Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501219e6-f271-3660-960f-293c004eb495.roa
File:                     501219e6-f271-3660-960f-293c004eb495.roa (raw, json)
Hash identifier:          1HBCUX71v5IZOXlX69RuZO68KHT5kWf1C8SHO1BKYS4=
Subject key identifier:   CE:48:60:05:D9:2F:17:C0:95:47:AC:F0:A4:0B:15:F1:98:7E:B4:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9CB1774CCD21E7F15C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501219e6-f271-3660-960f-293c004eb495.roa
Signing time:             Wed 20 Aug 2025 14:37:02 +0000
ROA not before:           Wed 20 Aug 2025 14:37:02 +0000
ROA not after:            Tue 18 Nov 2025 15:37:02 +0000
asID:                     396589
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9c:b1:77:4c:cd:21:e7:f1:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:02 2025 GMT
            Not After : Nov 18 15:37:02 2025 GMT
        Subject: CN=d4c9e1db-2269-4e83-b5e3-3833ea526821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:0e:9c:85:59:44:0a:98:e0:a9:55:49:84:
                    87:8e:d6:dd:0f:dc:71:24:8e:0b:ad:7f:8a:72:ec:
                    e4:30:e6:ac:08:ad:88:d3:5c:e1:ef:a5:49:d3:aa:
                    de:cf:a8:c6:8f:7a:9a:48:14:d4:ad:1d:4b:f4:eb:
                    f8:90:f4:5f:8c:c5:18:ae:4b:56:77:a9:60:c3:15:
                    2e:47:c9:73:07:59:c5:6c:b0:b6:0c:84:be:0c:29:
                    d8:fc:46:63:e2:01:60:02:4f:79:0b:8a:0d:83:ca:
                    c5:00:d8:41:21:72:53:f8:94:9e:c4:2b:a4:44:1c:
                    8c:29:80:a7:6f:fd:92:99:9f:07:ca:39:21:30:44:
                    fe:1d:aa:91:92:0d:a3:73:55:4c:01:31:2f:35:60:
                    6b:98:7b:c7:3c:37:a6:ce:0e:dd:da:06:b4:c9:60:
                    5d:ea:9a:5f:51:1c:3e:10:71:39:d3:0a:ef:06:d2:
                    88:08:86:e0:3b:82:e0:4f:fe:a3:53:78:28:2d:44:
                    7f:d7:2b:0f:36:90:09:75:6d:02:e3:53:b0:1a:bd:
                    1c:42:99:75:6f:81:17:f2:2b:88:64:df:d0:8a:8c:
                    33:d1:86:53:b9:d8:41:7e:fc:9d:b2:f9:d4:11:8d:
                    35:58:ad:68:dd:2d:86:f4:3e:10:5a:f3:e6:40:2e:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:48:60:05:D9:2F:17:C0:95:47:AC:F0:A4:0B:15:F1:98:7E:B4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501219e6-f271-3660-960f-293c004eb495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:dc:0e:be:e6:71:1a:6f:3e:3b:d6:af:53:f1:fa:17:72:
         73:5a:b3:af:8b:f5:7c:d9:e6:27:1a:ca:93:94:7b:f0:1e:bb:
         2e:ea:ae:db:17:01:76:2d:bf:c6:3e:fb:86:27:24:98:24:7e:
         e9:70:fa:9a:87:b2:a6:72:f6:bd:30:83:9b:3e:4e:42:99:66:
         3c:49:43:cc:8f:e6:bb:cc:da:37:06:32:fd:83:e9:d8:67:64:
         1a:39:b6:b7:5d:e7:31:61:1b:4e:67:d0:8c:e6:f0:4f:d2:96:
         b0:ab:18:64:5d:08:7d:5c:31:cb:e7:70:d5:ec:cf:dc:0d:57:
         51:40:c1:00:11:28:56:04:eb:7c:1a:94:e3:be:c3:7a:c8:7a:
         6a:7e:4d:ff:cf:14:bd:96:6c:ae:51:ef:fb:ed:e8:54:5f:10:
         ce:9b:81:6c:ac:51:2a:c2:f0:03:cb:f2:33:b8:36:e7:fd:f9:
         54:94:38:1e:8e:10:06:6d:8e:2c:80:80:a9:91:0f:9c:f3:8e:
         74:7b:16:53:9f:ca:13:6c:b1:15:61:0c:06:0f:ec:8e:f0:1e:
         ba:30:b7:b2:b0:e4:1a:c5:24:92:02:36:ab:18:bc:c7:fa:7d:
         3a:0a:57:b6:b4:38:8a:73:ef:6f:55:90:b1:41:97:e8:93:e5:
         a2:a4:1d:1f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri5yxd0zNIefxXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzcwMloXDTI1MTExODE1MzcwMlowLzEtMCsGA1UEAxMk
ZDRjOWUxZGItMjI2OS00ZTgzLWI1ZTMtMzgzM2VhNTI2ODIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZkOnIVZRAqY4KlVSYSHjtbdD9xxJI4LrX+K
cuzkMOasCK2I01zh76VJ06rez6jGj3qaSBTUrR1L9Ov4kPRfjMUYrktWd6lgwxUu
R8lzB1nFbLC2DIS+DCnY/EZj4gFgAk95C4oNg8rFANhBIXJT+JSexCukRByMKYCn
b/2SmZ8HyjkhMET+HaqRkg2jc1VMATEvNWBrmHvHPDemzg7d2ga0yWBd6ppfURw+
EHE50wrvBtKICIbgO4LgT/6jU3goLUR/1ysPNpAJdW0C41OwGr0cQpl1b4EX8iuI
ZN/Qiowz0YZTudhBfvydsvnUEY01WK1o3S2G9D4QWvPmQC43kQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM5IYAXZLxfAlUes8KQLFfGYfrSRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTAxMjE5ZTYtZjI3MS0z
NjYwLTk2MGYtMjkzYzAwNGViNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDBPHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtjtwOvuZxGm8+O9avU/H6F3JzWrOvi/V82eYnGsqTlHvwHrsu6q7b
FwF2Lb/GPvuGJySYJH7pcPqah7Kmcva9MIObPk5CmWY8SUPMj+a7zNo3BjL9g+nY
Z2QaOba3XecxYRtOZ9CM5vBP0pawqxhkXQh9XDHL53DV7M/cDVdRQMEAEShWBOt8
GpTjvsN6yHpqfk3/zxS9lmyuUe/77ehUXxDOm4FsrFEqwvADy/IzuDbn/flUlDge
jhAGbY4sgICpkQ+c8450exZTn8oTbLEVYQwGD+yO8B66MLeysOQaxSSSAjarGLzH
+n06Cle2tDiKc+9vVZCxQZfok+WipB0f
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:17 2025 by rpki-client