Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dafd744d-2421-3014-970a-a91b37c095fd.roa
File:                     dafd744d-2421-3014-970a-a91b37c095fd.roa (raw, json)
Hash identifier:          6hS7k1d572Mlhz+FAojqtAuC2qE7jd1biGDr7m2Xumw=
Subject key identifier:   0F:86:A6:6B:85:DD:46:97:8A:05:E1:99:98:26:D9:41:BC:AD:76:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0F899FE8F7BB30A29580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dafd744d-2421-3014-970a-a91b37c095fd.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     36621
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0f:89:9f:e8:f7:bb:30:a2:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=9cbb779a-1fcc-4b7c-8159-852fd115bd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:35:bf:b3:b7:40:5c:c7:43:30:1a:4e:dd:
                    d7:4e:e7:12:6b:55:cb:91:10:5c:89:bb:cc:08:dc:
                    44:e4:93:bd:88:96:46:09:40:f0:f3:b2:cc:75:57:
                    41:ed:2d:fb:88:99:86:ab:67:78:cd:74:05:07:32:
                    58:75:53:ba:48:24:06:52:45:19:76:62:95:c4:d9:
                    94:e2:51:f1:66:61:37:3b:52:6f:2c:1f:79:fd:48:
                    ec:c6:4e:10:44:60:84:8e:87:6b:e8:0e:11:47:99:
                    0e:87:87:5c:44:78:e7:19:a2:79:88:a4:06:8d:f6:
                    3d:60:28:9e:f4:a8:e7:3f:d5:57:3c:bb:94:35:12:
                    9a:26:28:1e:25:84:6f:2f:fd:57:25:b4:9e:b0:ff:
                    f0:77:b4:b9:68:a6:75:24:98:55:0b:20:d7:83:88:
                    7a:63:91:1f:cb:95:58:99:4c:26:ea:80:77:b6:c9:
                    26:a1:c8:02:60:a6:32:2a:bc:51:98:9f:fd:7b:3a:
                    25:12:fa:bd:da:16:b1:7a:23:d6:81:dc:08:2a:01:
                    56:b4:a4:40:fd:68:17:54:43:84:cd:77:18:cf:97:
                    37:1e:a7:b3:f0:64:33:02:b7:9a:9d:03:9d:82:b4:
                    69:4f:8b:83:85:4c:50:4f:d2:11:35:97:c1:8b:de:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:A6:6B:85:DD:46:97:8A:05:E1:99:98:26:D9:41:BC:AD:76:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dafd744d-2421-3014-970a-a91b37c095fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:f8:84:67:30:1c:e1:b1:8f:b4:ba:f4:ba:33:4b:0b:bd:
         4b:78:d3:ad:28:9a:af:3f:3b:07:ce:e2:8c:78:12:53:c6:e8:
         20:42:a8:f6:9f:b4:28:a6:8a:9c:86:d5:99:2d:87:34:1f:9b:
         cb:3b:5d:8c:bc:1d:42:4b:5b:bb:17:44:4e:69:f1:ee:cc:30:
         c3:21:6a:2a:84:c1:13:b6:ed:20:64:b6:1d:e9:0e:16:90:bd:
         21:e1:66:65:2c:84:e0:a1:21:83:e0:a3:35:be:d6:0c:15:bb:
         ba:a1:26:5c:a3:38:6b:49:e6:31:6a:1a:c0:74:58:83:33:44:
         c5:1e:df:60:89:f2:0e:f9:8d:37:48:28:40:b5:02:b5:57:69:
         b9:ba:09:c3:e6:0c:20:62:d9:80:ce:fd:45:90:a8:98:f6:61:
         20:fd:02:fc:ba:95:b1:69:fd:b8:43:2c:91:df:f1:01:bc:0d:
         a7:21:6a:50:2c:6e:14:52:7f:59:7b:e6:45:9b:51:47:c7:86:
         c0:ca:c5:3c:a3:7e:22:f1:f9:cd:b9:38:b4:20:82:17:fa:b1:
         fb:48:9f:da:b9:27:c7:a9:a6:05:c8:ab:29:a8:e6:04:b4:a5:
         5c:9e:7e:ae:8d:59:d1:aa:4d:2d:a9:32:f1:e3:01:af:6c:f8:
         32:43:4f:23
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpYyw+Jn+j3uzCilYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
OWNiYjc3OWEtMWZjYy00YjdjLTgxNTktODUyZmQxMTViZDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKo1v7O3QFzHQzAaTt3XTucSa1XLkRBcibvM
CNxE5JO9iJZGCUDw87LMdVdB7S37iJmGq2d4zXQFBzJYdVO6SCQGUkUZdmKVxNmU
4lHxZmE3O1JvLB95/Ujsxk4QRGCEjodr6A4RR5kOh4dcRHjnGaJ5iKQGjfY9YCie
9KjnP9VXPLuUNRKaJigeJYRvL/1XJbSesP/wd7S5aKZ1JJhVCyDXg4h6Y5Efy5VY
mUwm6oB3tskmocgCYKYyKrxRmJ/9ezolEvq92haxeiPWgdwIKgFWtKRA/WgXVEOE
zXcYz5c3Hqez8GQzAreanQOdgrRpT4uDhUxQT9IRNZfBi97AkQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA+GpmuF3UaXigXhmZgm2UG8rXZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFmZDc0NGQtMjQyMS0z
MDE0LTk3MGEtYTkxYjM3YzA5NWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBqbPiEZzAc4bGPtLr0ujNLC71LeNOtKJqvPzsHzuKMeBJTxuggQqj2
n7QopoqchtWZLYc0H5vLO12MvB1CS1u7F0ROafHuzDDDIWoqhMETtu0gZLYd6Q4W
kL0h4WZlLITgoSGD4KM1vtYMFbu6oSZcozhrSeYxahrAdFiDM0TFHt9gifIO+Y03
SChAtQK1V2m5ugnD5gwgYtmAzv1FkKiY9mEg/QL8upWxaf24QyyR3/EBvA2nIWpQ
LG4UUn9Ze+ZFm1FHx4bAysU8o34i8fnNuTi0IIIX+rH7SJ/auSfHqaYFyKspqOYE
tKVcnn6ujVnRqk0tqTLx4wGvbPgyQ08j
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:30:23 2025 by rpki-client