Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa
File:                     4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa (raw, json)
Hash identifier:          7Mp5c7bIVMYq8tZF05GwC5HJ7ymqhV1RmhikVLQWbqk=
Subject key identifier:   82:BC:84:06:06:FA:CE:0B:B7:C3:21:61:DB:E8:C4:B0:8B:73:74:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C8A94BC218465CBB7B0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396597
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8a:94:bc:21:84:65:cb:b7:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=8cdc64d2-49ee-4138-b136-b3ffe4328f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:cf:c0:d8:20:de:9f:21:41:af:cb:79:c6:
                    69:9a:58:1a:f9:c6:83:cd:a5:a3:54:5d:f9:3b:76:
                    c5:2d:c1:a0:6c:f3:c8:6d:26:72:df:60:68:0f:10:
                    88:23:04:96:ca:37:b5:8d:f1:a7:c2:76:d4:1a:92:
                    a9:a0:a5:3a:34:8f:5b:a4:b9:6e:78:40:03:7c:c5:
                    55:9b:ae:30:73:7a:95:42:d4:19:c1:e2:de:07:31:
                    2c:22:8f:f7:86:06:02:26:49:07:c4:42:db:27:a7:
                    63:73:88:3e:9e:49:8a:0e:e3:f4:e5:87:92:d1:3d:
                    f9:77:76:5c:fb:c7:3d:26:fe:69:8f:d7:17:94:18:
                    bb:f4:c6:6b:71:bc:37:89:46:4a:c6:83:6e:7c:e1:
                    7d:f5:5e:a0:53:7e:18:1b:24:f4:f0:34:d0:1b:88:
                    af:12:fd:20:74:e6:f1:68:a0:3a:00:9f:81:fc:41:
                    bf:75:f4:c8:d1:bc:b3:57:2e:0b:e8:28:8d:9d:1c:
                    9e:db:2e:fa:d1:05:a4:87:7b:16:cf:32:04:42:02:
                    93:9f:52:f2:f6:8b:b8:99:6f:54:05:20:86:46:e1:
                    7b:81:0f:32:0f:a6:59:a4:8e:a4:b0:a8:7f:f9:8b:
                    8a:05:a6:cf:d4:2b:de:5e:d5:dc:1d:a2:d1:dc:93:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BC:84:06:06:FA:CE:0B:B7:C3:21:61:DB:E8:C4:B0:8B:73:74:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a0296c2-de6f-3c32-a11e-91dfe6812e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:da:a0:b9:18:63:bc:3b:93:41:dd:16:84:85:09:0c:72:43:
         ba:83:28:e4:69:44:5d:25:1d:aa:14:d7:6a:bd:80:51:a3:c0:
         af:50:6e:8b:89:39:db:ba:04:0a:4b:f2:e0:85:6e:dc:94:f5:
         66:7e:07:a1:cf:cf:8b:d8:02:e6:76:2e:7e:16:fb:74:58:c7:
         e9:15:4c:f4:7e:d0:00:bb:49:07:bd:37:e2:d6:c6:00:18:a7:
         52:e7:d0:89:dc:33:13:a8:2c:c5:6c:fd:88:e9:13:45:a3:8c:
         21:28:c4:95:14:c4:8e:30:5a:87:bf:33:23:97:ad:df:03:de:
         dd:4e:06:05:55:44:e6:97:73:19:ec:23:f5:d6:3b:a5:77:e8:
         3e:6f:d5:de:1e:ce:a4:88:12:7f:be:84:fa:b9:13:92:24:09:
         97:0d:9a:ed:d2:ea:10:e2:b5:fa:52:97:4b:28:9d:26:e5:3d:
         0a:47:10:29:fa:d6:2b:b6:9e:a5:2a:b7:90:a4:e0:f2:a3:e7:
         a4:5a:9e:22:0b:b6:a8:f9:15:a1:d3:38:f6:ea:0d:95:12:f9:
         c0:e5:b4:45:04:5a:01:e2:88:6b:b6:29:0a:41:9a:76:32:64:
         f5:e1:60:61:48:26:53:41:76:e0:b7:18:cc:fd:8e:60:1b:10:
         f0:58:79:1a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIqUvCGEZcu3sMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk
OGNkYzY0ZDItNDllZS00MTM4LWIxMzYtYjNmZmU0MzI4ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PLPwNgg3p8hQa/LecZpmlga+caDzaWjVF35
O3bFLcGgbPPIbSZy32BoDxCIIwSWyje1jfGnwnbUGpKpoKU6NI9bpLlueEADfMVV
m64wc3qVQtQZweLeBzEsIo/3hgYCJkkHxELbJ6djc4g+nkmKDuP05YeS0T35d3Zc
+8c9Jv5pj9cXlBi79MZrcbw3iUZKxoNufOF99V6gU34YGyT08DTQG4ivEv0gdObx
aKA6AJ+B/EG/dfTI0byzVy4L6CiNnRye2y760QWkh3sWzzIEQgKTn1Ly9ou4mW9U
BSCGRuF7gQ8yD6ZZpI6ksKh/+YuKBabP1CveXtXcHaLR3JNcIwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIK8hAYG+s4Lt8MhYdvoxLCLc3TqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGEwMjk2YzItZGU2Zi0z
YzMyLWExMWUtOTFkZmU2ODEyZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCu2qC5GGO8O5NB3RaEhQkMckO6gyjkaURdJR2qFNdqvYBRo8CvUG6L
iTnbugQKS/LghW7clPVmfgehz8+L2ALmdi5+Fvt0WMfpFUz0ftAAu0kHvTfi1sYA
GKdS59CJ3DMTqCzFbP2I6RNFo4whKMSVFMSOMFqHvzMjl63fA97dTgYFVUTml3MZ
7CP11juld+g+b9XeHs6kiBJ/voT6uROSJAmXDZrt0uoQ4rX6UpdLKJ0m5T0KRxAp
+tYrtp6lKreQpODyo+ekWp4iC7ao+RWh0zj26g2VEvnA5bRFBFoB4ohrtikKQZp2
MmT14WBhSCZTQXbgtxjM/Y5gGxDwWHka
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:33 2025 by rpki-client