Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cb84c0b-beed-317e-8205-a8e3cbcdd1ef.roa
File:                     0cb84c0b-beed-317e-8205-a8e3cbcdd1ef.roa (raw, json)
Hash identifier:          cAOvj0s7PpuGNXX6Qdz0fO1iALXJIazWj8F8U+upB8o=
Subject key identifier:   1F:E9:C2:ED:4F:FA:73:CD:BE:59:2C:50:94:D0:32:A7:13:86:62:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B93D9A61F30B049B21280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cb84c0b-beed-317e-8205-a8e3cbcdd1ef.roa
Signing time:             Wed 20 Aug 2025 14:36:57 +0000
ROA not before:           Wed 20 Aug 2025 14:36:57 +0000
ROA not after:            Tue 18 Nov 2025 15:36:57 +0000
asID:                     396590
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:93:d9:a6:1f:30:b0:49:b2:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:57 2025 GMT
            Not After : Nov 18 15:36:57 2025 GMT
        Subject: CN=646c7e72-91a2-47ca-9d92-1719963f3d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:89:1a:ac:2b:3b:ec:1e:f2:a9:fc:9f:56:
                    5f:98:8e:23:30:9b:52:4c:16:7d:c1:0b:2a:3c:62:
                    70:07:36:21:84:a7:98:33:d8:79:b2:70:1a:52:0f:
                    d7:88:00:5a:59:67:3e:ac:a8:dd:89:8f:bb:0a:39:
                    9f:d4:42:00:6b:1b:61:04:d4:3a:13:fc:fb:73:21:
                    07:ea:0c:22:02:f8:e1:ea:bd:39:69:2c:64:34:91:
                    d7:09:b1:f6:dd:6f:df:9a:2d:61:fd:d8:4e:b2:19:
                    00:c9:3b:21:03:5f:c9:3b:5c:fb:df:16:18:7d:60:
                    a7:1f:4e:9a:f4:e9:b9:87:e4:57:be:b8:6b:1c:af:
                    07:3f:fc:7f:bc:60:88:69:61:03:58:d0:16:c1:cd:
                    81:2b:83:73:f6:42:7b:29:d0:d0:c6:f2:e3:e2:1d:
                    4f:23:5f:1e:21:d0:b7:f0:dd:af:eb:09:92:c0:26:
                    38:ba:6c:17:93:bd:8d:7e:12:c5:cd:5c:b3:6c:06:
                    2d:af:80:20:b6:d4:72:aa:5e:af:1b:8d:e2:de:45:
                    d4:3d:08:77:52:e1:d5:82:e5:49:54:2f:b7:42:83:
                    33:5f:c3:2c:ff:99:32:f5:71:fa:0b:7e:ee:0a:bf:
                    45:74:13:db:16:21:af:36:77:4d:04:2f:e7:12:07:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:C2:ED:4F:FA:73:CD:BE:59:2C:50:94:D0:32:A7:13:86:62:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cb84c0b-beed-317e-8205-a8e3cbcdd1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:9a:a7:e3:e2:12:e3:fd:09:d2:77:fa:02:5e:d3:42:75:
         c4:8b:c5:ff:cf:b9:d1:a4:ff:74:5e:e2:7b:06:7a:56:2d:5b:
         90:ee:f3:f9:c0:46:20:79:dc:91:86:9b:cf:b5:20:07:b6:00:
         77:5b:95:1d:3f:4f:b3:68:f6:b7:0f:ed:c8:c4:cb:63:60:1b:
         cc:50:b2:98:9c:4f:c2:2b:19:ee:4e:5d:a8:a8:44:5a:a9:24:
         ba:93:4a:1b:b0:27:a4:29:0c:b2:6d:a9:1e:39:14:d2:47:db:
         3e:02:df:ac:91:d7:39:f6:42:94:dd:9d:99:be:fa:cb:8d:d3:
         19:a8:9d:6e:2f:ab:3d:6f:a9:64:fe:92:21:b8:a1:01:a3:25:
         73:89:d5:6a:43:49:4b:4a:ba:35:8f:e5:bc:72:2c:4c:ce:4f:
         ce:4d:be:b0:fe:9d:8d:3d:ef:a8:a7:ab:71:4d:11:38:37:2a:
         db:9f:ed:e4:d9:e7:34:5a:2a:31:52:fb:f7:41:e4:54:0a:07:
         f2:92:7b:ec:db:8c:d2:43:09:eb:f5:27:82:d3:0f:aa:8b:09:
         b9:a0:06:28:7b:99:3e:15:6f:6d:c1:d0:16:ab:00:88:22:cd:
         45:60:46:39:2d:6a:ff:3b:b9:8e:bf:24:38:b5:13:d4:73:84:
         4f:33:90:84
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri5PZph8wsEmyEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzY1N1oXDTI1MTExODE1MzY1N1owLzEtMCsGA1UEAxMk
NjQ2YzdlNzItOTFhMi00N2NhLTlkOTItMTcxOTk2M2YzZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPqJGqwrO+we8qn8n1ZfmI4jMJtSTBZ9wQsq
PGJwBzYhhKeYM9h5snAaUg/XiABaWWc+rKjdiY+7Cjmf1EIAaxthBNQ6E/z7cyEH
6gwiAvjh6r05aSxkNJHXCbH23W/fmi1h/dhOshkAyTshA1/JO1z73xYYfWCnH06a
9Om5h+RXvrhrHK8HP/x/vGCIaWEDWNAWwc2BK4Nz9kJ7KdDQxvLj4h1PI18eIdC3
8N2v6wmSwCY4umwXk72NfhLFzVyzbAYtr4AgttRyql6vG43i3kXUPQh3UuHVguVJ
VC+3QoMzX8Ms/5ky9XH6C37uCr9FdBPbFiGvNndNBC/nEgcBVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB/pwu1P+nPNvlksUJTQMqcThmI/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGNiODRjMGItYmVlZC0z
MTdlLTgyMDUtYThlM2NiY2RkMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDZwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBE/pqn4+IS4/0J0nf6Al7TQnXEi8X/z7nRpP90XuJ7BnpWLVuQ7vP5
wEYgedyRhpvPtSAHtgB3W5UdP0+zaPa3D+3IxMtjYBvMULKYnE/CKxnuTl2oqERa
qSS6k0obsCekKQyybakeORTSR9s+At+skdc59kKU3Z2ZvvrLjdMZqJ1uL6s9b6lk
/pIhuKEBoyVzidVqQ0lLSro1j+W8cixMzk/OTb6w/p2NPe+op6txTRE4Nyrbn+3k
2ec0WioxUvv3QeRUCgfyknvs24zSQwnr9SeC0w+qiwm5oAYoe5k+FW9twdAWqwCI
Is1FYEY5LWr/O7mOvyQ4tRPUc4RPM5CE
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:16 2025 by rpki-client