Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e4c6e1-5173-3998-ac09-69202d62c115.roa
File:                     63e4c6e1-5173-3998-ac09-69202d62c115.roa (raw, json)
Hash identifier:          3xh4I7qg7dcLgky5eg+qMY1VTL7kxCr7MSSddRWVBnk=
Subject key identifier:   AC:D0:35:70:DE:D7:D7:3F:F1:96:71:6E:52:F8:52:90:2A:9A:0D:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EBC4D22FDEEE4CCCD5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e4c6e1-5173-3998-ac09-69202d62c115.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396549
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:eb:c4:d2:2f:de:ee:4c:cc:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=61dc651c-11f3-4ee8-8e20-13f9bc32a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:99:43:b2:81:66:b2:94:c0:14:85:ed:1d:
                    15:ac:38:b5:8d:0e:ea:90:19:c3:d9:a3:a7:a6:91:
                    c0:25:9c:34:17:86:4b:41:a1:60:c9:20:5b:71:c6:
                    25:f4:74:1d:9b:64:81:61:fb:7b:a9:1a:68:5b:3f:
                    a5:dd:91:80:9f:a2:d3:e3:3c:7a:43:1c:b8:3b:af:
                    ae:f0:00:53:08:9f:76:9a:8c:2a:08:a5:c9:ad:1c:
                    a3:ba:8c:05:74:50:9c:14:e8:45:00:e8:d2:81:23:
                    ab:2c:41:99:5d:14:83:78:5c:7c:b7:14:9f:75:e1:
                    88:d2:ed:ef:76:1f:ff:09:52:74:84:e1:c2:b5:1c:
                    50:7e:9c:b3:d4:5d:60:71:c5:8f:cb:66:d4:ca:17:
                    d7:60:7b:10:4c:f1:7b:f6:e3:35:5f:a4:da:4a:27:
                    65:ab:30:cd:90:09:23:71:c9:6b:c0:ba:0e:80:48:
                    11:4f:35:a0:3c:97:4e:92:80:09:a9:b7:48:42:ec:
                    43:b4:9e:c4:86:24:bd:6e:50:8a:59:a9:46:dd:27:
                    c6:25:a2:0a:11:59:cd:53:d0:ca:d6:b7:56:fd:e1:
                    25:6f:5b:e1:67:19:09:2a:17:89:e6:b8:b6:75:e6:
                    e6:1a:0d:6f:54:46:5c:6b:da:2d:09:4f:2f:08:ec:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D0:35:70:DE:D7:D7:3F:F1:96:71:6E:52:F8:52:90:2A:9A:0D:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63e4c6e1-5173-3998-ac09-69202d62c115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:dc:f7:59:31:93:66:58:95:b3:72:5c:7d:cf:93:3f:7e:
         98:36:c5:2f:fc:c6:48:96:65:ca:fb:8a:1c:87:df:72:27:38:
         ed:95:00:e6:98:db:d2:06:45:6a:47:32:87:0c:96:36:83:1a:
         35:a2:04:0b:2e:8a:57:c8:6c:a7:9e:85:75:f7:33:20:e8:74:
         4a:88:90:d3:1e:cd:c4:ce:15:d4:07:20:ad:48:8c:fa:2c:15:
         32:fc:3f:f8:46:d5:d1:9e:01:8c:f7:96:f6:25:11:b7:ee:00:
         65:e1:51:d3:56:c1:cc:16:a0:4b:03:25:fa:28:f7:ec:f0:d2:
         91:29:c2:d7:b8:37:6b:e4:dc:ab:94:88:87:4a:07:91:84:e4:
         0f:59:95:41:c2:f6:04:aa:72:b7:71:48:5f:a6:34:ee:5a:e4:
         34:47:1a:9e:cb:f4:5d:eb:6b:ef:dc:08:9c:dd:2f:11:2c:4a:
         1d:a1:69:74:20:54:e7:4d:11:62:fe:7b:75:5a:66:f0:cc:a6:
         e7:3f:69:e0:25:1e:db:bf:e4:9e:1c:21:05:a8:eb:f9:47:59:
         c9:5a:e5:ee:80:10:7e:94:15:ee:5e:40:83:e4:2b:e7:14:19:
         d8:6a:10:b8:e2:8b:33:ba:19:96:87:fd:f5:e5:ec:74:36:b3:
         da:96:ba:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhluvE0i/e7kzM1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NjFkYzY1MWMtMTFmMy00ZWU4LThlMjAtMTNmOWJjMzJhODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXmZQ7KBZrKUwBSF7R0VrDi1jQ7qkBnD2aOn
ppHAJZw0F4ZLQaFgySBbccYl9HQdm2SBYft7qRpoWz+l3ZGAn6LT4zx6Qxy4O6+u
8ABTCJ92mowqCKXJrRyjuowFdFCcFOhFAOjSgSOrLEGZXRSDeFx8txSfdeGI0u3v
dh//CVJ0hOHCtRxQfpyz1F1gccWPy2bUyhfXYHsQTPF79uM1X6TaSidlqzDNkAkj
cclrwLoOgEgRTzWgPJdOkoAJqbdIQuxDtJ7EhiS9blCKWalG3SfGJaIKEVnNU9DK
1rdW/eElb1vhZxkJKheJ5ri2debmGg1vVEZca9otCU8vCOw01QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKzQNXDe19c/8ZZxblL4UpAqmg23MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjNlNGM2ZTEtNTE3My0z
OTk4LWFjMDktNjkyMDJkNjJjMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAaptz3WTGTZliVs3Jcfc+TP36YNsUv/MZIlmXK+4och99yJzjtlQDm
mNvSBkVqRzKHDJY2gxo1ogQLLopXyGynnoV19zMg6HRKiJDTHs3EzhXUByCtSIz6
LBUy/D/4RtXRngGM95b2JRG37gBl4VHTVsHMFqBLAyX6KPfs8NKRKcLXuDdr5Nyr
lIiHSgeRhOQPWZVBwvYEqnK3cUhfpjTuWuQ0Rxqey/Rd62vv3Aic3S8RLEodoWl0
IFTnTRFi/nt1WmbwzKbnP2ngJR7bv+SeHCEFqOv5R1nJWuXugBB+lBXuXkCD5Cvn
FBnYahC44oszuhmWh/315ex0NrPalrrf
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:21 2025 by rpki-client