Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa
File:                     a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa (raw, json)
Hash identifier:          aqWkvrv104PxQUntJFAmogGrroKbTU786mPJeZU/7Rk=
Subject key identifier:   84:7B:87:E8:C1:87:23:00:76:66:AA:B4:D6:42:5E:C4:1E:E5:40:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58C0FEFFE34A09D7D4CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     397202
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8c:0f:ef:fe:34:a0:9d:7d:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=78f06a32-01ba-48e3-97cd-1d57f80c41d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:6a:47:51:cb:ff:64:39:47:e6:6f:00:70:
                    0e:31:0b:b7:49:3c:98:d7:49:22:f5:62:b3:12:40:
                    aa:08:11:59:7f:1c:f8:10:21:fe:35:5f:cd:a6:4d:
                    9d:71:19:96:a2:98:d0:d3:a3:62:31:af:46:cd:5f:
                    f8:c8:6a:6b:84:d9:e4:fb:47:5e:e0:3a:f5:5f:b1:
                    32:ee:68:c5:e9:e1:93:17:60:d6:05:05:1d:e3:64:
                    0f:6c:06:9c:29:df:1b:c6:b1:09:00:8f:2a:c9:2c:
                    f4:7a:51:f0:13:7d:f4:88:da:54:54:49:ac:e3:fe:
                    f5:41:ce:b1:0b:82:63:f4:77:b9:5c:da:16:7e:5a:
                    aa:6f:5a:44:a6:75:1c:45:dd:e4:61:d3:d2:10:85:
                    87:71:55:36:17:14:43:8a:70:a9:a0:86:11:e0:de:
                    61:21:68:40:36:47:ce:f4:5e:d8:00:32:88:bd:2d:
                    f3:43:13:2c:45:07:b9:8e:ba:18:fe:21:f2:77:2f:
                    75:0a:37:62:e7:eb:48:0a:37:d1:36:de:3b:73:06:
                    74:3a:93:7f:fd:f6:3a:e1:97:89:ce:86:ce:38:4d:
                    db:50:93:99:23:6c:3c:67:18:4c:6e:72:6a:b6:9f:
                    6e:ff:e2:70:47:7b:18:2e:b6:f8:ed:7b:35:56:69:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:87:E8:C1:87:23:00:76:66:AA:B4:D6:42:5E:C4:1E:E5:40:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9ac489b-8c67-3c4f-bb5d-b2913681cbed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:05:c7:ef:09:68:8a:3e:27:85:e4:e2:57:55:f9:d1:df:
         10:d5:50:5c:68:b0:d5:48:3f:31:c4:15:21:c9:2a:4c:e4:ec:
         46:34:db:0e:5a:6d:71:83:c9:d5:58:c1:a0:96:58:05:b6:80:
         bf:ea:80:9b:52:d1:5f:d7:d2:d3:2a:fd:32:1c:81:5a:80:4b:
         27:9c:3e:5a:c5:7e:1c:f9:ff:9a:4a:6e:4f:66:a4:70:bc:be:
         a7:08:7e:bc:46:d2:52:37:2e:59:3f:b1:87:0f:aa:d1:49:16:
         7f:70:5c:f6:cf:d4:8f:4a:29:03:60:9c:4b:f6:df:60:38:88:
         46:23:9f:7f:a4:b2:ea:29:bf:ba:bf:34:cf:f8:4f:05:66:4b:
         a0:0e:b0:ee:f7:b9:4e:16:1f:b6:7a:de:19:2c:0d:66:01:01:
         57:90:de:68:ae:2b:2f:a0:f8:3c:9f:9d:b6:77:e7:e7:99:02:
         2a:17:7e:a6:fc:d5:0f:45:75:50:81:d6:94:f1:a0:8c:40:16:
         c7:19:f2:f7:94:5a:c3:c3:f3:3b:55:df:10:8a:0c:d7:79:f5:
         38:19:ab:d0:1f:ee:5e:42:02:6d:00:15:1e:86:8b:6f:b1:23:
         f7:f9:a8:8a:9a:46:98:92:8b:ad:80:42:96:02:4f:0a:3a:8b:
         9a:08:d9:b8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErsxYwP7/40oJ19TMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
NzhmMDZhMzItMDFiYS00OGUzLTk3Y2QtMWQ1N2Y4MGM0MWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgNqR1HL/2Q5R+ZvAHAOMQu3STyY10ki9WKz
EkCqCBFZfxz4ECH+NV/Npk2dcRmWopjQ06NiMa9GzV/4yGprhNnk+0de4Dr1X7Ey
7mjF6eGTF2DWBQUd42QPbAacKd8bxrEJAI8qySz0elHwE330iNpUVEms4/71Qc6x
C4Jj9He5XNoWflqqb1pEpnUcRd3kYdPSEIWHcVU2FxRDinCpoIYR4N5hIWhANkfO
9F7YADKIvS3zQxMsRQe5jroY/iHydy91Cjdi5+tICjfRNt47cwZ0OpN//fY64ZeJ
zobOOE3bUJOZI2w8ZxhMbnJqtp9u/+JwR3sYLrb47Xs1VmkbEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIR7h+jBhyMAdmaqtNZCXsQe5UBeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlhYzQ4OWItOGM2Ny0z
YzRmLWJiNWQtYjI5MTM2ODFjYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5qAXH7wloij4nheTiV1X50d8Q1VBcaLDVSD8xxBUhySpM5OxGNNsO
Wm1xg8nVWMGgllgFtoC/6oCbUtFf19LTKv0yHIFagEsnnD5axX4c+f+aSm5PZqRw
vL6nCH68RtJSNy5ZP7GHD6rRSRZ/cFz2z9SPSikDYJxL9t9gOIhGI59/pLLqKb+6
vzTP+E8FZkugDrDu97lOFh+2et4ZLA1mAQFXkN5orisvoPg8n522d+fnmQIqF36m
/NUPRXVQgdaU8aCMQBbHGfL3lFrDw/M7Vd8QigzXefU4GavQH+5eQgJtABUehotv
sSP3+aiKmkaYkoutgEKWAk8KOouaCNm4
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:32 2025 by rpki-client