Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ee30ca4-93ff-3d73-9882-9eab7f94fbcb.roa
File:                     9ee30ca4-93ff-3d73-9882-9eab7f94fbcb.roa (raw, json)
Hash identifier:          1M0TpRapPgpZG9y+MnazOBI3v9yKvtYneWUXo96Ztxo=
Subject key identifier:   B3:EC:A2:A5:3B:DA:28:D1:F2:06:74:35:88:69:DE:CA:B8:1D:B5:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B8777FED9571F948BD600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ee30ca4-93ff-3d73-9882-9eab7f94fbcb.roa
Signing time:             Wed 20 Aug 2025 14:36:52 +0000
ROA not before:           Wed 20 Aug 2025 14:36:52 +0000
ROA not after:            Tue 18 Nov 2025 15:36:52 +0000
asID:                     396560
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:87:77:fe:d9:57:1f:94:8b:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:52 2025 GMT
            Not After : Nov 18 15:36:52 2025 GMT
        Subject: CN=9ca0eef5-4f3e-48b3-b376-f15e057e38bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:0e:37:da:5f:55:58:2e:d9:95:8f:81:86:
                    80:6b:d2:ce:e4:15:21:3f:d1:cb:42:d5:d4:aa:2f:
                    25:e5:6b:54:78:77:8b:ce:b3:a0:1b:af:47:e4:0d:
                    38:9d:f1:17:2c:b8:89:a9:f1:9b:9a:ad:2c:34:a0:
                    0a:69:71:34:37:fe:d8:6e:4d:81:e9:d9:05:57:04:
                    22:10:76:18:22:e4:b6:8c:5a:d1:89:1e:6e:50:5a:
                    db:63:8f:3a:56:a9:e4:45:9e:02:c3:d2:a7:47:f8:
                    6e:3f:37:b7:37:53:ce:66:70:4f:8d:18:87:73:cd:
                    c0:b0:0b:7b:f3:50:02:c9:f8:56:24:9c:86:d6:cf:
                    ae:70:c9:36:3d:3c:45:3d:41:4a:dd:1d:72:b2:0f:
                    92:4e:61:59:02:28:6e:2c:3d:2c:3b:b3:6f:5c:10:
                    ea:79:fe:c5:c9:76:21:6f:75:e1:11:53:a4:a4:4b:
                    7e:8a:ef:19:e4:90:43:bd:35:24:94:2e:c8:c8:8d:
                    71:9a:e8:b0:e5:56:72:87:5a:84:48:fa:20:3d:e1:
                    c9:60:6e:52:10:e5:30:85:d0:3c:98:5a:aa:14:9f:
                    6d:12:e8:f5:35:5c:0d:4a:bf:a7:e8:16:23:57:8f:
                    78:82:3f:00:e1:72:fd:19:8b:c2:36:f3:1d:94:d4:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:A2:A5:3B:DA:28:D1:F2:06:74:35:88:69:DE:CA:B8:1D:B5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ee30ca4-93ff-3d73-9882-9eab7f94fbcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:28:16:d2:e6:d4:10:ca:8a:90:80:b1:a0:1d:24:ad:2e:
         1d:7f:9e:99:70:02:43:77:fd:1f:d7:ca:c7:da:a5:c1:85:28:
         d4:ea:b5:fd:7b:d5:ac:db:cc:5b:58:84:77:41:b5:1d:97:ca:
         dc:1e:19:4d:ae:ae:88:ea:ea:62:28:f1:6d:79:6c:f5:a7:00:
         aa:1a:f8:d4:ce:4d:8d:88:01:25:c4:58:0d:eb:3a:6c:ff:a8:
         d9:d3:94:a6:46:fa:5e:e5:35:8b:13:b9:fd:52:23:6b:b6:4a:
         92:1f:e7:e9:3e:e1:13:66:82:46:56:8a:10:f6:2d:be:94:c6:
         93:ee:ad:5b:7c:87:4c:40:30:57:eb:a4:f8:d0:2a:5f:a2:fd:
         c4:7d:a1:0a:4e:25:71:90:e6:5f:bb:aa:2c:24:d4:8f:0c:f8:
         59:c3:02:97:5f:c1:0f:01:77:dc:03:34:99:01:70:91:55:d1:
         34:b7:b3:79:ba:1b:f5:0f:d3:c0:b7:fd:33:b2:60:25:f1:39:
         93:16:b9:8e:2d:b6:49:a7:f9:9f:82:81:32:42:73:f1:b3:a3:
         e5:8d:db:8d:2a:b4:6c:94:37:00:16:10:c4:65:73:92:87:f6:
         fd:be:c9:11:2f:1f:8e:cf:27:8c:ab:7f:9f:5e:a3:64:7f:31:
         3f:aa:a2:82
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri4d3/tlXH5SL1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzY1MloXDTI1MTExODE1MzY1MlowLzEtMCsGA1UEAxMk
OWNhMGVlZjUtNGYzZS00OGIzLWIzNzYtZjE1ZTA1N2UzOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8sON9pfVVgu2ZWPgYaAa9LO5BUhP9HLQtXU
qi8l5WtUeHeLzrOgG69H5A04nfEXLLiJqfGbmq0sNKAKaXE0N/7Ybk2B6dkFVwQi
EHYYIuS2jFrRiR5uUFrbY486VqnkRZ4Cw9KnR/huPze3N1POZnBPjRiHc83AsAt7
81ACyfhWJJyG1s+ucMk2PTxFPUFK3R1ysg+STmFZAihuLD0sO7NvXBDqef7FyXYh
b3XhEVOkpEt+iu8Z5JBDvTUklC7IyI1xmuiw5VZyh1qESPogPeHJYG5SEOUwhdA8
mFqqFJ9tEuj1NVwNSr+n6BYjV494gj8A4XL9GYvCNvMdlNTcwwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLPsoqU72ijR8gZ0NYhp3sq4HbX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWVlMzBjYTQtOTNmZi0z
ZDczLTk4ODItOWVhYjdmOTRmYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDZwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBA7CgW0ubUEMqKkICxoB0krS4df56ZcAJDd/0f18rH2qXBhSjU6rX9
e9Ws28xbWIR3QbUdl8rcHhlNrq6I6upiKPFteWz1pwCqGvjUzk2NiAElxFgN6zps
/6jZ05SmRvpe5TWLE7n9UiNrtkqSH+fpPuETZoJGVooQ9i2+lMaT7q1bfIdMQDBX
66T40Cpfov3EfaEKTiVxkOZfu6osJNSPDPhZwwKXX8EPAXfcAzSZAXCRVdE0t7N5
uhv1D9PAt/0zsmAl8TmTFrmOLbZJp/mfgoEyQnPxs6PljduNKrRslDcAFhDEZXOS
h/b9vskRLx+OzyeMq3+fXqNkfzE/qqKC
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:42 2025 by rpki-client