Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0c1351-05a2-3540-8a31-01256662665c.roa
File:                     db0c1351-05a2-3540-8a31-01256662665c.roa (raw, json)
Hash identifier:          huGJfZx3ULE8/mjFOUNGuypP54VAtdWG/q1FRX+xKSs=
Subject key identifier:   50:8A:86:BF:5D:2C:41:74:5E:6E:A2:EE:3B:3F:9F:83:F9:8B:6F:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B8F0D3FE10590254C7400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0c1351-05a2-3540-8a31-01256662665c.roa
Signing time:             Wed 20 Aug 2025 14:36:55 +0000
ROA not before:           Wed 20 Aug 2025 14:36:55 +0000
ROA not after:            Tue 18 Nov 2025 15:36:55 +0000
asID:                     396610
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:8f:0d:3f:e1:05:90:25:4c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:55 2025 GMT
            Not After : Nov 18 15:36:55 2025 GMT
        Subject: CN=981e4abd-d42f-407c-bdf9-ed9f8402eda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:dc:01:be:02:5e:a0:d6:1a:48:02:5c:58:
                    3b:b4:70:9c:79:27:88:00:df:bb:ec:6c:bb:a9:71:
                    cc:da:4d:e7:d7:c0:e6:49:8a:ad:67:93:33:13:b4:
                    f7:78:5b:dd:12:48:57:33:d2:9e:8d:a3:8f:32:58:
                    0d:a1:ce:d4:67:58:19:4a:cd:5e:65:73:02:cc:9c:
                    bf:27:05:c1:d5:dc:d9:52:c4:2d:43:c0:95:95:f1:
                    47:3d:c9:51:b8:3e:e8:85:b2:b6:85:61:f4:c1:d5:
                    96:09:28:bc:6b:34:ea:9f:44:19:64:75:77:99:e8:
                    bf:0d:f7:32:a8:72:4a:1b:ee:db:8a:8d:37:36:ce:
                    64:0e:94:8a:75:c2:e9:f0:76:86:95:c6:96:7f:ea:
                    c9:7c:a1:b0:89:ec:52:0a:74:48:a8:f6:df:74:f2:
                    c8:c6:1c:89:72:80:7a:64:da:f5:c6:d3:9e:07:ce:
                    c9:ab:ac:82:af:a5:ac:15:12:62:b0:1e:cd:c0:a1:
                    41:4f:90:e4:cc:d0:64:aa:80:e3:9c:b5:c3:c4:06:
                    0b:f3:19:ae:cc:2c:5e:e0:48:48:3d:ca:30:64:39:
                    38:ca:0e:22:8e:c4:b1:d8:78:9f:a6:30:b1:e0:86:
                    8e:ae:9b:c2:d3:2b:1d:16:5a:7e:a5:36:87:aa:7a:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8A:86:BF:5D:2C:41:74:5E:6E:A2:EE:3B:3F:9F:83:F9:8B:6F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db0c1351-05a2-3540-8a31-01256662665c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:46:fe:b4:9e:3a:0a:fc:86:6c:71:5d:68:32:5d:4e:4e:1c:
         88:ec:14:c9:69:9f:5f:3f:aa:99:46:5a:2d:b6:b8:bc:06:3d:
         82:bd:12:5c:dd:70:ec:48:af:98:dc:09:d2:0f:01:b8:bb:48:
         18:a9:a5:8f:be:3b:82:8b:dd:48:7c:7c:38:17:6e:35:fc:68:
         a2:71:39:5e:ae:b7:96:82:74:6d:26:05:14:70:0f:0c:4f:1e:
         b5:35:ed:6a:4c:48:4b:e1:da:48:c9:aa:63:98:89:e3:54:8e:
         e8:71:93:b7:95:95:30:8f:e9:f0:6f:6b:88:23:5d:47:cf:a2:
         bf:a1:61:0b:ce:ef:f4:43:37:3e:e8:f2:b8:e4:ac:33:54:02:
         a2:05:d1:0c:a9:c1:64:f7:53:c4:0d:d3:80:05:c2:9f:3b:09:
         c2:f8:48:73:71:c3:43:09:02:5a:52:d2:53:6c:f2:0e:27:a2:
         ad:df:a1:52:80:09:e7:03:dc:b1:11:02:a4:80:bf:af:ab:2d:
         5d:09:b1:73:52:1d:c0:9c:06:89:25:24:da:50:ea:0f:2d:04:
         aa:f7:cb:35:b5:36:df:1a:ef:11:ab:dc:f9:83:94:e0:9c:77:
         f4:aa:1f:22:d8:d5:3a:df:c0:22:58:c0:38:84:71:b3:af:5b:
         1d:4e:62:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri48NP+EFkCVMdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzY1NVoXDTI1MTExODE1MzY1NVowLzEtMCsGA1UEAxMk
OTgxZTRhYmQtZDQyZi00MDdjLWJkZjktZWQ5Zjg0MDJlZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPcAb4CXqDWGkgCXFg7tHCceSeIAN+77Gy7
qXHM2k3n18DmSYqtZ5MzE7T3eFvdEkhXM9KejaOPMlgNoc7UZ1gZSs1eZXMCzJy/
JwXB1dzZUsQtQ8CVlfFHPclRuD7ohbK2hWH0wdWWCSi8azTqn0QZZHV3mei/Dfcy
qHJKG+7bio03Ns5kDpSKdcLp8HaGlcaWf+rJfKGwiexSCnRIqPbfdPLIxhyJcoB6
ZNr1xtOeB87Jq6yCr6WsFRJisB7NwKFBT5DkzNBkqoDjnLXDxAYL8xmuzCxe4EhI
PcowZDk4yg4ijsSx2HifpjCx4IaOrpvC0ysdFlp+pTaHqnpFIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFCKhr9dLEF0Xm6i7js/n4P5i29eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGIwYzEzNTEtMDVhMi0z
NTQwLThhMzEtMDEyNTY2NjI2NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDBPHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCSRv60njoK/IZscV1oMl1OThyI7BTJaZ9fP6qZRlottri8Bj2CvRJc
3XDsSK+Y3AnSDwG4u0gYqaWPvjuCi91IfHw4F241/GiicTlerreWgnRtJgUUcA8M
Tx61Ne1qTEhL4dpIyapjmInjVI7ocZO3lZUwj+nwb2uII11Hz6K/oWELzu/0Qzc+
6PK45KwzVAKiBdEMqcFk91PEDdOABcKfOwnC+EhzccNDCQJaUtJTbPIOJ6Kt36FS
gAnnA9yxEQKkgL+vqy1dCbFzUh3AnAaJJSTaUOoPLQSq98s1tTbfGu8Rq9z5g5Tg
nHf0qh8i2NU638AiWMA4hHGzr1sdTmJ2
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:09 2025 by rpki-client