Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07676b10-6695-3e69-99e8-14a6e4f86b77.roa
File:                     07676b10-6695-3e69-99e8-14a6e4f86b77.roa (raw, json)
Hash identifier:          0U2p0DMm7Hc6po376pKIEhHfwtz1fBeeSeK+EgpkJfQ=
Subject key identifier:   96:B7:FB:73:55:4E:D0:A5:C3:3F:39:38:D3:2D:B3:64:F2:58:23:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E77347DEFEE980FE710111F
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07676b10-6695-3e69-99e8-14a6e4f86b77.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396544
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:34:7d:ef:ee:98:0f:e7:10:11:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=a21d524a-ab6f-4a25-b3fa-ab5d6baec19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:7e:bb:33:f6:de:d4:6a:bf:40:ac:c6:c4:
                    c3:11:c1:8c:64:3c:ad:f9:7c:a4:d9:1c:ab:0d:7a:
                    59:96:80:31:cd:75:4b:c7:46:8c:66:c3:2a:3c:a0:
                    d1:06:d6:c8:49:16:c8:c6:8a:c5:c9:c2:63:ee:5a:
                    b6:20:be:3c:47:32:ae:ee:02:94:b3:29:a1:bb:cd:
                    4c:8a:64:f3:9e:c5:30:c8:75:dc:47:f3:20:5d:ad:
                    08:c3:1b:31:84:48:12:cf:eb:94:f1:e3:10:0f:fb:
                    b5:bd:1f:20:36:58:3d:cb:95:e2:f9:71:6f:27:7c:
                    f7:2d:64:13:73:31:42:8e:45:08:c6:2f:c7:a2:b3:
                    27:35:f4:9d:de:8d:da:ad:7b:96:5c:59:db:84:3b:
                    d0:eb:36:5c:a7:ea:d0:f9:9a:ad:9d:a0:67:e6:55:
                    fc:5c:f6:bb:81:14:a0:4f:bc:cb:90:b1:07:fd:98:
                    08:1c:37:f5:59:79:5a:d8:49:97:51:1b:34:ae:0a:
                    c1:7d:97:0b:8c:eb:52:e4:38:12:2d:88:38:df:ad:
                    3b:10:e2:23:5a:56:e4:74:ef:6f:99:17:77:f0:53:
                    12:eb:4c:4c:1b:a0:2a:25:b3:d0:f8:25:1e:ce:1b:
                    02:6b:c7:ea:c5:80:6f:14:a3:37:69:45:2c:a5:e1:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:FB:73:55:4E:D0:A5:C3:3F:39:38:D3:2D:B3:64:F2:58:23:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07676b10-6695-3e69-99e8-14a6e4f86b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:bb:b0:63:29:a6:00:67:7b:e7:9a:bb:2a:2d:5c:cb:1b:
         3b:ba:bc:59:76:b8:ca:11:02:e9:79:b1:8b:47:de:7a:83:b6:
         0d:5b:f0:6d:ca:4b:3a:ac:a2:b4:5f:63:41:85:54:4b:43:d3:
         40:55:77:d3:63:f8:f2:dc:54:d1:c1:63:36:68:37:d9:1e:c9:
         d3:35:d3:5f:ce:d4:22:f9:f5:90:32:08:70:9d:a2:c1:37:07:
         76:c2:99:6f:f5:e9:89:3d:30:25:da:ea:34:48:0f:6d:3b:c9:
         69:fd:31:7a:39:67:e6:90:7d:b9:04:b8:4c:06:70:35:f2:b4:
         d9:bd:35:73:c6:96:31:b1:cd:80:30:66:a5:02:01:6a:74:83:
         ae:1b:11:9e:b4:ef:8b:54:d0:0a:fc:40:fd:ca:e7:29:11:2b:
         22:35:69:4d:78:13:cb:41:ee:d2:ec:45:eb:bc:f0:39:94:2c:
         f7:7f:5c:ee:04:74:ae:9b:64:f3:f2:ed:2b:28:20:dc:83:a5:
         ab:18:fc:1f:8f:dd:31:2d:4e:1a:94:39:7b:1b:e8:69:f9:d1:
         bc:96:7f:44:da:c4:68:73:95:65:7a:7f:51:84:af:80:53:43:
         30:32:b4:3f:89:bd:de:81:86:35:c2:17:74:18:9f:06:ba:23:
         f9:ee:7c:9b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdzR97+6YD+cQER8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
YTIxZDUyNGEtYWI2Zi00YTI1LWIzZmEtYWI1ZDZiYWVjMTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvB+uzP23tRqv0CsxsTDEcGMZDyt+Xyk2Ryr
DXpZloAxzXVLx0aMZsMqPKDRBtbISRbIxorFycJj7lq2IL48RzKu7gKUsymhu81M
imTznsUwyHXcR/MgXa0IwxsxhEgSz+uU8eMQD/u1vR8gNlg9y5Xi+XFvJ3z3LWQT
czFCjkUIxi/HorMnNfSd3o3arXuWXFnbhDvQ6zZcp+rQ+ZqtnaBn5lX8XPa7gRSg
T7zLkLEH/ZgIHDf1WXla2EmXURs0rgrBfZcLjOtS5DgSLYg43607EOIjWlbkdO9v
mRd38FMS60xMG6AqJbPQ+CUezhsCa8fqxYBvFKM3aUUspeF/DwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJa3+3NVTtClwz85ONMts2TyWCMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDc2NzZiMTAtNjY5NS0z
ZTY5LTk5ZTgtMTRhNmU0Zjg2Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBO17uwYymmAGd755q7Ki1cyxs7urxZdrjKEQLpebGLR956g7YNW/Bt
yks6rKK0X2NBhVRLQ9NAVXfTY/jy3FTRwWM2aDfZHsnTNdNfztQi+fWQMghwnaLB
Nwd2wplv9emJPTAl2uo0SA9tO8lp/TF6OWfmkH25BLhMBnA18rTZvTVzxpYxsc2A
MGalAgFqdIOuGxGetO+LVNAK/ED9yucpESsiNWlNeBPLQe7S7EXrvPA5lCz3f1zu
BHSum2Tz8u0rKCDcg6WrGPwfj90xLU4alDl7G+hp+dG8ln9E2sRoc5Vlen9RhK+A
U0MwMrQ/ib3egYY1whd0GJ8GuiP57nyb
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:38 2025 by rpki-client