Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa
File:                     8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa (raw, json)
Hash identifier:          bsJUdKgL2zvVkWs53aM+f1DhjYYpXTOb8m1jVEPBN3g=
Subject key identifier:   C7:1E:27:F1:A7:21:FD:BE:F0:32:36:60:59:10:D6:DD:E0:D8:7E:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C8A4DBE3ADFD3CD9D9D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     397202
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8a:4d:be:3a:df:d3:cd:9d:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=d21de237-4f10-40ec-8d27-4ed5aaf01839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:71:5e:f3:c8:db:6e:2e:25:0c:16:b4:d7:
                    08:17:a4:bd:0b:66:0d:45:63:ed:0d:73:5b:ac:00:
                    06:16:50:bc:7c:70:01:06:3f:5e:ae:48:32:fe:47:
                    d9:37:7c:7a:b9:9d:fe:ed:88:59:a1:1f:d2:66:9c:
                    57:da:05:fe:a6:2a:16:dc:7c:0a:a0:f6:49:1b:89:
                    d0:43:47:fd:05:ef:b5:1f:dd:1d:74:e6:3c:42:cb:
                    14:3d:84:9d:37:ce:7c:3e:f7:3b:a9:c9:94:4b:c4:
                    f8:de:a3:b8:ab:3e:e7:e8:40:f6:83:c9:95:07:25:
                    1c:7e:a7:24:3c:28:00:f2:a6:8f:d6:8b:8b:76:0a:
                    51:a2:79:ff:11:a8:89:c7:9a:08:44:3e:69:99:2b:
                    28:9e:d1:7e:b6:10:c2:49:15:33:3c:7a:d1:3b:35:
                    c3:f5:89:70:75:50:e7:0d:af:2e:10:34:3c:ac:34:
                    2f:6a:31:10:ad:e5:54:71:c2:99:b6:50:12:8c:d2:
                    65:74:e7:6f:1b:f8:e8:7b:b8:fc:64:8e:7c:ec:4f:
                    d8:91:e1:66:1e:f6:d6:9e:23:4c:07:13:f7:14:b2:
                    41:78:39:74:d7:df:02:c1:b0:ac:cc:f4:17:62:f2:
                    f7:28:93:92:d2:06:8b:b8:4c:37:0e:48:36:ba:10:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1E:27:F1:A7:21:FD:BE:F0:32:36:60:59:10:D6:DD:E0:D8:7E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a3c8a29-91c6-3347-ad8c-d0ebefb80cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:3e:29:46:09:44:c7:0a:04:31:01:84:ac:fc:94:4e:fb:
         2f:3a:a6:99:91:52:b7:c1:0e:10:f7:7b:1c:9c:b6:32:02:7b:
         dd:37:9d:1a:58:c0:0e:bf:99:69:b8:04:a4:ae:b3:5c:6c:1a:
         d3:75:61:20:1f:2e:67:60:2d:10:95:ce:18:b9:ab:4d:29:04:
         99:83:25:8a:bd:a0:24:3e:4c:83:5d:dd:f9:0d:04:98:ea:ea:
         69:90:20:f3:e7:9c:d0:47:62:20:de:c3:25:37:94:75:9c:c4:
         68:f7:96:3d:a6:9f:68:e1:dc:55:26:dc:b1:9c:7f:6c:e6:4f:
         12:b6:bb:1c:39:f8:02:25:36:04:05:fa:fc:ac:32:a5:2b:11:
         ba:99:b1:83:ee:3a:0e:ba:75:26:8a:c7:51:82:08:b6:e8:80:
         04:22:6b:5f:92:47:b2:17:12:f7:51:bc:d3:c7:92:ed:87:5f:
         07:cf:a7:f4:f3:20:e6:9a:ed:38:1e:f0:8b:ee:eb:c6:b7:37:
         ba:61:ca:b9:b6:c8:00:2b:e7:8d:40:71:28:f9:68:f7:b4:2d:
         57:c2:a7:1b:7f:ae:33:ac:d1:a5:39:16:f9:01:bb:4b:e6:c6:
         ea:91:dd:da:54:aa:4d:01:1d:08:bd:4e:5d:95:b9:3f:bc:cc:
         01:92:e7:95
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIpNvjrf082dnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDIxZGUyMzctNGYxMC00MGVjLThkMjctNGVkNWFhZjAxODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD5xXvPI224uJQwWtNcIF6S9C2YNRWPtDXNb
rAAGFlC8fHABBj9erkgy/kfZN3x6uZ3+7YhZoR/SZpxX2gX+pioW3HwKoPZJG4nQ
Q0f9Be+1H90ddOY8QssUPYSdN858Pvc7qcmUS8T43qO4qz7n6ED2g8mVByUcfqck
PCgA8qaP1ouLdgpRonn/EaiJx5oIRD5pmSsontF+thDCSRUzPHrROzXD9YlwdVDn
Da8uEDQ8rDQvajEQreVUccKZtlASjNJldOdvG/joe7j8ZI587E/YkeFmHvbWniNM
BxP3FLJBeDl0198CwbCszPQXYvL3KJOS0gaLuEw3Dkg2uhC5QQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMceJ/GnIf2+8DI2YFkQ1t3g2H7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGEzYzhhMjktOTFjNi0z
MzQ3LWFkOGMtZDBlYmVmYjgwY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAx/D4pRglExwoEMQGErPyUTvsvOqaZkVK3wQ4Q93scnLYyAnvdN50a
WMAOv5lpuASkrrNcbBrTdWEgHy5nYC0Qlc4YuatNKQSZgyWKvaAkPkyDXd35DQSY
6uppkCDz55zQR2Ig3sMlN5R1nMRo95Y9pp9o4dxVJtyxnH9s5k8StrscOfgCJTYE
Bfr8rDKlKxG6mbGD7joOunUmisdRggi26IAEImtfkkeyFxL3UbzTx5Lth18Hz6f0
8yDmmu04HvCL7uvGtze6Ycq5tsgAK+eNQHEo+Wj3tC1Xwqcbf64zrNGlORb5AbtL
5sbqkd3aVKpNAR0IvU5dlbk/vMwBkueV
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:19 2025 by rpki-client