Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d115860-06d4-3099-8c7a-3f7d8608cce9.roa
File:                     7d115860-06d4-3099-8c7a-3f7d8608cce9.roa (raw, json)
Hash identifier:          DR6RZndhts/2ZqBU7hgMKTQy2Wfry+dBu0brbZNavLQ=
Subject key identifier:   B5:09:EB:85:E6:DC:AF:9B:75:4F:50:FB:9E:CA:C9:4C:94:B7:01:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B098D146A72DEA270EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d115860-06d4-3099-8c7a-3f7d8608cce9.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     396540
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b0:98:d1:46:a7:2d:ea:27:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=112324d4-244f-4118-a411-5af96ea18e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:56:3e:cd:4a:02:3b:d2:5a:7c:91:04:36:
                    97:59:6a:fa:b4:11:4f:30:08:1c:dc:31:fa:59:5b:
                    fb:79:43:ca:ae:77:0c:dd:69:27:62:4d:01:50:cb:
                    83:29:d4:d5:30:49:3c:74:69:15:41:ef:f0:1b:b2:
                    0e:d1:7e:de:1e:d1:29:27:53:69:d5:3d:2f:73:fb:
                    c9:3c:d8:c1:f6:d5:70:85:0b:f1:e0:20:40:4e:d8:
                    4a:d6:3b:37:bc:d5:b9:6e:d2:1d:c1:bd:46:d9:00:
                    d4:bf:f9:7d:05:10:9c:a5:a7:80:dd:cd:bc:90:df:
                    db:c1:a9:84:db:ea:4e:1e:ce:fa:ec:26:cd:2a:c3:
                    3e:4a:fc:7a:c3:39:57:c7:14:35:fa:10:34:56:a0:
                    69:3f:94:a2:11:5e:9f:af:75:71:05:cb:c0:35:a1:
                    bd:38:ac:cc:da:3f:b8:77:08:27:5e:36:05:83:78:
                    8f:be:b0:91:ad:7e:10:af:47:bd:ac:dd:cd:d3:49:
                    14:cb:2f:29:51:b0:ca:4d:a0:ef:b1:dc:72:d0:e8:
                    5f:02:d1:de:75:c8:38:d2:48:86:30:87:03:22:fe:
                    0e:3d:61:7d:68:9f:e8:15:d2:d6:ef:f2:84:f0:3b:
                    7d:28:14:b8:06:77:6d:96:a5:c7:27:e2:c3:0a:4e:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:09:EB:85:E6:DC:AF:9B:75:4F:50:FB:9E:CA:C9:4C:94:B7:01:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d115860-06d4-3099-8c7a-3f7d8608cce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:3b:13:30:a0:af:10:4c:66:d6:26:e3:1d:d2:63:1a:c4:
         12:b6:c5:8b:df:27:84:cb:07:3c:20:75:af:bf:24:65:ef:40:
         71:1e:bb:9e:b6:8c:1a:7f:31:c7:30:62:6e:c1:74:b2:6e:bb:
         c3:1d:f5:f5:4a:d8:25:69:73:73:ac:87:0f:f5:57:36:9f:8d:
         f8:c5:9e:f3:cf:fe:2e:2c:34:90:87:19:9a:0c:1b:ca:e5:cf:
         4f:2f:50:93:52:27:e1:a3:ae:29:36:5b:60:f4:20:5e:c4:90:
         31:d9:a7:70:ac:f7:71:63:b4:54:cc:ae:36:d8:63:09:93:85:
         3f:ac:80:d6:a0:29:24:00:af:fe:e0:f3:20:8b:b8:80:97:1a:
         89:ac:45:df:73:a8:66:ea:1c:47:db:6a:ed:ed:c8:9c:ff:33:
         2e:60:77:01:aa:61:8d:b5:f6:8d:d9:6e:9a:67:e5:58:76:93:
         a9:15:16:47:d9:14:73:5e:3e:17:ac:14:53:1d:3f:d0:d2:be:
         dc:82:b6:4e:ae:55:26:aa:bd:23:a2:46:cc:d5:5b:af:40:ff:
         3e:8c:ca:9b:f8:1a:2f:18:4f:e0:47:f0:47:64:02:93:6d:74:
         85:ca:f9:37:e7:b4:07:a2:23:80:6f:20:3e:cf:d6:15:0c:dd:
         70:1e:d5:c5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpTNbCY0UanLeonDqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
MTEyMzI0ZDQtMjQ0Zi00MTE4LWE0MTEtNWFmOTZlYTE4ZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqshWPs1KAjvSWnyRBDaXWWr6tBFPMAgc3DH6
WVv7eUPKrncM3WknYk0BUMuDKdTVMEk8dGkVQe/wG7IO0X7eHtEpJ1Np1T0vc/vJ
PNjB9tVwhQvx4CBATthK1js3vNW5btIdwb1G2QDUv/l9BRCcpaeA3c28kN/bwamE
2+pOHs767CbNKsM+Svx6wzlXxxQ1+hA0VqBpP5SiEV6fr3VxBcvANaG9OKzM2j+4
dwgnXjYFg3iPvrCRrX4Qr0e9rN3N00kUyy8pUbDKTaDvsdxy0OhfAtHedcg40kiG
MIcDIv4OPWF9aJ/oFdLW7/KE8Dt9KBS4BndtlqXHJ+LDCk5knwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLUJ64Xm3K+bdU9Q+57KyUyUtwGAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2QxMTU4NjAtMDZkNC0z
MDk5LThjN2EtM2Y3ZDg2MDhjY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAIOjsTMKCvEExm1ibjHdJjGsQStsWL3yeEywc8IHWvvyRl70BxHrue
towafzHHMGJuwXSybrvDHfX1StglaXNzrIcP9Vc2n434xZ7zz/4uLDSQhxmaDBvK
5c9PL1CTUifho64pNltg9CBexJAx2adwrPdxY7RUzK422GMJk4U/rIDWoCkkAK/+
4PMgi7iAlxqJrEXfc6hm6hxH22rt7cic/zMuYHcBqmGNtfaN2W6aZ+VYdpOpFRZH
2RRzXj4XrBRTHT/Q0r7cgrZOrlUmqr0jokbM1VuvQP8+jMqb+BovGE/gR/BHZAKT
bXSFyvk357QHoiOAbyA+z9YVDN1wHtXF
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:51:04 2025 by rpki-client