Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48db14d1-8bc7-3f6b-8bbb-b5a23923e288.roa
File:                     48db14d1-8bc7-3f6b-8bbb-b5a23923e288.roa (raw, json)
Hash identifier:          BgQrKqkSnamvtRun0BteZhvAa4/vVXbAkYmIWSSoSSk=
Subject key identifier:   5B:DB:62:6A:18:C1:F3:37:FA:A2:D2:EF:19:8E:E3:C9:38:0A:55:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9D89BAE6C19F8ADEE820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48db14d1-8bc7-3f6b-8bbb-b5a23923e288.roa
Signing time:             Wed 20 Aug 2025 14:37:02 +0000
ROA not before:           Wed 20 Aug 2025 14:37:02 +0000
ROA not after:            Tue 18 Nov 2025 15:37:02 +0000
asID:                     396577
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9d:89:ba:e6:c1:9f:8a:de:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:02 2025 GMT
            Not After : Nov 18 15:37:02 2025 GMT
        Subject: CN=d1727ccd-9268-431e-b282-fea2b0b7528a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:e9:ca:48:ed:79:ff:30:59:ea:35:ab:12:
                    c7:90:dd:a5:c3:d1:c7:bf:7c:2a:6d:d3:90:9c:09:
                    42:92:37:f1:64:0e:10:4b:9d:bf:eb:9b:65:52:22:
                    0d:98:44:8c:14:a2:8b:da:8d:f2:61:be:5f:db:09:
                    1c:3c:ff:75:25:0d:59:38:16:9d:10:e7:0c:7e:00:
                    92:3f:97:7c:dc:dd:2c:7a:a0:3f:79:9d:1f:a9:85:
                    54:ed:a2:f4:26:57:ec:15:3f:ba:10:34:c7:d3:42:
                    87:e6:20:d0:59:8c:ce:5b:22:4d:22:b0:42:14:1a:
                    04:1e:48:0f:ef:e8:36:c6:e8:b2:88:be:8c:6d:d0:
                    66:c7:6f:cb:61:61:16:6b:0c:c0:7d:f3:9b:55:0d:
                    6b:4b:56:29:f5:36:6d:84:e9:f1:c4:ef:10:50:ac:
                    ed:c3:47:16:c9:76:f8:05:b8:6b:84:8e:68:4b:77:
                    db:5f:ff:dd:74:f2:2c:c7:10:1b:70:a4:cb:34:62:
                    65:47:0f:e2:88:46:a0:16:7b:68:c7:1f:bd:3a:70:
                    07:97:8d:82:f7:d1:9d:be:3e:97:52:78:46:52:76:
                    a1:1e:9b:9e:dd:83:db:64:81:6f:e6:44:54:a7:7f:
                    6d:6e:f8:0f:df:16:e2:fa:67:bf:9c:d5:9d:ef:a3:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:62:6A:18:C1:F3:37:FA:A2:D2:EF:19:8E:E3:C9:38:0A:55:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48db14d1-8bc7-3f6b-8bbb-b5a23923e288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:41:6f:65:1e:31:3b:0a:00:34:95:71:bc:96:9a:39:20:
         29:4a:83:c3:28:a5:52:b9:6f:93:0f:64:43:3d:c0:a2:61:1a:
         3e:e1:cb:72:5c:b2:19:17:a8:07:56:0a:49:ad:02:13:6f:2e:
         ac:22:4b:77:9f:8a:5a:a5:a0:fc:42:ad:19:94:b8:4f:2d:e8:
         5c:80:ee:5f:43:bf:eb:da:c1:96:d9:62:d0:e0:83:d8:64:8a:
         e4:db:31:c7:dd:8b:59:3f:dd:85:e5:21:f7:c4:bd:38:8d:7b:
         ae:4a:28:dc:2d:53:43:98:e0:3b:1f:92:d0:f3:a8:1c:d2:33:
         35:44:71:fb:31:98:6d:0d:58:8f:2b:8d:c5:27:a3:d7:ca:00:
         e7:8e:d0:af:da:c3:30:59:92:bc:8c:0c:1f:b5:02:95:97:c5:
         f9:b8:97:11:95:d3:21:21:46:16:ff:fb:78:29:87:3b:98:64:
         13:4b:b7:42:9e:ae:d0:29:fa:ef:d5:66:ce:f3:c1:c0:1a:45:
         27:72:76:a3:d2:2a:b4:bb:a0:d0:2e:c2:ef:ab:7b:59:e2:87:
         6c:e0:6a:c0:06:58:43:9d:58:be:0f:fd:7e:00:ad:10:24:45:
         4d:73:b3:b8:0d:2f:2d:87:a6:de:70:67:2d:13:7a:ab:64:d0:
         65:e9:14:00
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri52JuubBn4re6CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzcwMloXDTI1MTExODE1MzcwMlowLzEtMCsGA1UEAxMk
ZDE3MjdjY2QtOTI2OC00MzFlLWIyODItZmVhMmIwYjc1MjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Dpykjtef8wWeo1qxLHkN2lw9HHv3wqbdOQ
nAlCkjfxZA4QS52/65tlUiINmESMFKKL2o3yYb5f2wkcPP91JQ1ZOBadEOcMfgCS
P5d83N0seqA/eZ0fqYVU7aL0JlfsFT+6EDTH00KH5iDQWYzOWyJNIrBCFBoEHkgP
7+g2xuiyiL6MbdBmx2/LYWEWawzAffObVQ1rS1Yp9TZthOnxxO8QUKztw0cWyXb4
BbhrhI5oS3fbX//ddPIsxxAbcKTLNGJlRw/iiEagFntoxx+9OnAHl42C99Gdvj6X
UnhGUnahHpue3YPbZIFv5kRUp39tbvgP3xbi+me/nNWd76MbHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFvbYmoYwfM3+qLS7xmO48k4ClX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhkYjE0ZDEtOGJjNy0z
ZjZiLThiYmItYjVhMjM5MjNlMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDZwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCbD0FvZR4xOwoANJVxvJaaOSApSoPDKKVSuW+TD2RDPcCiYRo+4cty
XLIZF6gHVgpJrQITby6sIkt3n4papaD8Qq0ZlLhPLehcgO5fQ7/r2sGW2WLQ4IPY
ZIrk2zHH3YtZP92F5SH3xL04jXuuSijcLVNDmOA7H5LQ86gc0jM1RHH7MZhtDViP
K43FJ6PXygDnjtCv2sMwWZK8jAwftQKVl8X5uJcRldMhIUYW//t4KYc7mGQTS7dC
nq7QKfrv1WbO88HAGkUncnaj0iq0u6DQLsLvq3tZ4ods4GrABlhDnVi+D/1+AK0Q
JEVNc7O4DS8th6becGctE3qrZNBl6RQA
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:42 2025 by rpki-client