Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa
File:                     58b146c8-3a81-318a-894b-f0a86c83b527.roa (raw, json)
Hash identifier:          oDqiBA8sXnwT6e7hgYTvr/LNzxEL7Pd+2xQZJHDA9pA=
Subject key identifier:   28:A0:71:58:E6:79:4D:12:77:AA:DD:74:BD:AC:FC:FD:3D:B0:4E:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61E601ECD8434739B8A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396564
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e6:01:ec:d8:43:47:39:b8:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=66ee894c-be13-40d4-a2ba-a6697fa2f153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ea:d1:96:a3:e0:f5:48:55:56:e3:12:60:42:
                    ab:32:6a:75:23:b9:19:b2:30:06:a8:13:24:1a:77:
                    f6:a9:bf:8f:7f:7b:5d:50:63:fc:d0:f9:a6:2e:83:
                    b0:68:31:31:46:17:ae:f2:84:6f:4f:a1:3d:01:4c:
                    25:41:59:a5:df:fd:cf:72:26:b0:a7:36:e5:17:e8:
                    d2:35:18:24:86:d4:8e:5f:60:66:b3:46:eb:20:b8:
                    74:60:66:9a:f4:5c:49:3b:7f:1e:e9:f4:18:26:54:
                    f9:66:b5:38:9b:84:69:f8:59:c2:05:98:5f:7c:89:
                    ed:0f:0d:08:c3:bb:54:9e:41:bf:97:95:6c:da:7b:
                    3f:59:b0:12:a6:e7:cc:83:49:ab:39:ab:9b:51:3e:
                    7a:cf:62:75:7b:a3:25:77:78:8b:d1:3b:61:86:d5:
                    ca:1e:34:35:2e:30:31:4a:1c:fa:b3:40:05:30:84:
                    ec:3c:31:b6:8e:c6:d4:95:c9:3e:6f:d5:a4:e3:8c:
                    a2:82:93:05:5a:60:cb:3b:87:bf:da:8b:ad:b8:33:
                    6c:c0:93:54:fc:3a:96:46:40:cd:8d:c6:c6:41:66:
                    ee:be:b7:02:9f:eb:06:e6:7e:4c:61:d5:e4:ca:e2:
                    03:fb:7c:00:57:ae:7e:da:25:d1:77:53:78:77:51:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:71:58:E6:79:4D:12:77:AA:DD:74:BD:AC:FC:FD:3D:B0:4E:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58b146c8-3a81-318a-894b-f0a86c83b527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0e:ae:9d:d6:22:f1:19:6c:19:72:1c:79:90:6f:5c:16:0c:
         de:25:40:66:92:eb:3a:59:04:50:de:8d:10:f5:2f:bf:63:4a:
         6b:0a:20:c9:1e:2a:95:29:cf:2d:d1:3a:9d:d6:c2:85:2f:16:
         e5:09:74:b3:23:fd:b5:4c:2d:cb:90:32:b8:4c:55:31:59:47:
         4e:43:a8:74:a6:5c:61:57:d1:6e:39:3d:65:de:81:b4:94:f1:
         d3:88:ee:26:ce:7d:84:d3:1a:1e:8b:15:3b:fc:47:49:e8:95:
         6c:05:f1:2c:05:c1:7f:32:e6:af:8e:62:e6:63:02:9e:1b:86:
         7e:ba:40:0f:f5:90:25:94:5c:86:d7:69:87:66:7a:1e:ca:ae:
         d4:c1:35:bb:4f:04:d0:90:51:48:1e:8a:37:73:fe:6e:88:e3:
         ea:36:05:05:fd:f1:b9:5e:51:61:51:cc:54:af:7a:7a:5c:96:
         4e:a1:f0:d9:72:c0:0a:05:c2:37:e5:c1:cd:a4:8d:72:5e:9b:
         c7:d6:39:62:37:76:80:15:16:bd:8f:ba:9c:dd:2b:0a:8f:02:
         0c:ce:85:1c:b6:a6:2e:3e:55:92:72:76:ae:d8:45:f4:2a:b5:
         0f:7a:d0:f2:70:7b:31:30:b0:03:90:d9:5f:9b:1a:ca:88:a8:
         7d:c5:aa:90
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeYB7NhDRzm4oAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
NjZlZTg5NGMtYmUxMy00MGQ0LWEyYmEtYTY2OTdmYTJmMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgerRlqPg9UhVVuMSYEKrMmp1I7kZsjAGqBMk
Gnf2qb+Pf3tdUGP80PmmLoOwaDExRheu8oRvT6E9AUwlQVml3/3PciawpzblF+jS
NRgkhtSOX2Bms0brILh0YGaa9FxJO38e6fQYJlT5ZrU4m4Rp+FnCBZhffIntDw0I
w7tUnkG/l5Vs2ns/WbASpufMg0mrOaubUT56z2J1e6Mld3iL0TthhtXKHjQ1LjAx
Shz6s0AFMITsPDG2jsbUlck+b9Wk44yigpMFWmDLO4e/2outuDNswJNU/DqWRkDN
jcbGQWbuvrcCn+sG5n5MYdXkyuID+3wAV65+2iXRd1N4d1GtswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCigcVjmeU0Sd6rddL2s/P09sE4+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThiMTQ2YzgtM2E4MS0z
MThhLTg5NGItZjBhODZjODNiNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBODq6d1iLxGWwZchx5kG9cFgzeJUBmkus6WQRQ3o0Q9S+/Y0prCiDJ
HiqVKc8t0Tqd1sKFLxblCXSzI/21TC3LkDK4TFUxWUdOQ6h0plxhV9FuOT1l3oG0
lPHTiO4mzn2E0xoeixU7/EdJ6JVsBfEsBcF/MuavjmLmYwKeG4Z+ukAP9ZAllFyG
12mHZnoeyq7UwTW7TwTQkFFIHoo3c/5uiOPqNgUF/fG5XlFhUcxUr3p6XJZOofDZ
csAKBcI35cHNpI1yXpvH1jliN3aAFRa9j7qc3SsKjwIMzoUctqYuPlWScnau2EX0
KrUPetDycHsxMLADkNlfmxrKiKh9xaqQ
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:27 2025 by rpki-client