Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/314d999b-5d11-35fd-8456-d2de61bda73a.roa
File:                     314d999b-5d11-35fd-8456-d2de61bda73a.roa (raw, json)
Hash identifier:          ET6QuMhU7mSs8OmwPpTNFu4vnKoA7deph1z23IMjcJ4=
Subject key identifier:   AD:3E:75:F2:29:B3:39:EB:15:9E:6D:8A:34:45:F7:1F:9D:59:9E:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B4A3264E062F176B8EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/314d999b-5d11-35fd-8456-d2de61bda73a.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     396594
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b4:a3:26:4e:06:2f:17:6b:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=92386ace-9a2a-4a9c-8dff-2860802e6fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:aa:9d:18:87:80:f1:f7:53:67:cb:46:43:
                    7e:62:20:3d:ae:bf:6b:50:19:5c:cc:f2:13:02:23:
                    8f:ba:0c:54:fe:62:e3:78:50:f5:76:b6:a6:32:ce:
                    1e:b3:0f:42:45:21:25:f7:39:74:9f:20:39:48:86:
                    1d:aa:53:d1:0b:3f:8e:84:e6:e1:9d:cf:92:03:92:
                    61:63:0c:9e:db:0c:10:b5:5e:c4:c6:85:10:c7:a7:
                    79:87:0e:00:4e:e5:d0:48:84:e6:db:56:99:fe:99:
                    5e:85:5b:02:3c:e1:7a:f3:f8:e3:1c:54:e1:40:e3:
                    f4:7d:e2:a2:99:88:46:28:97:47:0a:f6:cc:ec:25:
                    85:88:cb:2b:be:58:f0:d5:f6:21:15:11:58:93:a0:
                    ff:de:43:57:46:63:f9:e5:4b:32:42:18:9a:2b:e0:
                    1c:3f:70:d5:02:ad:21:75:22:cd:8d:d6:55:cc:2a:
                    8c:18:a7:d3:f1:ad:14:cb:f2:41:dc:da:a3:b2:6c:
                    fa:2e:1f:a7:79:77:c3:f0:2d:56:e5:ba:0c:52:29:
                    78:d4:9e:f2:74:4e:94:86:3e:b1:8d:46:84:2e:00:
                    f7:e4:69:ac:b6:57:f7:11:37:93:94:9f:c7:0c:73:
                    ee:49:0a:10:e2:2a:e1:52:97:4e:5f:eb:3e:9e:ad:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:75:F2:29:B3:39:EB:15:9E:6D:8A:34:45:F7:1F:9D:59:9E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/314d999b-5d11-35fd-8456-d2de61bda73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:be:0f:b2:33:cf:8d:4d:fb:f7:80:1a:fe:8f:03:ba:aa:ea:
         73:7e:36:d6:cf:a8:bc:6d:85:30:6c:03:b3:28:48:55:44:e8:
         89:03:18:01:8f:3e:b0:ae:ce:28:71:b5:d8:b6:83:c4:51:5f:
         6a:10:87:e9:56:6c:ca:75:1b:2a:a5:73:f1:30:48:2c:68:0b:
         55:02:6b:4f:77:4a:36:d9:86:9c:6a:b2:35:9e:cd:1a:82:dd:
         b8:4a:a0:4a:d8:0e:2c:87:06:a6:e6:bf:25:10:a2:f4:67:4b:
         13:ef:9f:24:44:2d:d6:0e:fc:41:12:8f:4d:88:a8:c7:25:37:
         6b:e0:79:60:88:d1:17:c9:d4:07:82:dd:26:dc:a6:71:07:cc:
         b3:c4:48:b0:a7:3f:43:8c:be:05:a1:ca:ff:04:55:d8:ad:10:
         18:30:db:f1:d9:ec:ba:7f:69:0e:5c:e2:35:a3:9c:8c:3e:0e:
         49:c2:a0:e5:f8:af:ec:f7:de:69:9b:d2:73:11:8f:f4:2f:e2:
         1d:df:50:4f:7c:91:2b:37:b4:a7:08:75:9f:61:d4:cd:26:8d:
         82:01:c8:0e:8d:60:bb:54:71:1e:7e:06:08:5e:b0:6f:0c:13:
         f4:d4:f2:96:91:59:4e:82:d5:8d:7f:79:4c:40:10:3d:5a:ab:
         6d:fd:4f:55
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNbSjJk4GLxdrjsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
OTIzODZhY2UtOWEyYS00YTljLThkZmYtMjg2MDgwMmU2ZmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rmqnRiHgPH3U2fLRkN+YiA9rr9rUBlczPIT
AiOPugxU/mLjeFD1dramMs4esw9CRSEl9zl0nyA5SIYdqlPRCz+OhObhnc+SA5Jh
Ywye2wwQtV7ExoUQx6d5hw4ATuXQSITm21aZ/plehVsCPOF68/jjHFThQOP0feKi
mYhGKJdHCvbM7CWFiMsrvljw1fYhFRFYk6D/3kNXRmP55UsyQhiaK+AcP3DVAq0h
dSLNjdZVzCqMGKfT8a0Uy/JB3Nqjsmz6Lh+neXfD8C1W5boMUil41J7ydE6Uhj6x
jUaELgD35Gmstlf3ETeTlJ/HDHPuSQoQ4irhUpdOX+s+nq2pjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK0+dfIpsznrFZ5tijRF9x+dWZ5BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzE0ZDk5OWItNWQxMS0z
NWZkLTg0NTYtZDJkZTYxYmRhNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBAvg+yM8+NTfv3gBr+jwO6qupzfjbWz6i8bYUwbAOzKEhVROiJAxgB
jz6wrs4ocbXYtoPEUV9qEIfpVmzKdRsqpXPxMEgsaAtVAmtPd0o22YacarI1ns0a
gt24SqBK2A4shwam5r8lEKL0Z0sT758kRC3WDvxBEo9NiKjHJTdr4HlgiNEXydQH
gt0m3KZxB8yzxEiwpz9DjL4Focr/BFXYrRAYMNvx2ey6f2kOXOI1o5yMPg5JwqDl
+K/s995pm9JzEY/0L+Id31BPfJErN7SnCHWfYdTNJo2CAcgOjWC7VHEefgYIXrBv
DBP01PKWkVlOgtWNf3lMQBA9Wqtt/U9V
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:44:40 2025 by rpki-client