Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d33722ff-1f8f-313a-96cf-58391aec071a.roa
File:                     d33722ff-1f8f-313a-96cf-58391aec071a.roa (raw, json)
Hash identifier:          kD6QqvUu4dWE05WyT0MqhqZn9rfhK+3kcdcUUo20xqM=
Subject key identifier:   51:88:E6:84:99:53:67:CB:BD:5F:D9:D4:96:BC:50:81:62:FE:8E:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C9F58D04A39EE8B8C5250
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d33722ff-1f8f-313a-96cf-58391aec071a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     397199
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9f:58:d0:4a:39:ee:8b:8c:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=e9c509d6-17a7-49e5-b331-2ae556ef5300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:08:0c:a9:dd:85:9f:0e:1e:13:17:2b:3a:
                    01:d3:fe:13:fc:35:12:83:cd:b2:85:7c:cf:8f:9e:
                    a4:aa:01:69:54:45:3f:f8:02:ba:25:ac:d7:d8:36:
                    ed:02:e6:f4:bd:a9:93:65:c3:3a:f7:1d:45:32:8f:
                    c3:34:39:d6:3f:a4:44:80:55:27:2b:84:cd:de:94:
                    5e:27:fc:ac:3a:c1:3a:59:1b:c9:81:e6:5d:94:1c:
                    22:1c:24:43:39:28:d2:db:f4:bd:a3:a8:72:9d:87:
                    5b:52:84:db:d2:5a:21:ea:25:a8:40:9f:39:22:13:
                    52:e4:b3:72:25:53:57:25:01:1a:d6:f6:d0:b8:06:
                    13:1e:b8:e6:ea:f5:60:54:ce:14:a3:79:84:18:69:
                    19:6f:72:f3:c3:cd:17:a6:fd:b0:74:b8:df:49:03:
                    5e:38:a2:13:fc:b5:05:49:49:b0:df:24:95:00:03:
                    f6:53:8f:fc:14:dc:f9:c9:0e:4a:aa:5b:2e:58:2a:
                    de:7b:6b:3c:f0:4c:fb:c5:6a:b9:6b:36:2c:b8:d4:
                    40:b3:f6:37:a9:62:70:33:e3:5c:f7:a5:72:59:07:
                    cf:ee:21:ee:81:08:0a:25:58:e5:21:e4:0c:35:52:
                    96:71:6b:39:6a:b3:97:16:b5:76:81:5a:3d:7e:71:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:E6:84:99:53:67:CB:BD:5F:D9:D4:96:BC:50:81:62:FE:8E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d33722ff-1f8f-313a-96cf-58391aec071a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:dd:0f:29:b6:97:6c:8d:08:b6:a8:84:d1:08:a2:f6:69:a3:
         38:be:6e:d5:5a:91:7f:76:1b:ae:6b:0c:ef:40:89:50:f2:44:
         5c:83:5d:a6:36:dc:4c:d3:f8:29:b7:7a:6e:ee:1e:3d:80:95:
         a8:db:e5:03:24:61:e2:4b:ff:cd:76:52:69:7b:fb:5f:5c:32:
         c5:6b:bf:e2:ef:49:70:ae:db:bc:39:88:11:ef:f6:30:7d:6a:
         7a:ec:72:1c:69:f5:3f:7a:6b:0b:63:7e:01:d7:89:64:04:2a:
         28:76:c6:eb:78:dc:ea:12:33:06:0a:5b:de:17:ad:fe:4e:8e:
         f8:04:33:6b:62:36:03:4f:2e:b9:04:a4:d9:f4:b6:9b:88:00:
         1f:07:b4:24:9c:6e:cd:0c:6a:31:c6:79:fa:b1:55:24:c9:8a:
         97:d3:e0:6c:d2:d5:dc:17:a1:51:a3:33:3f:94:97:9c:8b:98:
         9d:e9:9b:95:b7:e5:d8:01:6c:5b:23:e4:9f:15:67:ad:c3:f5:
         40:95:1b:f9:40:40:cf:6e:40:ff:14:e2:4c:7f:d6:50:d8:22:
         da:84:d8:10:f6:ac:56:42:6d:ba:cc:f3:19:09:f6:4d:62:bd:
         a0:79:06:cd:8c:06:9a:95:e2:9d:85:e3:b6:a2:93:02:af:55:
         47:db:52:16
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTJ9Y0Eo57ouMUlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZTljNTA5ZDYtMTdhNy00OWU1LWIzMzEtMmFlNTU2ZWY1MzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNEIDKndhZ8OHhMXKzoB0/4T/DUSg82yhXzP
j56kqgFpVEU/+AK6JazX2DbtAub0vamTZcM69x1FMo/DNDnWP6REgFUnK4TN3pRe
J/ysOsE6WRvJgeZdlBwiHCRDOSjS2/S9o6hynYdbUoTb0loh6iWoQJ85IhNS5LNy
JVNXJQEa1vbQuAYTHrjm6vVgVM4Uo3mEGGkZb3Lzw80Xpv2wdLjfSQNeOKIT/LUF
SUmw3ySVAAP2U4/8FNz5yQ5KqlsuWCree2s88Ez7xWq5azYsuNRAs/Y3qWJwM+Nc
96VyWQfP7iHugQgKJVjlIeQMNVKWcWs5arOXFrV2gVo9fnF18wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFGI5oSZU2fLvV/Z1Ja8UIFi/o45MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDMzNzIyZmYtMWY4Zi0z
MTNhLTk2Y2YtNTgzOTFhZWMwNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCh3Q8ptpdsjQi2qITRCKL2aaM4vm7VWpF/dhuuawzvQIlQ8kRcg12m
NtxM0/gpt3pu7h49gJWo2+UDJGHiS//NdlJpe/tfXDLFa7/i70lwrtu8OYgR7/Yw
fWp67HIcafU/emsLY34B14lkBCoodsbreNzqEjMGClveF63+To74BDNrYjYDTy65
BKTZ9LabiAAfB7QknG7NDGoxxnn6sVUkyYqX0+Bs0tXcF6FRozM/lJeci5id6ZuV
t+XYAWxbI+SfFWetw/VAlRv5QEDPbkD/FOJMf9ZQ2CLahNgQ9qxWQm26zPMZCfZN
Yr2geQbNjAaaleKdheO2opMCr1VH21IW
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:41 2025 by rpki-client