Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/112dbf40-ae59-36ae-9ee7-58ccc62fab38.roa
File:                     112dbf40-ae59-36ae-9ee7-58ccc62fab38.roa (raw, json)
Hash identifier:          s+EVd8zXjN/TFq1eyBazBWzINQpJtl1nFohkh+H8A2M=
Subject key identifier:   16:22:43:30:A9:ED:A8:08:0D:3E:1D:9A:9A:8D:7D:C2:63:1D:7D:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E77364437D720D60BAADFE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/112dbf40-ae59-36ae-9ee7-58ccc62fab38.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396584
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:36:44:37:d7:20:d6:0b:aa:df:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=ab55bc4b-281b-4d7b-9794-bda14f04ed19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2e:9a:45:fb:ca:03:b7:72:fe:12:ba:fc:43:
                    29:3f:84:f9:a9:f7:9c:09:e9:ef:b3:0a:25:6e:ae:
                    ab:82:d2:3f:79:02:4c:a6:5c:fd:4a:98:ce:38:4f:
                    5d:c7:a1:21:e8:6a:6a:e7:6e:1f:3e:ae:0e:b2:b7:
                    bc:8f:2d:1c:50:de:fc:aa:17:9b:66:51:66:26:ab:
                    3e:50:e5:83:1d:da:7b:38:31:d8:1e:8c:98:8a:90:
                    ad:ce:62:6e:19:6f:ac:e8:74:ae:ff:f7:67:87:b4:
                    ed:f7:93:f8:b7:cb:23:46:39:c6:2d:dc:37:e0:36:
                    4d:32:55:bf:bb:91:7f:02:f6:97:84:de:8b:3d:ce:
                    da:6b:68:75:5f:65:93:64:96:0b:7f:65:fb:d0:7e:
                    f5:47:dd:fc:5c:7b:43:0e:fe:9f:9a:8e:09:fd:ed:
                    5e:7e:df:42:b7:bc:c8:d6:f1:b9:38:68:4a:8a:ab:
                    53:24:ab:57:5b:05:dd:41:a0:5b:38:c5:88:de:1f:
                    5f:25:46:2f:4e:29:0f:ab:f8:85:a9:1e:d1:88:12:
                    6e:f9:d2:23:b1:dc:d5:ff:94:d5:76:1d:1a:eb:17:
                    26:e2:d4:f2:05:c4:a2:76:5e:7c:fb:a4:e5:39:c9:
                    d3:8f:7b:6e:4a:ce:ab:78:55:c0:7f:26:f9:f6:3f:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:43:30:A9:ED:A8:08:0D:3E:1D:9A:9A:8D:7D:C2:63:1D:7D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/112dbf40-ae59-36ae-9ee7-58ccc62fab38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:7a:7f:bd:58:30:4c:55:6b:96:91:58:b3:6e:ea:2a:23:
         da:62:81:89:51:12:f7:1c:9e:35:33:7b:de:a5:d8:67:2d:5f:
         c7:6c:9a:30:ef:10:ad:dc:cc:9f:01:11:f7:df:07:73:88:ba:
         2d:02:a1:3d:97:4b:cb:e7:f6:53:0f:46:e3:42:79:8b:97:64:
         2c:46:78:b9:66:4c:34:a5:43:02:7d:75:ba:a7:a7:be:37:f9:
         86:2b:dc:3c:e8:66:3d:a9:90:7d:34:c6:a1:79:0d:12:88:27:
         87:b6:60:33:51:e1:81:2f:b8:57:3e:7a:58:40:dd:11:45:5d:
         a7:7e:66:e5:13:dd:b2:06:d0:b6:3a:f1:87:74:1a:a6:51:3d:
         75:db:e1:45:f5:2c:c2:b5:10:02:51:39:5f:9c:75:07:49:50:
         15:9c:2a:2e:12:e2:0b:bd:ef:70:5b:33:53:b8:63:58:cc:f2:
         7d:d2:74:cc:e3:9b:d6:ee:b8:33:fe:d5:ce:d9:90:d7:df:2f:
         90:3f:37:98:05:69:b5:3a:07:e5:63:f9:80:ea:be:78:14:5f:
         85:78:61:49:f4:51:1f:41:c2:33:c2:02:47:00:21:e4:f3:c4:
         09:cb:45:e2:27:24:a2:25:28:4b:29:e4:16:e2:9d:0a:59:a0:
         d4:0e:ca:b1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdzZEN9cg1guq3+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
YWI1NWJjNGItMjgxYi00ZDdiLTk3OTQtYmRhMTRmMDRlZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy6aRfvKA7dy/hK6/EMpP4T5qfecCenvswol
bq6rgtI/eQJMplz9SpjOOE9dx6Eh6Gpq524fPq4Osre8jy0cUN78qhebZlFmJqs+
UOWDHdp7ODHYHoyYipCtzmJuGW+s6HSu//dnh7Tt95P4t8sjRjnGLdw34DZNMlW/
u5F/AvaXhN6LPc7aa2h1X2WTZJYLf2X70H71R938XHtDDv6fmo4J/e1eft9Ct7zI
1vG5OGhKiqtTJKtXWwXdQaBbOMWI3h9fJUYvTikPq/iFqR7RiBJu+dIjsdzV/5TV
dh0a6xcm4tTyBcSidl58+6TlOcnTj3tuSs6reFXAfyb59j83ZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBYiQzCp7agIDT4dmpqNfcJjHX0eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTEyZGJmNDAtYWU1OS0z
NmFlLTllZTctNThjY2M2MmZhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCuzHp/vVgwTFVrlpFYs27qKiPaYoGJURL3HJ41M3vepdhnLV/HbJow
7xCt3MyfARH33wdziLotAqE9l0vL5/ZTD0bjQnmLl2QsRni5Zkw0pUMCfXW6p6e+
N/mGK9w86GY9qZB9NMaheQ0SiCeHtmAzUeGBL7hXPnpYQN0RRV2nfmblE92yBtC2
OvGHdBqmUT112+FF9SzCtRACUTlfnHUHSVAVnCouEuILve9wWzNTuGNYzPJ90nTM
45vW7rgz/tXO2ZDX3y+QPzeYBWm1OgflY/mA6r54FF+FeGFJ9FEfQcIzwgJHACHk
88QJy0XiJySiJShLKeQW4p0KWaDUDsqx
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:24:18 2025 by rpki-client