Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3196e6ff-34fa-3e41-9774-7973cc543041.roa
File:                     3196e6ff-34fa-3e41-9774-7973cc543041.roa (raw, json)
Hash identifier:          16sjl3ZC6PdV+ssmTeDDsLdh1SzYcOVfsApPOxGDBX4=
Subject key identifier:   08:C2:87:C4:B2:F3:F5:42:B0:92:6C:D6:5C:DD:60:FE:EF:8C:CE:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D7434D977BE513F88ADB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3196e6ff-34fa-3e41-9774-7973cc543041.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:43:4d:97:7b:e5:13:f8:8a:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=92e4b5ad-0ddf-4c5f-99b0-41ea56d30bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:40:7c:42:75:b0:84:19:f8:34:e9:07:dd:
                    ef:10:16:cf:22:97:d2:95:8c:70:93:8a:51:8c:b7:
                    14:ea:9e:5a:7a:cf:33:76:13:ed:ab:a3:02:83:c3:
                    9b:99:3d:05:24:e2:ba:ec:78:73:80:64:c0:76:df:
                    2b:bd:b4:40:7f:ae:34:b8:3f:18:d8:7c:05:f5:16:
                    aa:58:0f:16:85:10:30:5f:b0:d4:ce:a7:fd:5b:6b:
                    b0:7c:70:5c:bd:64:24:74:d2:3b:9a:e2:87:2e:c2:
                    dc:5a:3d:37:ca:a1:99:53:a2:0b:26:50:d2:f8:ad:
                    12:b2:b2:f5:f9:37:fb:82:5e:5b:09:c1:5f:06:5f:
                    f0:b8:51:70:88:2f:0e:29:6c:fb:80:d4:6f:ec:be:
                    a6:3a:a3:38:90:50:ef:a9:e4:ff:be:34:00:df:23:
                    3d:87:f9:ed:44:e8:b7:ff:9c:48:cc:ec:bc:cf:2e:
                    5c:4a:f6:05:8d:1c:77:fc:8e:26:24:67:4e:07:1e:
                    18:d3:62:b5:b8:68:fc:28:93:db:1d:5a:88:31:c5:
                    0d:c2:7b:fa:e7:6e:ca:e0:88:19:a2:d8:ca:9c:84:
                    cf:85:4f:ea:93:73:bf:a0:ff:c4:87:c5:3c:d6:a8:
                    e9:6f:1a:90:93:91:4c:58:92:98:71:ad:58:4a:92:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C2:87:C4:B2:F3:F5:42:B0:92:6C:D6:5C:DD:60:FE:EF:8C:CE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3196e6ff-34fa-3e41-9774-7973cc543041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:f3:c2:cb:b6:98:f3:47:16:5a:57:3a:bc:ac:77:93:9d:
         74:f5:09:24:de:5d:eb:40:49:80:e1:3a:f1:0e:b2:44:3a:9c:
         a8:db:d6:5b:21:df:3c:d0:0e:c6:8a:ef:ed:58:9e:33:f9:fc:
         5c:78:25:d5:a9:ed:d0:bd:e7:77:f9:5c:8f:6f:a6:b4:b6:56:
         b1:6a:6b:91:8f:cf:8b:9a:97:5a:5d:9d:94:5c:72:d9:9a:84:
         6b:37:2e:e2:9f:c2:e3:92:94:01:50:bd:44:c7:b4:d7:8c:d7:
         33:d0:ce:f9:04:1f:2c:81:c7:79:20:61:cc:97:df:74:9d:45:
         31:6d:1f:45:ca:20:3c:57:55:73:1d:86:44:1f:f5:97:43:cc:
         d9:e2:5e:02:34:7e:d6:a5:fb:cb:73:ba:39:39:e3:46:a8:c7:
         c5:88:71:51:25:39:95:df:d1:d1:88:87:b6:e6:28:33:54:0a:
         21:fd:5e:a1:dd:3c:38:e1:c6:b3:c6:eb:5f:9b:ee:6a:8d:43:
         a9:dc:6f:e5:ee:a2:c6:44:b0:b5:82:ed:72:f5:3d:31:de:c2:
         77:c7:92:e9:a8:fa:49:12:7b:fc:91:6c:d0:a8:79:3b:8e:f3:
         d1:4d:03:6b:2f:69:1c:0a:db:04:35:58:e5:96:96:ce:40:c0:
         3b:24:33:fa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW10NNl3vlE/iK2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk
OTJlNGI1YWQtMGRkZi00YzVmLTk5YjAtNDFlYTU2ZDMwYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlNAfEJ1sIQZ+DTpB93vEBbPIpfSlYxwk4pR
jLcU6p5aes8zdhPtq6MCg8ObmT0FJOK67HhzgGTAdt8rvbRAf640uD8Y2HwF9Raq
WA8WhRAwX7DUzqf9W2uwfHBcvWQkdNI7muKHLsLcWj03yqGZU6ILJlDS+K0SsrL1
+Tf7gl5bCcFfBl/wuFFwiC8OKWz7gNRv7L6mOqM4kFDvqeT/vjQA3yM9h/ntROi3
/5xIzOy8zy5cSvYFjRx3/I4mJGdOBx4Y02K1uGj8KJPbHVqIMcUNwnv6527K4IgZ
otjKnITPhU/qk3O/oP/Eh8U81qjpbxqQk5FMWJKYca1YSpLL1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAjCh8Sy8/VCsJJs1lzdYP7vjM5lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzE5NmU2ZmYtMzRmYS0z
ZTQxLTk3NzQtNzk3M2NjNTQzMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCZmvPCy7aY80cWWlc6vKx3k5109Qkk3l3rQEmA4TrxDrJEOpyo29Zb
Id880A7Giu/tWJ4z+fxceCXVqe3Qved3+VyPb6a0tlaxamuRj8+LmpdaXZ2UXHLZ
moRrNy7in8LjkpQBUL1Ex7TXjNcz0M75BB8sgcd5IGHMl990nUUxbR9FyiA8V1Vz
HYZEH/WXQ8zZ4l4CNH7WpfvLc7o5OeNGqMfFiHFRJTmV39HRiIe25igzVAoh/V6h
3Tw44cazxutfm+5qjUOp3G/l7qLGRLC1gu1y9T0x3sJ3x5LpqPpJEnv8kWzQqHk7
jvPRTQNrL2kcCtsENVjllpbOQMA7JDP6
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:48 2025 by rpki-client