Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/997d61e3-5e5a-3360-a70f-93a932b27b9b.roa
File:                     997d61e3-5e5a-3360-a70f-93a932b27b9b.roa (raw, json)
Hash identifier:          ZJ/aUdolusxHfCMCRlVDdC42FDilbmGzGEd4rKsa1ws=
Subject key identifier:   12:6A:EB:D2:73:60:CF:16:4D:2D:B3:DF:4C:A3:3C:97:94:0F:91:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E773389FF56168622B654C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/997d61e3-5e5a-3360-a70f-93a932b27b9b.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396540
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:33:89:ff:56:16:86:22:b6:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=859ed1d7-6d73-4827-a626-2aa9654a38e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:cf:7d:2d:c8:94:ad:0c:42:1c:59:d3:f5:
                    3f:00:dd:d1:08:a9:b7:f5:ea:09:22:42:e2:a6:ec:
                    c3:9e:c4:c6:43:ed:5e:04:aa:1e:d5:19:81:a9:06:
                    d4:55:8c:83:b6:97:9c:fb:80:c9:a3:7f:51:f3:a2:
                    42:ed:65:7a:a8:08:5b:7b:d8:7c:e6:ce:30:8d:3f:
                    86:68:76:de:48:ed:50:6b:e4:9b:92:49:ba:29:be:
                    6e:ba:43:d6:c1:df:71:0a:d7:b5:ea:fd:18:d6:ea:
                    df:39:6b:22:85:25:e1:f7:7e:9e:35:e3:50:7e:17:
                    d8:51:b4:3d:7a:81:b7:6d:2c:99:cd:ed:b0:68:48:
                    f2:ab:3d:08:1b:64:48:c8:32:89:b0:11:80:68:6c:
                    c0:5f:7d:65:7d:4a:d8:92:d3:6e:ee:e6:55:70:d6:
                    74:3c:06:df:d6:7a:94:27:6f:50:2b:0a:19:75:6d:
                    27:e3:7e:fc:87:66:f9:16:b0:bd:75:14:d0:e9:73:
                    20:d1:f9:76:9d:39:75:f3:26:ab:f4:ee:ce:c7:8a:
                    34:8a:d9:b9:9a:f8:4a:78:d9:27:18:c3:9b:a2:93:
                    cf:f9:67:9b:6d:0f:b3:74:94:e7:9d:fb:63:1a:af:
                    fc:8f:7c:6a:47:b4:3c:0b:c5:1b:d4:39:b0:60:37:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6A:EB:D2:73:60:CF:16:4D:2D:B3:DF:4C:A3:3C:97:94:0F:91:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/997d61e3-5e5a-3360-a70f-93a932b27b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:8f:80:4f:69:bb:d1:c7:f0:5d:cf:a7:81:ff:49:7d:24:
         0c:90:c8:d7:6f:4e:f5:97:bd:76:93:9f:82:44:e8:9f:f7:32:
         80:b5:23:6c:25:a9:25:44:76:3a:24:fd:8a:9f:57:15:ed:40:
         48:e2:1f:87:04:5e:03:f2:1c:70:20:f8:38:72:7d:f1:56:e4:
         69:ff:07:ac:20:68:f5:82:29:43:1c:1a:b5:a9:12:9f:68:b0:
         42:37:86:9d:8e:e8:da:4a:3c:95:bd:70:53:c6:19:76:0c:14:
         72:0b:63:7a:d4:9c:09:44:81:3a:39:9f:46:4a:9f:a9:1d:c8:
         1d:e6:b8:9d:9d:e1:31:8a:3b:99:31:ff:bf:b2:c6:05:12:34:
         1d:6c:15:f9:02:d8:5c:f5:67:14:cb:bf:b7:2b:d9:74:c2:37:
         ff:80:b9:80:1c:fb:79:5d:15:c9:81:08:9a:cd:a7:cd:b0:b5:
         7f:e0:a1:6b:b9:c2:b0:ab:46:96:e6:a8:70:5c:c5:1b:a1:80:
         3d:85:8b:2e:e2:82:d3:b5:38:88:b8:b7:32:77:be:92:82:51:
         c8:35:0f:a1:5d:95:9e:b7:8c:6c:dc:56:ed:89:36:f5:85:23:
         4c:1d:64:87:08:03:a8:94:f9:c4:25:49:49:42:07:82:6f:07:
         c5:ed:f9:12
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtOdzOJ/1YWhiK2VMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
ODU5ZWQxZDctNmQ3My00ODI3LWE2MjYtMmFhOTY1NGEzOGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGXPfS3IlK0MQhxZ0/U/AN3RCKm39eoJIkLi
puzDnsTGQ+1eBKoe1RmBqQbUVYyDtpec+4DJo39R86JC7WV6qAhbe9h85s4wjT+G
aHbeSO1Qa+Sbkkm6Kb5uukPWwd9xCte16v0Y1urfOWsihSXh936eNeNQfhfYUbQ9
eoG3bSyZze2waEjyqz0IG2RIyDKJsBGAaGzAX31lfUrYktNu7uZVcNZ0PAbf1nqU
J29QKwoZdW0n4378h2b5FrC9dRTQ6XMg0fl2nTl18yar9O7Ox4o0itm5mvhKeNkn
GMObopPP+WebbQ+zdJTnnftjGq/8j3xqR7Q8C8Ub1DmwYDf5RwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBJq69JzYM8WTS2z30yjPJeUD5HBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk3ZDYxZTMtNWU1YS0z
MzYwLWE3MGYtOTNhOTMyYjI3YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFG5HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCI1o+AT2m70cfwXc+ngf9JfSQMkMjXb071l712k5+CROif9zKAtSNs
JaklRHY6JP2Kn1cV7UBI4h+HBF4D8hxwIPg4cn3xVuRp/wesIGj1gilDHBq1qRKf
aLBCN4adjujaSjyVvXBTxhl2DBRyC2N61JwJRIE6OZ9GSp+pHcgd5ridneExijuZ
Mf+/ssYFEjQdbBX5Athc9WcUy7+3K9l0wjf/gLmAHPt5XRXJgQiazafNsLV/4KFr
ucKwq0aW5qhwXMUboYA9hYsu4oLTtTiIuLcyd76SglHINQ+hXZWet4xs3FbtiTb1
hSNMHWSHCAOolPnEJUlJQgeCbwfF7fkS
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:49 2025 by rpki-client