Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa
File:                     6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa (raw, json)
Hash identifier:          SIckl4TfjpLd/yYszC5FgrIbcxRA3wqLfrKHo4Y1iWY=
Subject key identifier:   EA:60:AD:82:68:CA:2A:9C:61:82:40:64:50:2C:B9:E2:D4:CC:B4:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DCC1E0F4733855D9FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396606
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:dc:c1:e0:f4:73:38:55:d9:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7c6ff9a4-9843-427c-8aa5-5aa3e4ab653f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:f2:c9:bd:52:64:60:fd:75:93:25:57:ea:
                    4a:f5:01:0c:2a:eb:13:0f:dd:cf:5f:1e:17:8f:db:
                    fc:7a:59:5e:28:7b:02:0e:0a:d1:6d:f0:43:18:a1:
                    c9:c7:7a:e2:25:d1:ef:90:10:88:6b:4d:75:29:33:
                    eb:69:1e:74:66:2c:55:0a:3b:b8:d3:f8:d5:34:86:
                    da:20:3d:7f:d0:3f:ff:dc:2a:33:ab:96:b9:ee:14:
                    8c:c2:1f:af:98:af:80:ad:ac:f6:45:76:05:17:e9:
                    fd:37:fc:aa:8b:80:73:c6:e1:71:90:55:f8:94:14:
                    cb:00:af:1e:72:17:b0:53:eb:72:22:0f:0c:bf:1e:
                    c9:67:56:8a:1c:16:7d:8f:af:e0:1e:0f:ad:4d:4f:
                    76:9d:51:c4:c0:53:a3:14:0f:b5:9a:7a:de:75:e3:
                    15:7d:15:af:57:a6:18:1f:48:f3:fc:94:ba:3c:1f:
                    83:f1:3e:dc:df:6e:52:99:da:69:df:b5:75:51:48:
                    a1:3f:7e:c5:c2:cb:79:a8:61:f0:f3:84:d4:da:54:
                    c3:3c:80:f0:5b:9e:fd:30:0e:71:dc:95:bc:34:ce:
                    5b:da:43:1c:eb:67:f4:90:83:48:8a:44:1d:67:c3:
                    4a:91:ed:30:92:f3:79:a8:e3:e1:5b:2b:0a:a9:f0:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:AD:82:68:CA:2A:9C:61:82:40:64:50:2C:B9:E2:D4:CC:B4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:83:1e:bf:4e:df:9a:ad:97:78:60:3e:64:f7:06:d9:3f:0a:
         7e:f0:1d:da:4d:ac:07:18:51:86:14:f6:7e:d1:2f:84:4c:45:
         60:ee:32:4d:79:5e:1c:5f:f0:bf:f6:6f:8e:76:f5:98:c2:58:
         84:fa:b3:a4:12:42:ff:d9:44:f8:c7:2d:a5:f1:91:29:56:85:
         c5:09:2b:9f:82:78:58:8e:6c:8d:8b:7d:fd:e2:55:11:a2:26:
         9e:6b:e7:d6:05:05:7d:34:82:e9:b6:08:82:6f:31:f5:02:dc:
         c4:53:06:f7:19:cb:cb:59:ef:1d:ca:61:0f:f8:16:e0:66:7d:
         6a:c2:c6:e5:03:29:c8:17:cb:29:de:fa:f3:b9:30:dd:16:ec:
         f2:0f:77:5e:1b:f3:2e:6e:a3:c9:fe:57:60:82:ef:ec:ab:ec:
         5a:f0:7c:ba:93:3f:f4:f6:1d:c6:3a:13:2e:c8:f8:2e:c4:9a:
         f0:37:75:77:9b:20:a8:4f:56:ae:bc:7e:32:b2:35:bc:c0:ab:
         75:0a:7c:c5:e6:fa:0c:da:4b:ea:9f:e8:a0:d3:6e:90:9a:9a:
         ca:06:f8:91:1c:0b:2a:0b:9d:49:00:40:1d:53:af:7c:65:78:
         e3:1e:87:8c:4d:5f:3e:75:52:e9:ba:0c:61:a3:8e:70:fb:56:
         2a:75:f7:ea
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhltzB4PRzOFXZ/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
N2M2ZmY5YTQtOTg0My00MjdjLThhYTUtNWFhM2U0YWI2NTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJryyb1SZGD9dZMlV+pK9QEMKusTD93PXx4X
j9v8elleKHsCDgrRbfBDGKHJx3riJdHvkBCIa011KTPraR50ZixVCju40/jVNIba
ID1/0D//3Cozq5a57hSMwh+vmK+Araz2RXYFF+n9N/yqi4BzxuFxkFX4lBTLAK8e
chewU+tyIg8Mvx7JZ1aKHBZ9j6/gHg+tTU92nVHEwFOjFA+1mnredeMVfRWvV6YY
H0jz/JS6PB+D8T7c325Smdpp37V1UUihP37Fwst5qGHw84TU2lTDPIDwW579MA5x
3JW8NM5b2kMc62f0kINIikQdZ8NKke0wkvN5qOPhWysKqfAvgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOpgrYJoyiqcYYJAZFAsueLUzLQQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjk1NWQ5YjUtOTgxMC0z
ZjZlLWE1Y2MtNGNmZjVhMGEzZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCngx6/Tt+arZd4YD5k9wbZPwp+8B3aTawHGFGGFPZ+0S+ETEVg7jJN
eV4cX/C/9m+OdvWYwliE+rOkEkL/2UT4xy2l8ZEpVoXFCSufgnhYjmyNi3394lUR
oiaea+fWBQV9NILptgiCbzH1AtzEUwb3GcvLWe8dymEP+BbgZn1qwsblAynIF8sp
3vrzuTDdFuzyD3deG/MubqPJ/ldggu/sq+xa8Hy6kz/09h3GOhMuyPguxJrwN3V3
myCoT1auvH4ysjW8wKt1CnzF5voM2kvqn+ig026QmprKBviRHAsqC51JAEAdU698
ZXjjHoeMTV8+dVLpugxho45w+1Yqdffq
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:13 2025 by rpki-client