Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58357abd-85ea-3ae0-b6a3-2abbf0ae511a.roa
File:                     58357abd-85ea-3ae0-b6a3-2abbf0ae511a.roa (raw, json)
Hash identifier:          WgZX/a1EmoZCLP3TD98WPl/L5SFHhhzic5SarBotFWY=
Subject key identifier:   B1:65:14:D6:EA:7F:9E:9D:F2:E6:C1:62:70:50:C6:72:B2:25:BD:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E86CDB74F0A847329C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58357abd-85ea-3ae0-b6a3-2abbf0ae511a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397205
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e8:6c:db:74:f0:a8:47:32:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ba597ec0-ed19-4f12-85cc-f9ed1008bbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:54:9a:d5:77:9a:4b:23:59:04:62:a9:fd:06:
                    59:6b:3b:89:37:11:bd:27:b4:e7:1a:48:4a:b5:6d:
                    a3:29:f6:02:be:97:f4:2f:e9:f3:4b:70:c0:77:6c:
                    2d:20:3c:9c:60:cc:ab:ba:0c:90:b8:e8:76:a3:de:
                    2f:b0:3e:95:20:52:62:66:9c:2c:2f:c0:a5:49:c9:
                    e1:4d:91:a7:00:d9:5d:4d:f8:64:6c:a8:d6:41:f7:
                    6a:b7:fc:64:13:7a:4a:da:9b:08:94:0c:f6:69:bf:
                    80:bd:05:17:1b:a4:f7:9d:ed:78:30:97:60:ab:73:
                    e3:8a:68:df:84:c8:60:bf:7b:eb:d0:d7:85:1a:e7:
                    1e:fd:e9:f2:99:e4:3f:01:6c:96:41:0d:a9:47:1c:
                    ff:82:c4:b9:65:32:82:cc:ef:3b:ab:2a:1a:ab:f8:
                    bd:cf:59:d5:a8:62:19:a7:93:80:a7:8a:f1:c4:8d:
                    eb:ea:f8:da:a1:13:d4:09:2f:74:d5:91:71:29:55:
                    f1:4d:8d:76:d0:21:a6:c1:b3:ab:a1:6b:c0:eb:ff:
                    94:4f:c9:04:c9:cd:e9:9e:32:b4:19:52:1b:1e:0a:
                    93:dc:87:ad:44:48:3c:4c:1c:08:59:06:99:30:48:
                    41:66:8f:1d:a7:cb:8d:4b:28:6d:3b:34:e8:ec:82:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:14:D6:EA:7F:9E:9D:F2:E6:C1:62:70:50:C6:72:B2:25:BD:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58357abd-85ea-3ae0-b6a3-2abbf0ae511a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c0:a3:4a:15:21:26:35:24:d3:1d:e7:ab:6c:61:16:b8:f2:
         9c:9f:7f:f7:3c:70:7f:c0:c9:2d:97:17:7e:be:82:44:2b:89:
         52:81:b2:1e:2c:d4:6c:f5:eb:38:4a:92:e8:55:d0:af:5d:d4:
         3d:7a:be:b5:fb:7d:3a:d8:d3:26:6d:85:17:fb:17:d9:36:9d:
         72:76:f5:36:e5:72:ae:70:1e:90:bf:95:ee:e9:1f:b2:89:da:
         c2:02:08:2e:6a:2d:f1:d3:23:cc:bc:3b:e7:d1:98:39:e7:e6:
         c7:2c:3f:8d:26:25:2f:5a:db:22:e8:ad:00:18:52:b4:d9:ad:
         48:41:40:cf:3c:86:e1:7c:01:01:87:b3:3d:30:4b:92:8d:5b:
         a8:3a:53:25:50:6a:00:bd:24:b9:6b:94:9f:ad:e8:70:66:78:
         c9:bc:1e:32:0a:b6:ff:fa:99:d9:d8:4e:db:02:40:bc:38:2e:
         87:cb:a9:ed:04:9a:24:86:c8:34:56:64:e0:f6:bc:4e:9d:51:
         1b:aa:fa:d6:45:4e:42:da:cc:30:16:13:51:f4:f2:6b:c2:f6:
         6f:c6:94:89:e7:62:4c:e2:58:4a:b6:dd:73:93:87:0d:3d:a3:
         3e:8b:cf:9d:54:fb:2a:d9:cd:cd:24:d8:06:c7:23:2d:de:94:
         50:5d:e6:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhluhs23TwqEcynIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
YmE1OTdlYzAtZWQxOS00ZjEyLTg1Y2MtZjllZDEwMDhiYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFSa1XeaSyNZBGKp/QZZazuJNxG9J7TnGkhK
tW2jKfYCvpf0L+nzS3DAd2wtIDycYMyrugyQuOh2o94vsD6VIFJiZpwsL8ClScnh
TZGnANldTfhkbKjWQfdqt/xkE3pK2psIlAz2ab+AvQUXG6T3ne14MJdgq3Pjimjf
hMhgv3vr0NeFGuce/enymeQ/AWyWQQ2pRxz/gsS5ZTKCzO87qyoaq/i9z1nVqGIZ
p5OAp4rxxI3r6vjaoRPUCS901ZFxKVXxTY120CGmwbOroWvA6/+UT8kEyc3pnjK0
GVIbHgqT3IetREg8TBwIWQaZMEhBZo8dp8uNSyhtOzTo7IIuXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLFlFNbqf56d8ubBYnBQxnKyJb3nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTgzNTdhYmQtODVlYS0z
YWUwLWI2YTMtMmFiYmYwYWU1MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBewKNKFSEmNSTTHeerbGEWuPKcn3/3PHB/wMktlxd+voJEK4lSgbIe
LNRs9es4SpLoVdCvXdQ9er61+3062NMmbYUX+xfZNp1ydvU25XKucB6Qv5Xu6R+y
idrCAgguai3x0yPMvDvn0Zg55+bHLD+NJiUvWtsi6K0AGFK02a1IQUDPPIbhfAEB
h7M9MEuSjVuoOlMlUGoAvSS5a5SfrehwZnjJvB4yCrb/+pnZ2E7bAkC8OC6Hy6nt
BJokhsg0VmTg9rxOnVEbqvrWRU5C2swwFhNR9PJrwvZvxpSJ52JM4lhKtt1zk4cN
PaM+i8+dVPsq2c3NJNgGxyMt3pRQXeY5
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:34 2025 by rpki-client