Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa
File:                     978b852e-6909-336a-9078-8b28915c3136.roa (raw, json)
Hash identifier:          QVGJUkHVEjFPo4oziJ+35HdaizZ6NUIbropWSlYEndA=
Subject key identifier:   63:B4:D2:CD:84:08:3F:C8:C8:C5:40:17:EB:04:51:41:78:E9:26:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61E4481A9B43852EEA4340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396597
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e4:48:1a:9b:43:85:2e:ea:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=6b436c6f-340f-4736-919b-af30cfb4ca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:cc:1c:10:de:5a:32:6e:3d:61:d4:eb:e8:
                    ac:b7:2c:7a:2a:d2:4f:ff:aa:a9:0f:34:0d:27:71:
                    26:ed:d6:a6:2e:10:ab:4e:e0:d5:0f:41:c3:e5:fc:
                    07:10:16:f5:20:f4:6b:df:03:b3:17:f8:d4:d9:c5:
                    24:9f:09:30:8d:aa:89:a0:75:b7:f1:f0:62:dc:8e:
                    85:db:49:84:e1:5b:f6:c3:41:37:90:4f:c1:89:91:
                    09:f3:bf:2e:95:a0:3c:13:3e:e7:13:36:43:b6:c0:
                    ae:bc:fd:c1:2f:49:87:c1:47:85:d4:f0:ae:e3:d4:
                    07:b5:2b:33:4f:12:e8:e6:45:0f:38:9f:0b:dc:23:
                    2a:1c:4c:d5:2f:3e:d3:37:02:6d:12:c8:f8:6e:ec:
                    00:3d:71:ce:93:d4:24:12:95:2a:fc:50:2f:2b:e4:
                    73:ad:a7:d2:c8:89:01:fb:59:ec:dc:a7:42:09:39:
                    9e:b3:c1:3d:fb:8d:b2:b3:a1:d5:ca:54:fa:a3:f2:
                    74:f2:ad:c9:42:ed:d1:84:d1:d5:de:1d:af:5b:3e:
                    e1:c2:89:57:00:19:73:b5:a1:bc:8d:ea:e6:ed:d5:
                    bf:f2:e1:46:79:00:0e:3a:ff:a9:2a:ce:99:65:db:
                    74:ab:e3:bc:63:7d:6e:50:6a:67:a7:0b:fe:67:09:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B4:D2:CD:84:08:3F:C8:C8:C5:40:17:EB:04:51:41:78:E9:26:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:15:93:16:ae:f6:3e:46:d8:57:b4:83:79:42:b8:12:35:
         2d:d0:92:bf:f6:ee:8b:3b:26:f3:7f:ec:f8:ec:d5:c9:f5:e9:
         b2:ef:de:18:0b:f2:e9:7e:30:ed:36:2a:8e:64:a7:c8:ca:1b:
         59:20:4d:e0:75:12:d2:42:4d:fa:9d:c2:66:9b:57:47:b3:82:
         22:5e:07:c6:d6:11:6b:1e:9a:47:b4:72:6f:84:21:e2:de:3a:
         71:cb:49:2f:24:38:08:e7:87:fe:df:f0:64:ff:95:31:8e:6c:
         e6:77:c0:3d:dd:73:b2:cd:bc:d4:5d:12:b1:79:0b:c3:d2:ad:
         a8:d8:fa:60:36:08:36:7a:71:33:f6:0a:09:7f:3f:2a:6f:bb:
         3f:1b:ae:04:bb:17:90:b9:bc:3d:2a:38:79:17:4d:77:85:be:
         5a:14:0d:5d:fd:63:5d:28:ef:1e:62:dd:d9:5e:42:1d:44:92:
         50:e8:ab:08:ce:b8:9a:87:3a:7f:2d:11:d4:7c:46:cd:65:c0:
         a9:ed:82:49:9b:e9:f6:9f:ca:60:6d:f3:0d:cc:2d:bf:ee:58:
         f7:c4:91:94:40:82:b8:10:45:56:d8:73:0d:4e:a4:7e:57:d9:
         68:ee:17:ec:51:da:89:2d:24:16:c9:27:c1:1d:3a:67:be:9e:
         91:7a:1e:3a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeRIGptDhS7qQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
NmI0MzZjNmYtMzQwZi00NzM2LTkxOWItYWYzMGNmYjRjYTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnnMHBDeWjJuPWHU6+istyx6KtJP/6qpDzQN
J3Em7damLhCrTuDVD0HD5fwHEBb1IPRr3wOzF/jU2cUknwkwjaqJoHW38fBi3I6F
20mE4Vv2w0E3kE/BiZEJ878ulaA8Ez7nEzZDtsCuvP3BL0mHwUeF1PCu49QHtSsz
TxLo5kUPOJ8L3CMqHEzVLz7TNwJtEsj4buwAPXHOk9QkEpUq/FAvK+RzrafSyIkB
+1ns3KdCCTmes8E9+42ys6HVylT6o/J08q3JQu3RhNHV3h2vWz7hwolXABlztaG8
jerm7dW/8uFGeQAOOv+pKs6ZZdt0q+O8Y31uUGpnpwv+ZwkP2QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGO00s2ECD/IyMVAF+sEUUF46Sa7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTc4Yjg1MmUtNjkwOS0z
MzZhLTkwNzgtOGIyODkxNWMzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBKhBWTFq72PkbYV7SDeUK4EjUt0JK/9u6LOybzf+z47NXJ9emy794Y
C/LpfjDtNiqOZKfIyhtZIE3gdRLSQk36ncJmm1dHs4IiXgfG1hFrHppHtHJvhCHi
3jpxy0kvJDgI54f+3/Bk/5Uxjmzmd8A93XOyzbzUXRKxeQvD0q2o2PpgNgg2enEz
9goJfz8qb7s/G64EuxeQubw9Kjh5F013hb5aFA1d/WNdKO8eYt3ZXkIdRJJQ6KsI
zriahzp/LRHUfEbNZcCp7YJJm+n2n8pgbfMNzC2/7lj3xJGUQIK4EEVW2HMNTqR+
V9lo7hfsUdqJLSQWySfBHTpnvp6Reh46
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:14 2025 by rpki-client