Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68815dd3-a97e-3d7b-a1a9-6770da53696a.roa
File:                     68815dd3-a97e-3d7b-a1a9-6770da53696a.roa (raw, json)
Hash identifier:          Tlg3A5WtXaTb8A4VqQNv9Am4upbjdz+4CPbiRJYoZ1g=
Subject key identifier:   66:77:E8:A0:96:BC:7A:69:55:64:0C:67:04:2E:02:4C:46:8D:26:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4AC75C9C230CF12E8B700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68815dd3-a97e-3d7b-a1a9-6770da53696a.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396612
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:ac:75:c9:c2:30:cf:12:e8:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=f62cb1ce-a3a1-4370-92be-2d7ad76d7f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:c4:f0:43:28:05:7c:2a:ab:3d:15:27:97:
                    d9:d2:a8:b0:18:10:62:0e:40:87:e3:87:55:04:9b:
                    0b:34:39:e6:51:35:71:1c:e4:8c:22:ec:b0:ce:ba:
                    f1:eb:aa:d0:d6:82:30:0d:92:c6:1a:bd:30:58:f5:
                    4c:a9:55:ac:c9:27:99:bf:86:f3:8d:6b:92:f5:a1:
                    20:4c:da:1f:ee:fa:78:e6:d8:a6:57:e5:4b:4e:6a:
                    95:13:25:bb:67:91:30:51:22:08:b4:2d:8d:32:ac:
                    be:88:d4:9d:23:7f:3d:18:bb:f7:42:0f:35:2a:af:
                    88:03:85:c2:40:76:14:83:12:8d:d3:3d:40:0c:fb:
                    c2:76:e6:9b:b8:8f:02:f5:a4:d1:06:9d:96:d5:ad:
                    e3:fd:64:08:f0:98:02:39:3c:7a:33:6a:94:89:59:
                    df:3a:ab:66:d8:23:2e:4c:dd:3b:c3:67:7f:df:ad:
                    6c:8a:49:02:49:da:d3:e8:2a:81:5b:0c:9f:9c:a2:
                    7a:c1:e9:6a:83:77:22:83:4a:00:da:41:dd:04:0a:
                    05:7a:8e:05:ea:9a:95:f6:65:e4:a1:31:02:05:a2:
                    23:c8:08:c1:24:6c:23:81:90:a5:5b:e3:fd:4b:5e:
                    44:82:c8:d9:b8:af:7d:cb:9e:6f:96:cf:39:db:5c:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:E8:A0:96:BC:7A:69:55:64:0C:67:04:2E:02:4C:46:8D:26:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68815dd3-a97e-3d7b-a1a9-6770da53696a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:e7:9c:64:44:82:c5:c0:5d:4e:c1:de:ab:d4:c3:a2:26:
         01:aa:60:21:63:9e:d6:0a:0d:42:44:26:70:6c:f8:8d:bc:c3:
         a7:8e:ef:04:5d:6a:55:7d:f4:2f:e4:db:08:2f:ad:b4:53:f4:
         4d:77:91:e6:1c:94:e6:b3:66:7e:5d:b2:1e:01:85:27:1f:51:
         d3:06:79:ca:c5:79:3b:96:ad:bc:04:19:6c:1d:41:d8:28:86:
         74:47:d3:05:a7:3a:e0:a5:39:13:6e:8e:fe:91:83:4a:e4:2d:
         88:ef:5a:7e:89:70:56:b2:f6:05:30:f2:3b:95:0a:89:3d:d3:
         07:17:25:20:f9:9e:27:37:26:aa:cf:05:94:db:18:9e:91:d5:
         0b:4a:e4:b5:4f:ee:7a:fc:a8:87:68:18:b6:68:8e:7c:8c:dd:
         da:9d:cf:9d:93:80:44:5d:63:4d:14:f5:33:9b:38:41:53:e1:
         be:f6:7d:07:69:19:1d:53:c7:75:9a:2b:03:4b:a9:40:d7:01:
         27:10:52:52:8d:fc:6c:c9:22:d9:32:ed:bd:2c:22:0b:b8:75:
         e4:11:99:cc:b4:f8:d8:28:93:dc:d4:57:7e:2b:21:aa:47:9f:
         54:5d:54:fb:1d:fd:52:3f:2b:19:10:78:de:78:84:f9:8f:ba:
         da:72:c2:f8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKx1ycIwzxLotwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZjYyY2IxY2UtYTNhMS00MzcwLTkyYmUtMmQ3YWQ3NmQ3ZjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkHE8EMoBXwqqz0VJ5fZ0qiwGBBiDkCH44dV
BJsLNDnmUTVxHOSMIuywzrrx66rQ1oIwDZLGGr0wWPVMqVWsySeZv4bzjWuS9aEg
TNof7vp45timV+VLTmqVEyW7Z5EwUSIItC2NMqy+iNSdI389GLv3Qg81Kq+IA4XC
QHYUgxKN0z1ADPvCduabuI8C9aTRBp2W1a3j/WQI8JgCOTx6M2qUiVnfOqtm2CMu
TN07w2d/361sikkCSdrT6CqBWwyfnKJ6welqg3cig0oA2kHdBAoFeo4F6pqV9mXk
oTECBaIjyAjBJGwjgZClW+P9S15EgsjZuK99y55vls8521ynNwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGZ36KCWvHppVWQMZwQuAkxGjSZ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg4MTVkZDMtYTk3ZS0z
ZDdiLWExYTktNjc3MGRhNTM2OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAmXOecZESCxcBdTsHeq9TDoiYBqmAhY57WCg1CRCZwbPiNvMOnju8E
XWpVffQv5NsIL620U/RNd5HmHJTms2Z+XbIeAYUnH1HTBnnKxXk7lq28BBlsHUHY
KIZ0R9MFpzrgpTkTbo7+kYNK5C2I71p+iXBWsvYFMPI7lQqJPdMHFyUg+Z4nNyaq
zwWU2xiekdULSuS1T+56/KiHaBi2aI58jN3anc+dk4BEXWNNFPUzmzhBU+G+9n0H
aRkdU8d1misDS6lA1wEnEFJSjfxsySLZMu29LCILuHXkEZnMtPjYKJPc1Fd+KyGq
R59UXVT7Hf1SPysZEHjeeIT5j7racsL4
-----END CERTIFICATE-----
Generated at Sun May 11 00:33:01 2025 by rpki-client