Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/504fdbff-b85f-38f5-94de-7617a935ea19.roa
File:                     504fdbff-b85f-38f5-94de-7617a935ea19.roa (raw, json)
Hash identifier:          QVxAP2iw5koIWMFnG9RRpFFctOGWEuU6kuenL+mG+Ek=
Subject key identifier:   03:70:E5:DD:1C:B9:18:CE:3B:E6:2D:0D:8B:2E:AE:5E:BC:9D:18:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC4815CB2AB10E4610480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/504fdbff-b85f-38f5-94de-7617a935ea19.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     36625
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c4:81:5c:b2:ab:10:e4:61:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=47c59866-755b-4b72-a15f-82d74722fb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:f3:a4:08:fc:cb:f0:cf:a0:34:4d:f7:19:
                    2d:f3:c8:76:ed:1a:0b:14:bd:89:75:29:eb:f4:24:
                    5c:9f:a7:c2:3f:5c:ea:a3:34:cc:9a:ba:2a:6b:d5:
                    1b:90:d9:fa:8d:ac:04:d3:dd:bf:e9:7d:5f:c7:b0:
                    2d:84:6b:e1:38:4a:fc:5e:3c:bb:b2:39:19:19:72:
                    cb:3b:b3:3a:3a:d6:6a:04:53:87:a0:86:b5:27:59:
                    b6:93:82:28:f0:da:c7:93:66:1b:97:be:40:25:ff:
                    88:21:e5:30:ed:e6:f2:50:3a:2b:2f:bc:8e:c3:db:
                    57:d2:97:ba:7e:7f:b5:21:4c:73:59:af:87:1d:76:
                    37:f6:88:3f:7e:75:66:3d:d1:8e:99:2a:f4:8e:1c:
                    52:9b:66:d7:92:d2:0f:98:42:3b:c4:70:fa:2a:77:
                    3d:9d:bc:18:4d:a1:78:f1:de:94:d0:e0:63:18:30:
                    99:a5:c0:6a:98:22:70:c2:0c:71:07:61:1d:61:c5:
                    5d:73:9f:eb:76:b6:75:e0:b6:e2:59:45:47:3e:ea:
                    80:05:b0:a7:06:39:e3:b1:e3:b7:0a:62:5b:6d:b5:
                    50:91:0a:64:f6:3a:22:aa:0b:09:0c:43:8d:25:5b:
                    2e:39:3f:72:c8:cf:d0:75:a5:1d:13:1f:ca:58:c3:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:70:E5:DD:1C:B9:18:CE:3B:E6:2D:0D:8B:2E:AE:5E:BC:9D:18:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/504fdbff-b85f-38f5-94de-7617a935ea19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:a5:9c:b6:ea:19:4c:89:f3:46:fc:07:b9:b0:9c:01:b1:
         78:7d:3f:e3:ed:99:63:c5:7d:c3:58:8f:1a:d1:88:49:29:c2:
         5c:f8:c3:a8:bb:87:b3:7a:eb:ba:81:28:60:c0:aa:0b:25:be:
         37:e2:e9:bc:ec:7d:5f:34:7e:5c:bb:83:3f:d2:1b:6b:bf:0d:
         cd:ae:b4:f9:8f:68:bf:26:a8:11:95:d0:db:15:8e:c2:6f:94:
         ec:46:b0:87:58:dc:fc:ae:fb:e9:82:18:16:c9:19:16:00:d1:
         d6:89:ae:49:99:6a:b1:58:50:eb:17:5a:97:d5:68:43:7d:60:
         34:7f:ec:c4:7d:86:88:c9:49:20:2c:71:17:8b:ac:d8:0d:2a:
         58:5b:44:ac:3c:b1:e6:6f:29:46:41:2d:41:06:7d:a4:00:a2:
         e8:cd:01:7a:0f:e6:af:85:6a:93:55:89:77:ca:f4:2f:df:98:
         80:96:fc:c3:47:b7:f6:5f:ac:0f:e1:46:0d:bd:45:a2:81:e0:
         b8:b4:cc:6f:ab:97:c2:18:24:26:79:12:a4:ac:44:3f:64:0b:
         f4:d6:0d:9d:3c:a7:77:30:80:7d:e1:3f:97:43:7a:ad:8e:e1:
         57:51:2b:1a:01:6d:58:d8:a5:4a:c1:1b:d9:8f:ad:d1:ab:33:
         e1:b5:a5:42
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoeKsSBXLKrEORhBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
NDdjNTk4NjYtNzU1Yi00YjcyLWExNWYtODJkNzQ3MjJmYjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL/zpAj8y/DPoDRN9xkt88h27RoLFL2JdSnr
9CRcn6fCP1zqozTMmroqa9UbkNn6jawE092/6X1fx7AthGvhOEr8Xjy7sjkZGXLL
O7M6OtZqBFOHoIa1J1m2k4Io8NrHk2Ybl75AJf+IIeUw7ebyUDorL7yOw9tX0pe6
fn+1IUxzWa+HHXY39og/fnVmPdGOmSr0jhxSm2bXktIPmEI7xHD6Knc9nbwYTaF4
8d6U0OBjGDCZpcBqmCJwwgxxB2EdYcVdc5/rdrZ14LbiWUVHPuqABbCnBjnjseO3
CmJbbbVQkQpk9joiqgsJDEONJVsuOT9yyM/QdaUdEx/KWMN9UwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFANw5d0cuRjOO+YtDYsurl68nRjXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA0ZmRiZmYtYjg1Zi0z
OGY1LTk0ZGUtNzYxN2E5MzVlYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC9QqWctuoZTInzRvwHubCcAbF4fT/j7ZljxX3DWI8a0YhJKcJc+MOo
u4ezeuu6gShgwKoLJb434um87H1fNH5cu4M/0htrvw3NrrT5j2i/JqgRldDbFY7C
b5TsRrCHWNz8rvvpghgWyRkWANHWia5JmWqxWFDrF1qX1WhDfWA0f+zEfYaIyUkg
LHEXi6zYDSpYW0SsPLHmbylGQS1BBn2kAKLozQF6D+avhWqTVYl3yvQv35iAlvzD
R7f2X6wP4UYNvUWigeC4tMxvq5fCGCQmeRKkrEQ/ZAv01g2dPKd3MIB94T+XQ3qt
juFXUSsaAW1Y2KVKwRvZj63RqzPhtaVC
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:03:41 2025 by rpki-client