Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/221561a8-ae43-3d35-a297-195200ac794a.roa
File:                     221561a8-ae43-3d35-a297-195200ac794a.roa (raw, json)
Hash identifier:          SA3MyJUL7L6ycOkggKS4T+R+BZkXT01b7JY90UCMw2Q=
Subject key identifier:   76:B0:80:64:A2:4E:D4:AC:69:FD:92:2E:04:DA:71:E3:EE:76:9D:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58E05EC45FE3329A273C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/221561a8-ae43-3d35-a297-195200ac794a.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     21313
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8e:05:ec:45:fe:33:29:a2:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=11ab1453-a3d7-4d7e-9b6d-e1d73fbed9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:fe:d5:c2:ad:76:6d:d2:c7:04:1e:61:26:
                    9d:c6:0c:cd:71:ce:31:ba:cd:00:f5:98:1f:d4:59:
                    64:5c:82:f4:c6:70:bb:e2:b8:22:51:4f:d5:f4:e7:
                    f3:d0:95:3b:96:b8:7b:6c:99:6e:81:0c:0a:30:ea:
                    08:c2:de:e1:10:e3:69:6b:b6:04:f3:90:aa:1b:6c:
                    07:e4:80:91:22:c9:c4:f8:6c:29:27:7b:10:f8:5c:
                    8f:c7:99:98:fb:f6:19:b1:d1:24:b0:98:0f:a4:4f:
                    03:88:a8:3d:4a:b9:b0:bd:59:16:f8:7c:87:56:b2:
                    36:c1:ee:fa:01:7b:9a:44:65:82:9e:c7:05:e5:d7:
                    b3:80:37:23:1a:c7:09:90:56:97:a8:8e:3c:04:cc:
                    76:0f:3f:b1:6b:54:e5:d2:0a:77:18:34:55:7e:7e:
                    15:ed:90:4e:28:80:d6:53:75:17:1f:3d:be:de:8b:
                    e3:06:cf:ab:23:93:cc:b0:22:47:05:3b:15:52:9f:
                    e4:34:76:9d:57:1f:b0:8b:66:62:7f:ce:3a:b3:7f:
                    f8:46:28:c3:da:2d:49:77:87:a4:85:bf:9f:eb:5f:
                    17:8d:a9:a0:09:09:6d:1d:43:a3:9b:fb:c9:5b:e4:
                    09:a4:cb:2a:2b:b5:78:d7:67:f8:93:a0:13:74:d5:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B0:80:64:A2:4E:D4:AC:69:FD:92:2E:04:DA:71:E3:EE:76:9D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/221561a8-ae43-3d35-a297-195200ac794a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d8:d7:04:28:8c:46:c2:9b:45:67:7a:22:ac:2d:f1:5d:8f:
         52:8b:1a:0d:ca:83:a1:a0:d8:9d:c8:f5:96:a5:d9:9e:85:19:
         d4:e1:bb:de:65:35:d0:76:2b:3d:fe:ec:3c:ac:6e:dd:da:d9:
         97:d8:a3:cf:c8:0e:8a:de:08:4a:f7:e2:ff:a6:9b:64:54:6f:
         20:0d:5d:72:82:f5:31:2f:53:89:a0:5b:3b:b4:e3:c5:42:0d:
         72:21:53:a3:e8:6b:81:61:7d:5a:c9:2b:3a:07:51:b5:2f:92:
         0e:d9:18:a9:dd:6e:45:72:14:b1:c7:71:b6:94:af:e9:bd:e5:
         b8:c1:e1:6b:67:a6:d1:49:7a:30:b1:e6:84:38:f8:17:bc:c3:
         af:bf:8c:e9:99:a9:bd:c1:33:db:60:93:d9:32:23:d4:e0:50:
         d8:a4:c0:41:b2:87:72:d2:c8:94:d7:f7:33:92:3a:e1:07:ce:
         19:85:5b:11:7a:61:6f:b4:01:f4:2b:f4:e6:c6:30:99:9f:b2:
         71:ee:f0:54:d2:4b:e2:d6:0c:b8:ee:3a:55:02:75:43:c1:b0:
         0a:72:02:c9:49:7c:16:cf:b6:12:ef:33:56:59:da:72:94:94:
         30:de:ce:8f:f0:36:da:67:28:ba:6d:ac:29:46:66:1b:91:5e:
         5c:a6:1a:5f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErsxY4F7EX+Mymic8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
MTFhYjE0NTMtYTNkNy00ZDdlLTliNmQtZTFkNzNmYmVkOWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG/+1cKtdm3SxwQeYSadxgzNcc4xus0A9Zgf
1FlkXIL0xnC74rgiUU/V9Ofz0JU7lrh7bJlugQwKMOoIwt7hEONpa7YE85CqG2wH
5ICRIsnE+GwpJ3sQ+FyPx5mY+/YZsdEksJgPpE8DiKg9SrmwvVkW+HyHVrI2we76
AXuaRGWCnscF5dezgDcjGscJkFaXqI48BMx2Dz+xa1Tl0gp3GDRVfn4V7ZBOKIDW
U3UXHz2+3ovjBs+rI5PMsCJHBTsVUp/kNHadVx+wi2Zif846s3/4RijD2i1Jd4ek
hb+f618XjamgCQltHUOjm/vJW+QJpMsqK7V412f4k6ATdNWP8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHawgGSiTtSsaf2SLgTacePudp0DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjIxNTYxYTgtYWU0My0z
ZDM1LWEyOTctMTk1MjAwYWM3OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAr2NcEKIxGwptFZ3oirC3xXY9SixoNyoOhoNidyPWWpdmehRnU4bve
ZTXQdis9/uw8rG7d2tmX2KPPyA6K3ghK9+L/pptkVG8gDV1ygvUxL1OJoFs7tOPF
Qg1yIVOj6GuBYX1aySs6B1G1L5IO2Rip3W5FchSxx3G2lK/pveW4weFrZ6bRSXow
seaEOPgXvMOvv4zpmam9wTPbYJPZMiPU4FDYpMBBsody0siU1/czkjrhB84ZhVsR
emFvtAH0K/TmxjCZn7Jx7vBU0kvi1gy47jpVAnVDwbAKcgLJSXwWz7YS7zNWWdpy
lJQw3s6P8DbaZyi6bawpRmYbkV5cphpf
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:34 2025 by rpki-client