Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa
File:                     524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa (raw, json)
Hash identifier:          hVzd3+Lohnpi6CzdGG2rY/tQylLuAayLIzohiMMMixQ=
Subject key identifier:   CD:3C:E6:AD:A6:05:0D:73:AE:8A:11:A0:28:CB:9E:56:B2:F9:17:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC2FDC25D14F93BB9DCA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396580
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c2:fd:c2:5d:14:f9:3b:b9:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=8cefb35f-a613-4e70-a431-083d4933f0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:8a:32:af:f7:c8:78:f5:f9:c4:f7:40:c9:
                    6b:67:22:25:9f:a8:59:85:38:e2:57:49:9b:0d:04:
                    a3:22:ff:2a:c2:4d:94:6e:d3:eb:70:6d:a2:d6:9a:
                    fe:88:15:c8:03:e6:99:b7:30:ee:7b:8c:e0:81:d4:
                    29:93:ca:5d:2f:38:d3:4d:66:81:ca:b4:7e:a2:de:
                    97:5a:5a:ec:f6:44:6a:39:ba:71:bd:64:1e:9a:d0:
                    5f:e3:7c:6b:50:79:68:59:c6:f2:63:7d:92:3e:94:
                    1c:6e:c6:ac:3b:a0:65:84:95:4f:60:6f:f1:67:d7:
                    e6:1f:c7:c2:c9:70:86:3a:f1:a6:e2:e9:15:38:9f:
                    85:46:ed:b5:6b:02:88:cf:1f:12:17:ef:cb:94:40:
                    7f:f9:da:f8:50:2e:42:10:d6:f8:87:71:61:33:cb:
                    04:ab:1c:d3:9d:c6:02:a1:17:34:41:f0:f1:cd:93:
                    0e:2f:68:2e:67:94:52:bc:06:6d:a4:89:e9:e0:df:
                    7c:06:8f:43:69:db:e4:5b:8e:98:63:11:eb:e9:18:
                    bf:e7:5b:5a:25:c8:de:28:2a:9a:78:40:53:b9:67:
                    1c:77:60:fd:90:f3:cc:56:1d:d4:36:b3:cb:d8:97:
                    5b:13:54:29:df:c7:f7:db:4d:b7:6e:41:f4:a5:ba:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3C:E6:AD:A6:05:0D:73:AE:8A:11:A0:28:CB:9E:56:B2:F9:17:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/524ed4f5-7ef4-36db-b92c-4c4337b6817d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:de:b8:c1:a0:34:8d:ae:29:8f:29:bf:6e:9f:a4:46:fa:
         1c:96:f0:28:49:94:e9:4e:ae:d7:57:3c:81:5c:a0:d1:3c:e0:
         3b:02:0b:3d:68:33:5c:d4:81:06:9b:f9:5d:c5:8f:77:28:e4:
         2d:f0:e4:73:32:5a:6b:2d:20:87:d9:c1:60:d9:8c:ca:31:13:
         6e:d0:88:7a:d8:5e:38:c2:52:51:6d:d6:63:06:af:87:9f:9b:
         39:b0:91:a6:ac:3d:5c:4f:c4:56:49:30:e2:ad:95:7a:e0:6e:
         52:73:2b:92:b6:7d:92:20:5a:e3:aa:52:0a:24:85:9a:ce:06:
         21:e0:49:13:5e:df:1f:24:3b:a4:f9:62:0d:a1:5d:e8:48:da:
         a2:5e:00:45:51:92:49:94:fe:0b:e4:17:02:af:d8:29:37:14:
         15:da:dd:b3:cc:6f:c4:ad:b1:ea:9f:2f:ef:74:32:19:1f:c0:
         b0:d2:f2:3a:cf:c8:fb:70:e0:bb:8b:31:73:0f:a5:c8:d6:d1:
         8c:ae:ec:cd:8d:58:e8:38:65:5c:b9:a8:c4:9a:8b:ce:0c:cd:
         ed:53:8e:57:a3:d7:38:9c:3c:cb:25:49:57:6c:19:09:3f:51:
         7f:d7:0a:55:a6:6b:67:a0:46:1b:da:70:0d:53:a6:5a:ca:40:
         d2:8d:22:47
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoeKsL9wl0U+Tu53KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
OGNlZmIzNWYtYTYxMy00ZTcwLWE0MzEtMDgzZDQ5MzNmMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIWKMq/3yHj1+cT3QMlrZyIln6hZhTjiV0mb
DQSjIv8qwk2UbtPrcG2i1pr+iBXIA+aZtzDue4zggdQpk8pdLzjTTWaByrR+ot6X
Wlrs9kRqObpxvWQemtBf43xrUHloWcbyY32SPpQcbsasO6BlhJVPYG/xZ9fmH8fC
yXCGOvGm4ukVOJ+FRu21awKIzx8SF+/LlEB/+dr4UC5CENb4h3FhM8sEqxzTncYC
oRc0QfDxzZMOL2guZ5RSvAZtpInp4N98Bo9DadvkW46YYxHr6Ri/51taJcjeKCqa
eEBTuWccd2D9kPPMVh3UNrPL2JdbE1Qp38f32023bkH0pbrXxwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM085q2mBQ1zrooRoCjLnlay+Rd5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI0ZWQ0ZjUtN2VmNC0z
NmRiLWI5MmMtNGM0MzM3YjY4MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCPy964waA0ja4pjym/bp+kRvoclvAoSZTpTq7XVzyBXKDRPOA7Ags9
aDNc1IEGm/ldxY93KOQt8ORzMlprLSCH2cFg2YzKMRNu0Ih62F44wlJRbdZjBq+H
n5s5sJGmrD1cT8RWSTDirZV64G5ScyuStn2SIFrjqlIKJIWazgYh4EkTXt8fJDuk
+WINoV3oSNqiXgBFUZJJlP4L5BcCr9gpNxQV2t2zzG/ErbHqny/vdDIZH8Cw0vI6
z8j7cOC7izFzD6XI1tGMruzNjVjoOGVcuajEmovODM3tU45Xo9c4nDzLJUlXbBkJ
P1F/1wpVpmtnoEYb2nANU6ZaykDSjSJH
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:44:50 2025 by rpki-client