2f:3c:62:a6:31:57:
                    2f:4a:b2:8f:1b:6c:f6:57:87:33:04:f0:e9:6a:d2:
                    71:96:b6:6d:dd:95:e5:e2:35:ea:de:78:93:06:55:
                    08:7e:e7:e5:dc:a9:c4:7c:be:5a:90:d5:60:85:82:
                    4e:d0:5e:92:ac:5d:10:e9:2b:9d:03:1a:72:bc:49:
                    4d:bb:0e:58:ba:12:15:4a:dd:b4:8b:3e:2e:26:7c:
                    9e:d2:1a:fd:d3:c5:91:b3:69:07:45:0f:29:8a:2a:
                    27:9b:65:14:04:36:04:22:c2:a9:01:bc:78:75:6d:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A7:49:DE:B0:D4:D3:54:F3:14:F3:58:0C:7D:70:64:E3:62:5D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0557792d-4cfd-3dbd-be88-784fc5b1e354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:91:86:18:e8:9a:ee:a8:2d:24:1d:b6:a5:56:54:e1:f0:
         4f:3e:36:44:55:05:ec:be:bf:32:f3:0a:d3:f2:e5:b3:21:3a:
         0f:3a:b3:ee:a0:03:e9:de:da:bf:4b:fe:7c:92:ce:37:e0:50:
         01:d8:b8:44:e6:e5:5d:73:ec:21:ea:04:dc:2b:75:b6:c2:d9:
         36:0d:a4:9c:3e:28:d5:ba:dc:24:ea:08:7a:aa:e6:90:70:c1:
         03:6a:2c:5b:5e:0d:21:34:a2:46:e7:03:4d:af:25:1b:76:f1:
         65:3e:cc:01:fc:bd:28:84:20:73:76:7e:2f:b1:9d:e1:30:e3:
         5c:a2:ba:df:b7:8c:56:4a:58:2d:db:55:c0:45:6e:48:b1:56:
         c4:44:fe:1a:03:90:58:ea:16:18:f2:87:68:da:77:1c:28:95:
         f5:6c:f5:65:ad:88:32:8b:9d:e8:01:b8:95:1b:ad:a8:ab:9b:
         8e:b9:a8:22:d1:7b:81:32:2b:0f:14:a1:03:dd:0d:61:0b:0e:
         4a:48:c6:07:10:17:c1:dc:4f:cc:b3:d2:ce:17:27:e5:45:1f:
         57:82:b9:e3:0a:3b:33:ee:5f:6e:84:a2:ef:95:dd:b5:b3:89:
         05:01:84:4a:85:9a:2f:0b:5b:16:b4:7e:a0:6e:56:6d:94:15:
         bc:43:fd:dc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8ayaOjxDHFc/QYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
OWZhZmVkMzUtNTBkNS00NzcxLWE2M2YtZmM1OThlOGZjYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqII+U2ghsdAkD6U1r+LOZiLjA+73k86opoq4
aRpIZy2ntRmdI00Vpmjw0NMdjjcU/po+pCvw45KTCr2cRhkbPlUvKReWmIlGuDzm
42481E6LuwU9SJnYDUzHW3rXe0vLeJbuT5i6/rvTJJcFJT9tA86hLxIaiSHDm57Z
J6yhQ5O48cET3qKynuPejYPAqLMvPGKmMVcvSrKPG2z2V4czBPDpatJxlrZt3ZXl
4jXq3niTBlUIfufl3KnEfL5akNVghYJO0F6SrF0Q6SudAxpyvElNuw5YuhIVSt20
iz4uJnye0hr908WRs2kHRQ8piionm2UUBDYEIsKpAbx4dW1o6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMKnSd6w1NNU8xTzWAx9cGTjYl3tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDU1Nzc5MmQtNGNmZC0z
ZGJkLWJlODgtNzg0ZmM1YjFlMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0rJGGGOia7qgtJB22pVZU4fBPPjZEVQXsvr8y8wrT8uWzIToPOrPu
oAPp3tq/S/58ks434FAB2LhE5uVdc+wh6gTcK3W2wtk2DaScPijVutwk6gh6quaQ
cMEDaixbXg0hNKJG5wNNryUbdvFlPswB/L0ohCBzdn4vsZ3hMONcorrft4xWSlgt
21XARW5IsVbERP4aA5BY6hYY8odo2nccKJX1bPVlrYgyi53oAbiVG62oq5uOuagi
0XuBMisPFKED3Q1hCw5KSMYHEBfB3E/Ms9LOFyflRR9XgrnjCjsz7l9uhKLvld21
s4kFAYRKhZovC1sWtH6gblZtlBW8Q/3c
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:04 2025 by rpki-client