Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e73165b-add7-35a0-ae22-0577d44eca7d.roa
File:                     9e73165b-add7-35a0-ae22-0577d44eca7d.roa (raw, json)
Hash identifier:          X3dCJluS/e9hKR1uFJryTQomlmG2hLWestkaYxlKq8c=
Subject key identifier:   5E:3F:84:21:D6:B2:36:B7:3C:8C:BD:A5:49:C5:00:6C:52:E4:A0:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF6C5E24006E551008500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e73165b-add7-35a0-ae22-0577d44eca7d.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396567
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f6:c5:e2:40:06:e5:51:00:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=3e90df20-a2b7-4510-8774-cb0b6c0d5705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:64:8c:47:54:7f:f7:fa:b2:be:38:94:62:
                    6c:41:4d:4d:c2:71:04:b3:48:bf:da:a8:00:dd:49:
                    69:be:ca:c7:77:5d:5e:78:a1:fe:5c:2f:3b:bf:b3:
                    9b:10:57:08:97:27:32:f8:02:8b:7c:7f:a5:30:7a:
                    24:93:cf:72:b6:3c:7e:b3:b8:ae:74:2d:26:ec:4f:
                    39:6f:a5:cd:2a:ce:e5:1f:37:46:30:b6:8d:ba:89:
                    6d:5b:66:f4:0f:0b:da:88:1f:5f:40:30:b9:0d:11:
                    84:bf:b2:00:de:e4:77:9e:e9:45:76:55:46:f4:0c:
                    3d:72:15:2a:49:57:b1:84:a1:af:32:a3:17:43:c7:
                    0f:48:da:39:4c:6b:fc:42:f2:07:6a:52:aa:77:c8:
                    18:fe:84:2b:40:6c:65:e7:67:c0:de:3f:ed:b2:da:
                    6a:72:94:2f:b4:a5:c1:b5:80:ec:4f:37:f9:fe:37:
                    3a:3e:be:fa:a0:2c:b1:f8:5c:b7:87:f6:65:75:27:
                    ea:4a:dd:3d:4e:65:6f:33:ec:a4:78:a0:f5:c0:f2:
                    26:ba:b3:62:11:e2:f6:26:49:1c:da:de:95:43:60:
                    a0:7e:83:c9:ac:06:80:be:a6:0d:b4:53:d3:4c:87:
                    88:64:a0:5c:c0:89:cb:2f:14:79:98:77:61:06:dd:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3F:84:21:D6:B2:36:B7:3C:8C:BD:A5:49:C5:00:6C:52:E4:A0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e73165b-add7-35a0-ae22-0577d44eca7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:5e:fc:e9:63:e0:ef:e7:6e:1f:68:0a:26:a0:ab:35:97:
         15:84:79:3d:b6:20:2f:40:16:27:75:ba:67:66:ae:64:46:b5:
         57:47:d4:6c:91:2b:47:b0:bb:8c:6c:bc:00:a1:ba:67:f7:a1:
         ea:e9:76:f3:06:c6:8b:8c:d1:16:5c:52:ec:bb:31:81:81:45:
         f1:48:41:26:62:41:15:20:ed:a7:85:bc:d6:b8:28:07:59:c8:
         39:10:7a:cd:83:a3:8c:1a:d9:75:ca:fc:64:64:0c:8e:31:ea:
         cc:8c:80:6e:03:74:42:f9:48:02:fb:71:4c:c8:dd:1d:25:23:
         4d:e3:67:14:03:94:14:20:71:8c:4a:f8:53:43:32:e3:6f:ed:
         be:bc:d6:2b:35:a8:28:da:f3:75:fb:5c:e8:73:45:e6:3c:2f:
         20:47:08:45:c6:4a:7d:46:8c:89:22:0a:68:cd:25:2c:6a:c8:
         ff:86:aa:3b:17:5e:5c:d8:e4:35:fe:10:7a:7b:38:d6:6d:6d:
         d8:8e:97:60:f6:83:67:6a:df:25:5b:3e:2d:be:9b:8e:6a:b0:
         85:79:c8:12:8f:a5:79:8a:3f:9f:0e:68:85:a4:1f:6d:fc:17:
         fd:21:27:6a:b6:6a:52:60:5c:f2:f8:5e:4d:1e:1c:77:f9:da:
         71:91:48:8e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElz3vbF4kAG5VEAhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
M2U5MGRmMjAtYTJiNy00NTEwLTg3NzQtY2IwYjZjMGQ1NzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCRkjEdUf/f6sr44lGJsQU1NwnEEs0i/2qgA
3UlpvsrHd11eeKH+XC87v7ObEFcIlycy+AKLfH+lMHokk89ytjx+s7iudC0m7E85
b6XNKs7lHzdGMLaNuoltW2b0DwvaiB9fQDC5DRGEv7IA3uR3nulFdlVG9Aw9chUq
SVexhKGvMqMXQ8cPSNo5TGv8QvIHalKqd8gY/oQrQGxl52fA3j/tstpqcpQvtKXB
tYDsTzf5/jc6Pr76oCyx+Fy3h/ZldSfqSt09TmVvM+ykeKD1wPImurNiEeL2Jkkc
2t6VQ2CgfoPJrAaAvqYNtFPTTIeIZKBcwInLLxR5mHdhBt1ZbwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF4/hCHWsja3PIy9pUnFAGxS5KB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWU3MzE2NWItYWRkNy0z
NWEwLWFlMjItMDU3N2Q0NGVjYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6E1786WPg7+duH2gKJqCrNZcVhHk9tiAvQBYndbpnZq5kRrVXR9Rs
kStHsLuMbLwAobpn96Hq6XbzBsaLjNEWXFLsuzGBgUXxSEEmYkEVIO2nhbzWuCgH
Wcg5EHrNg6OMGtl1yvxkZAyOMerMjIBuA3RC+UgC+3FMyN0dJSNN42cUA5QUIHGM
SvhTQzLjb+2+vNYrNago2vN1+1zoc0XmPC8gRwhFxkp9RoyJIgpozSUsasj/hqo7
F15c2OQ1/hB6ezjWbW3Yjpdg9oNnat8lWz4tvpuOarCFecgSj6V5ij+fDmiFpB9t
/Bf9ISdqtmpSYFzy+F5NHhx3+dpxkUiO
-----END CERTIFICATE-----
Generated at Sun May 11 06:23:51 2025 by rpki-client