Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b285ff4-f6d1-3666-9b3e-c51d719b86e0.roa
File:                     0b285ff4-f6d1-3666-9b3e-c51d719b86e0.roa (raw, json)
Hash identifier:          KXPbwGkzmp08vw/gZpOp9uLPLiMPcHs2+9MJD9JTVeU=
Subject key identifier:   E4:E5:5C:00:41:C2:9C:B5:81:60:30:C0:99:3B:26:CD:C3:A4:DC:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB18B1CCA0FDFA77C4DD20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b285ff4-f6d1-3666-9b3e-c51d719b86e0.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     36621
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:18:b1:cc:a0:fd:fa:77:c4:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=8a104b64-880d-4c03-adc3-69395b800107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:e8:73:1b:3a:66:cb:0c:18:49:41:1e:10:
                    7b:e7:fb:7d:35:c2:a6:e6:66:6d:48:5b:7e:05:d6:
                    be:c6:08:32:1b:88:55:29:64:b7:60:2a:06:f9:0c:
                    f5:fd:ae:f8:38:22:ec:94:c3:37:49:8c:6d:f1:ac:
                    ba:b1:07:75:44:f1:2f:2a:35:30:9b:14:82:9a:8c:
                    1f:3e:d5:0e:9e:5b:05:8b:bc:f2:59:f2:e7:6e:73:
                    fd:dd:a5:9d:fa:c3:7f:89:84:8e:da:03:13:b9:5e:
                    91:41:55:a1:cc:53:a1:e8:23:34:1b:91:92:e2:d9:
                    f6:76:43:4c:4c:c9:fa:ca:a5:40:f7:d3:b2:6d:50:
                    5e:3a:73:2f:7c:e2:d3:d6:41:54:d3:e2:72:12:69:
                    c0:c3:74:d3:ec:4a:c0:9f:9a:22:2e:a4:9c:da:d3:
                    15:9e:70:fa:d6:5b:f6:e4:7f:82:0d:c2:38:56:a0:
                    b1:d6:6b:36:f8:b4:48:a5:32:59:25:94:76:1a:f5:
                    17:94:aa:8f:ec:50:eb:1a:5a:45:82:81:2c:a0:d5:
                    62:aa:6f:ab:b4:de:92:62:66:af:ed:2a:40:89:34:
                    53:56:88:a4:7b:86:79:a8:e2:8c:75:24:3e:3e:65:
                    06:1b:89:0e:ce:f5:8b:a7:fd:99:7a:fc:1a:c3:29:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:5C:00:41:C2:9C:B5:81:60:30:C0:99:3B:26:CD:C3:A4:DC:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b285ff4-f6d1-3666-9b3e-c51d719b86e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:50:1d:77:de:af:75:5e:08:6c:22:22:80:46:cd:51:83:
         b4:ab:e2:5e:56:b4:31:1e:db:79:3e:fe:ef:27:97:0e:12:4a:
         b0:02:5b:cb:37:27:f8:6d:07:65:d8:59:8d:9d:4b:b8:41:50:
         b1:b3:3e:e2:20:3a:c1:a6:2f:45:42:89:ba:07:02:6e:2f:db:
         15:cf:da:2b:fc:2f:21:22:48:48:45:ce:e3:78:84:b9:dd:da:
         53:68:0d:9f:20:04:98:44:5d:8c:97:b8:93:e1:cf:31:45:02:
         9d:41:bb:ae:26:07:06:9c:99:75:c9:ba:9a:9c:16:94:61:4f:
         55:ca:23:f4:1d:7d:e6:b9:cc:c0:ee:fe:d0:dd:9b:88:82:1b:
         10:fb:7f:a7:d4:7c:c9:dc:44:0e:9d:ea:f3:8c:36:51:d3:eb:
         ca:2b:59:5a:07:a5:d0:b9:1c:64:99:9c:1d:43:8d:5e:9f:ac:
         d3:e1:9c:46:a3:d6:1b:a8:3a:e5:01:f3:d8:95:9c:bd:8d:a6:
         41:65:e3:87:90:20:9a:de:8f:44:75:48:3e:0b:12:0c:ba:36:
         75:2e:fb:fc:a2:a2:b0:c0:97:c1:99:5b:9d:11:2c:db:b8:3a:
         cf:3c:9e:6b:48:bd:ce:a7:37:ad:07:0a:bb:de:26:64:8c:76:
         1e:92:e9:83
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpD2xixzKD9+nfE3SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
OGExMDRiNjQtODgwZC00YzAzLWFkYzMtNjkzOTViODAwMTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM/ocxs6ZssMGElBHhB75/t9NcKm5mZtSFt+
Bda+xggyG4hVKWS3YCoG+Qz1/a74OCLslMM3SYxt8ay6sQd1RPEvKjUwmxSCmowf
PtUOnlsFi7zyWfLnbnP93aWd+sN/iYSO2gMTuV6RQVWhzFOh6CM0G5GS4tn2dkNM
TMn6yqVA99OybVBeOnMvfOLT1kFU0+JyEmnAw3TT7ErAn5oiLqSc2tMVnnD61lv2
5H+CDcI4VqCx1ms2+LRIpTJZJZR2GvUXlKqP7FDrGlpFgoEsoNViqm+rtN6SYmav
7SpAiTRTVoike4Z5qOKMdSQ+PmUGG4kOzvWLp/2Zevwawymn6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOTlXABBwpy1gWAwwJk7Js3DpNyqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGIyODVmZjQtZjZkMS0z
NjY2LTliM2UtYzUxZDcxOWI4NmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBeLVAdd96vdV4IbCIigEbNUYO0q+JeVrQxHtt5Pv7vJ5cOEkqwAlvL
Nyf4bQdl2FmNnUu4QVCxsz7iIDrBpi9FQom6BwJuL9sVz9or/C8hIkhIRc7jeIS5
3dpTaA2fIASYRF2Ml7iT4c8xRQKdQbuuJgcGnJl1ybqanBaUYU9VyiP0HX3muczA
7v7Q3ZuIghsQ+3+n1HzJ3EQOnerzjDZR0+vKK1laB6XQuRxkmZwdQ41en6zT4ZxG
o9YbqDrlAfPYlZy9jaZBZeOHkCCa3o9EdUg+CxIMujZ1Lvv8oqKwwJfBmVudESzb
uDrPPJ5rSL3OpzetBwq73iZkjHYekumD
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:11:30 2025 by rpki-client