Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa
File:                     d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa (raw, json)
Hash identifier:          c+L5dGTl1gcf8e7Y2Exv6yQqOLxo+W6pfcyNa4iQRpI=
Subject key identifier:   A8:2E:FC:73:B8:63:C2:2F:96:2C:07:BF:5A:79:A1:F9:7D:81:93:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB1A44139EB680DCDDCF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     396560
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:1a:44:13:9e:b6:80:dc:dd:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=cf5ce115-2323-4312-bcb5-da1192debd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:9f:43:77:11:44:d3:31:fb:e3:54:1a:4d:
                    f1:dd:b2:2b:9b:c3:e5:79:42:9e:2c:37:83:b8:9e:
                    01:50:39:e2:ea:7e:fd:40:f6:3e:e6:8e:ca:7c:05:
                    16:c5:25:75:ed:ab:84:39:51:f6:43:a4:e1:0f:4e:
                    bd:1d:1c:77:6c:ab:ff:0c:fc:6a:31:d3:b0:3a:e4:
                    75:fd:8c:e4:e3:ad:a3:98:1e:f6:e8:28:f2:2f:52:
                    ad:40:df:f6:de:b3:79:b9:25:3a:62:42:73:f2:f3:
                    9c:a7:a1:92:13:55:17:0b:c2:1a:54:57:41:a4:eb:
                    6c:78:b7:e1:c8:14:20:a9:e8:43:24:8e:53:2c:30:
                    a2:66:34:e0:b6:af:2d:3f:4b:2c:eb:28:95:b5:5e:
                    60:a4:86:46:2b:ee:b9:cf:9e:96:ac:ff:48:fa:70:
                    3c:f1:9e:05:f0:5e:2a:ce:57:a7:51:97:2c:40:cc:
                    aa:97:63:45:84:88:00:63:50:cd:dc:0a:42:00:a8:
                    b9:bb:5d:2f:69:6c:34:b6:4f:18:ec:5d:1a:8a:28:
                    0e:e9:fb:92:33:29:2f:29:8e:90:ed:7c:ce:0e:e7:
                    70:85:d5:2e:6d:b1:54:b3:a5:00:74:0b:a0:33:13:
                    71:41:86:76:f1:6f:75:6d:a8:54:8d:d4:85:3d:b3:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:FC:73:B8:63:C2:2F:96:2C:07:BF:5A:79:A1:F9:7D:81:93:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5cfc836-257f-3be6-89bf-a2dc2bb69252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:0a:d1:1a:e5:ea:97:8a:94:45:5a:1f:08:e6:ed:c7:0c:
         5e:bb:86:d5:38:0b:6a:15:bb:ec:dc:71:9a:b5:60:70:96:38:
         ba:13:f5:61:0b:0f:5a:88:2e:14:14:8f:cd:2e:19:6b:f8:e0:
         ac:41:3d:09:af:db:14:b3:15:0e:ee:52:6d:75:3c:a6:c5:ae:
         e1:41:b7:bb:63:04:bc:df:f9:78:e6:dd:20:4e:ff:54:ab:31:
         60:3e:bc:ea:1d:38:d1:a6:2a:7b:ce:ac:b1:ea:7e:1f:d9:16:
         d1:6d:97:a3:7a:fa:fc:9b:de:fe:5f:31:c0:cb:cf:65:aa:9e:
         69:9b:4a:49:f8:6a:a0:d1:8f:c8:72:66:a0:a0:a9:56:e0:20:
         8b:6f:4a:51:37:a3:9f:fe:c0:c4:e9:26:73:1f:3a:c7:e3:d8:
         7b:f2:ea:55:f5:51:e9:93:4a:47:f5:e8:85:24:2d:0f:89:eb:
         4c:ef:77:d4:21:d9:6a:df:21:73:20:bd:4f:94:ec:c8:33:8b:
         e7:30:dd:71:0d:64:71:58:d7:0f:23:b3:0a:21:42:59:ec:d1:
         81:5c:9c:9c:0a:c3:f5:dc:f1:e0:7e:6a:ab:fc:0b:78:d8:9b:
         45:f1:7a:0b:e2:51:bc:31:e7:77:83:a4:d3:50:6c:7e:00:27:
         c8:08:de:77
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpD2xpEE562gNzdzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
Y2Y1Y2UxMTUtMjMyMy00MzEyLWJjYjUtZGExMTkyZGViZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhufQ3cRRNMx++NUGk3x3bIrm8PleUKeLDeD
uJ4BUDni6n79QPY+5o7KfAUWxSV17auEOVH2Q6ThD069HRx3bKv/DPxqMdOwOuR1
/Yzk462jmB726CjyL1KtQN/23rN5uSU6YkJz8vOcp6GSE1UXC8IaVFdBpOtseLfh
yBQgqehDJI5TLDCiZjTgtq8tP0ss6yiVtV5gpIZGK+65z56WrP9I+nA88Z4F8F4q
zlenUZcsQMyql2NFhIgAY1DN3ApCAKi5u10vaWw0tk8Y7F0aiigO6fuSMykvKY6Q
7XzODudwhdUubbFUs6UAdAugMxNxQYZ28W91bahUjdSFPbOmdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKgu/HO4Y8IvliwHv1p5ofl9gZNvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDVjZmM4MzYtMjU3Zi0z
YmU2LTg5YmYtYTJkYzJiYjY5MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA92wrRGuXql4qURVofCObtxwxeu4bVOAtqFbvs3HGatWBwlji6E/Vh
Cw9aiC4UFI/NLhlr+OCsQT0Jr9sUsxUO7lJtdTymxa7hQbe7YwS83/l45t0gTv9U
qzFgPrzqHTjRpip7zqyx6n4f2RbRbZejevr8m97+XzHAy89lqp5pm0pJ+Gqg0Y/I
cmagoKlW4CCLb0pRN6Of/sDE6SZzHzrH49h78upV9VHpk0pH9eiFJC0PietM73fU
Idlq3yFzIL1PlOzIM4vnMN1xDWRxWNcPI7MKIUJZ7NGBXJycCsP13PHgfmqr/At4
2JtF8XoL4lG8Med3g6TTUGx+ACfICN53
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:58:40 2025 by rpki-client