Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96c83b-16d4-3986-be07-cd9b26be2fd0.roa
File:                     be96c83b-16d4-3986-be07-cd9b26be2fd0.roa (raw, json)
Hash identifier:          v5gjA9Vi4W3JBvBXzVY0IT7ATybfuGtr6G40fHcfGZk=
Subject key identifier:   05:C3:F9:B4:2F:25:EE:F5:CA:A7:6B:18:55:4D:8A:5C:B2:54:9D:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB065759BF548F68AD0A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96c83b-16d4-3986-be07-cd9b26be2fd0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396597
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:06:57:59:bf:54:8f:68:ad:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=9f6de22b-3e4e-4076-96ee-e3bd503997cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:64:23:63:0b:e8:5b:d1:e5:ed:94:f1:be:06:
                    a2:43:1b:ac:69:07:d5:d9:71:82:15:41:09:ef:e9:
                    78:f4:f0:cb:14:90:01:9d:24:d9:b5:65:da:24:93:
                    88:2b:b2:08:10:da:f9:92:8d:ec:e3:5f:5e:5d:85:
                    70:51:80:a0:d8:e0:81:19:27:49:f1:15:f5:0d:8f:
                    7b:1a:0d:4e:18:9d:51:03:a6:5a:29:32:77:ec:85:
                    06:05:38:39:ed:3f:07:95:ac:5c:5e:0f:b8:f6:98:
                    6b:11:8d:31:37:6d:d9:a0:a4:53:f9:1f:d2:1b:fd:
                    11:7e:16:43:bc:a2:97:fb:d9:35:60:4c:f9:ce:ee:
                    6f:ec:c1:3d:53:b0:6a:ce:db:fc:fe:88:f6:77:f3:
                    7d:91:fc:29:e9:54:1b:3f:da:e3:9f:c3:aa:6b:b8:
                    7e:d8:0f:8a:1a:aa:8e:9b:2a:56:79:a6:bd:e1:cf:
                    8c:41:9c:4b:33:cd:c4:e2:76:7c:fd:c7:e9:d8:61:
                    81:38:4f:f7:71:64:e7:70:f5:80:42:ef:f3:fa:c6:
                    a5:f5:a0:6a:07:f5:05:c0:44:a8:d9:3d:90:31:99:
                    cf:91:55:ba:6e:36:32:2b:38:71:21:cb:ec:d9:47:
                    68:d8:bd:a9:7f:3f:a6:5f:2a:78:02:e5:3e:02:19:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C3:F9:B4:2F:25:EE:F5:CA:A7:6B:18:55:4D:8A:5C:B2:54:9D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96c83b-16d4-3986-be07-cd9b26be2fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:9d:4a:d0:57:38:76:4c:c1:62:99:3f:1a:13:74:e8:75:
         a5:9b:7b:da:f2:34:9a:1d:ca:3a:a8:0c:69:77:1a:cb:4d:61:
         2a:81:1b:54:4b:13:5f:38:e2:ed:7f:58:89:07:7c:99:5e:11:
         74:5a:ca:10:59:eb:7d:44:32:cf:e6:af:1f:eb:4a:4c:3a:27:
         a2:7e:d2:92:58:0c:c0:2d:2e:a1:58:c6:ab:e7:44:f0:b5:ee:
         42:dc:cb:5e:aa:ff:70:e6:4b:8d:58:9a:74:26:c3:c0:ea:bd:
         c4:1b:8e:bb:70:bc:44:39:92:33:01:b5:3e:42:76:e1:af:38:
         fa:83:e1:7a:a8:71:0b:6e:66:5b:e4:ce:cc:f7:0a:64:2e:b4:
         6f:ab:35:d5:08:b8:df:4a:06:5d:c9:34:42:f2:04:03:c2:c9:
         f8:27:35:43:77:86:df:73:48:d3:cd:77:df:c4:a2:71:2a:23:
         c2:43:0e:47:6a:b5:bc:a6:f0:1f:10:8c:84:42:de:dc:f5:27:
         f7:4e:df:b2:79:de:6f:00:6f:f2:f9:30:09:da:73:b1:9a:6d:
         5d:bf:bc:ab:1b:60:ee:4d:c5:25:b4:be:b6:25:92:dc:ac:af:
         93:3c:4d:10:af:ec:67:d7:ef:87:9a:5f:e4:2a:21:d3:15:15:
         c1:0e:64:5b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2wZXWb9Uj2itCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
OWY2ZGUyMmItM2U0ZS00MDc2LTk2ZWUtZTNiZDUwMzk5N2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2QjYwvoW9Hl7ZTxvgaiQxusaQfV2XGCFUEJ
7+l49PDLFJABnSTZtWXaJJOIK7IIENr5ko3s419eXYVwUYCg2OCBGSdJ8RX1DY97
Gg1OGJ1RA6ZaKTJ37IUGBTg57T8HlaxcXg+49phrEY0xN23ZoKRT+R/SG/0RfhZD
vKKX+9k1YEz5zu5v7ME9U7Bqztv8/oj2d/N9kfwp6VQbP9rjn8Oqa7h+2A+KGqqO
mypWeaa94c+MQZxLM83E4nZ8/cfp2GGBOE/3cWTncPWAQu/z+sal9aBqB/UFwESo
2T2QMZnPkVW6bjYyKzhxIcvs2Udo2L2pfz+mXyp4AuU+Ahk5/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAXD+bQvJe71yqdrGFVNilyyVJ3sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmU5NmM4M2ItMTZkNC0z
OTg2LWJlMDctY2Q5YjI2YmUyZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAfDZ1K0Fc4dkzBYpk/GhN06HWlm3va8jSaHco6qAxpdxrLTWEqgRtU
SxNfOOLtf1iJB3yZXhF0WsoQWet9RDLP5q8f60pMOieiftKSWAzALS6hWMar50Tw
te5C3Mteqv9w5kuNWJp0JsPA6r3EG467cLxEOZIzAbU+Qnbhrzj6g+F6qHELbmZb
5M7M9wpkLrRvqzXVCLjfSgZdyTRC8gQDwsn4JzVDd4bfc0jTzXffxKJxKiPCQw5H
arW8pvAfEIyEQt7c9Sf3Tt+yed5vAG/y+TAJ2nOxmm1dv7yrG2DuTcUltL62JZLc
rK+TPE0Qr+xn1++Hml/kKiHTFRXBDmRb
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:00:37 2025 by rpki-client