Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
File:                     a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa (raw, json)
Hash identifier:          r/NLaJVSHnETJsFJvpjJCyS5E6JAme02+NA2jTxfqrM=
Subject key identifier:   61:FD:88:C5:DC:03:0B:9B:84:17:40:DD:BD:CC:FB:75:5C:1D:55:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870DFC019602182A4DBBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396603
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0d:fc:01:96:02:18:2a:4d:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=8bbaa6c8-36b3-49f7-9a4a-458a60b0bf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:84:9d:d3:87:f2:f9:21:aa:92:37:be:a9:
                    f5:8d:c0:6d:fc:d0:a4:a0:11:54:a2:ab:27:d6:7c:
                    e9:f4:67:fe:47:62:2a:9b:ca:d0:55:42:fb:e0:aa:
                    05:16:3a:ea:72:96:1a:ba:37:06:f8:33:63:b3:a1:
                    49:c1:a7:9a:a3:64:fa:33:19:d5:07:2a:ab:93:53:
                    4f:bf:eb:1e:b2:2b:e7:64:83:c9:11:1c:59:37:96:
                    f8:0c:0f:d7:9c:fa:1e:60:75:53:53:18:65:2c:1a:
                    14:cf:c0:55:f3:bc:db:9a:09:90:c5:fd:35:a8:87:
                    d9:e9:a3:72:7f:61:87:aa:a4:83:8a:51:24:52:19:
                    36:1b:31:62:a4:ff:a3:c1:4e:a8:4f:e1:a9:61:e6:
                    26:4c:11:3f:2c:3d:5b:02:4b:62:18:c4:35:3f:87:
                    23:ea:7f:06:61:6d:43:83:c9:83:2a:05:5a:cd:f3:
                    29:40:8f:e3:25:2f:f5:11:71:89:2e:66:68:15:50:
                    bf:ce:b7:ed:89:43:b3:fc:6b:f7:66:50:2e:af:bb:
                    4a:0e:9e:33:68:d0:6e:42:b0:85:ea:c7:fc:64:68:
                    6d:20:8f:01:09:39:b6:c2:58:3e:3a:03:a8:a4:34:
                    2e:c2:b2:22:bc:59:b9:13:fc:45:53:bf:7b:e4:88:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FD:88:C5:DC:03:0B:9B:84:17:40:DD:BD:CC:FB:75:5C:1D:55:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:ca:50:98:f5:74:a3:8d:ac:07:4b:9c:4f:72:95:95:c5:
         8b:f2:67:95:64:66:4d:34:7e:f1:83:4f:4f:1e:20:dc:a8:21:
         7f:ed:40:ed:99:67:f1:5b:c2:dd:b4:46:ba:91:b8:f5:b1:6d:
         e9:ab:09:c5:94:e4:8f:e7:bc:a4:26:10:db:25:62:28:ab:87:
         a4:72:e8:1c:90:bc:7d:63:90:df:53:4b:95:3e:5b:80:d7:da:
         12:35:9e:67:be:45:f4:89:27:14:d5:e4:04:23:ec:f3:3f:75:
         6b:27:7d:dc:d1:a2:b4:5e:e4:31:84:e2:5c:96:0a:7a:3e:19:
         63:28:f1:ba:a2:e5:f9:fe:8f:61:0c:30:b9:cc:da:a2:55:16:
         7b:44:4f:ce:51:a6:2e:f1:7c:6d:df:fc:26:9e:19:76:30:ed:
         0f:94:36:e2:d6:3d:74:52:e6:6b:fa:33:f8:a2:40:99:a6:35:
         36:07:90:e2:34:f5:89:1f:d7:a6:3c:e4:37:64:37:c3:42:6e:
         eb:67:23:e3:ed:07:db:95:ca:e0:84:d9:7a:ee:c0:7f:a9:ef:
         34:ab:c0:92:90:2d:e4:68:a3:4a:f0:7c:5f:3a:30:8d:5c:2d:
         7e:72:46:69:1a:78:55:43:84:47:87:6f:b7:c9:58:7c:52:39:
         e5:ff:c6:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hw38AZYCGCpNu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk
OGJiYWE2YzgtMzZiMy00OWY3LTlhNGEtNDU4YTYwYjBiZjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18iEndOH8vkhqpI3vqn1jcBt/NCkoBFUoqsn
1nzp9Gf+R2Iqm8rQVUL74KoFFjrqcpYaujcG+DNjs6FJwaeao2T6MxnVByqrk1NP
v+sesivnZIPJERxZN5b4DA/XnPoeYHVTUxhlLBoUz8BV87zbmgmQxf01qIfZ6aNy
f2GHqqSDilEkUhk2GzFipP+jwU6oT+GpYeYmTBE/LD1bAktiGMQ1P4cj6n8GYW1D
g8mDKgVazfMpQI/jJS/1EXGJLmZoFVC/zrftiUOz/Gv3ZlAur7tKDp4zaNBuQrCF
6sf8ZGhtII8BCTm2wlg+OgOopDQuwrIivFm5E/xFU7975Igb1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGH9iMXcAwubhBdA3b3M+3VcHVXIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMwM2IxYjktYmM1YS0z
ZDBhLWI0ZmUtNmIzODJkNjMzOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBEH8pQmPV0o42sB0ucT3KVlcWL8meVZGZNNH7xg09PHiDcqCF/7UDt
mWfxW8LdtEa6kbj1sW3pqwnFlOSP57ykJhDbJWIoq4ekcugckLx9Y5DfU0uVPluA
19oSNZ5nvkX0iScU1eQEI+zzP3VrJ33c0aK0XuQxhOJclgp6PhljKPG6ouX5/o9h
DDC5zNqiVRZ7RE/OUaYu8Xxt3/wmnhl2MO0PlDbi1j10UuZr+jP4okCZpjU2B5Di
NPWJH9emPOQ3ZDfDQm7rZyPj7QfblcrghNl67sB/qe80q8CSkC3kaKNK8HxfOjCN
XC1+ckZpGnhVQ4RHh2+3yVh8Ujnl/8bf
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:19:46 2025 by rpki-client