Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa
File:                     e5c4247d-264e-3042-a3cf-05f008187a28.roa (raw, json)
Hash identifier:          Alaey84UCVfROvb7vtCI1sDvTx8fSj0bJOTTr0kiUoc=
Subject key identifier:   3E:75:61:B2:4D:0A:CA:5B:92:C2:90:7F:F1:BF:43:9D:B0:B4:A4:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0E76C3F5F4F9FF22C880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396576
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0e:76:c3:f5:f4:f9:ff:22:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=f84dcfa5-4cd2-402b-a308-f2834d82761d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:31:54:c1:17:6f:82:c4:0d:7d:ae:cc:9a:
                    75:eb:d2:59:37:2c:55:6b:79:3c:67:41:9b:c6:76:
                    62:e4:61:7b:f6:47:14:8a:2b:4c:af:89:a8:9c:f0:
                    1a:42:bb:1a:db:66:f4:e1:ac:a8:2b:93:1f:9a:12:
                    db:81:b4:86:f5:81:32:8b:0e:b9:93:f6:f6:d1:33:
                    64:a4:78:90:f3:fb:4a:88:14:b4:50:c5:35:45:12:
                    b4:82:c9:64:a4:ef:bd:a1:c0:fd:a1:ab:e0:ab:2f:
                    6e:7c:bd:29:71:d8:52:f0:ae:8b:f4:22:c2:9b:2f:
                    54:08:26:cd:25:67:97:57:08:10:ad:9e:50:16:8e:
                    da:6c:ee:a0:9f:42:43:ae:fe:3c:7b:9a:c1:69:6a:
                    fd:8a:d0:88:e5:39:2f:70:9a:77:61:c8:49:ea:f3:
                    08:5b:1c:46:94:5b:27:b3:14:5c:69:6b:2f:15:b4:
                    40:48:2d:f3:49:63:5e:9c:de:ed:af:0c:fc:c9:47:
                    5b:4a:a7:b8:71:5a:a9:3e:1a:d2:1a:b1:be:54:16:
                    17:f8:ae:4c:6e:44:f1:aa:90:9e:41:3b:cb:96:12:
                    49:66:40:f0:ec:52:93:2c:89:9f:37:85:09:7a:ef:
                    52:06:1e:fd:09:b1:25:ea:6b:21:95:d6:b4:51:05:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:61:B2:4D:0A:CA:5B:92:C2:90:7F:F1:BF:43:9D:B0:B4:A4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:46:18:8b:41:e1:bc:83:6e:33:55:ed:1e:54:b6:f4:19:67:
         2a:d5:61:cb:b4:32:d5:90:94:74:3b:f0:e1:ad:45:5f:e0:52:
         14:6e:a8:37:9c:ab:2e:d1:2c:5e:34:57:3a:49:62:6c:9e:de:
         f3:c9:96:b3:e1:de:7c:c3:b5:23:43:17:f1:01:4d:2f:f5:4c:
         4f:fb:0b:13:b9:b2:d9:3b:b5:e7:04:88:89:84:0a:f3:af:40:
         d8:b3:8e:c9:d6:32:27:2b:91:1d:d8:7a:0d:22:9e:a1:0d:54:
         55:4a:2b:c6:0b:ad:af:fd:76:f2:bb:80:e3:4c:fb:6d:3c:52:
         df:a1:2b:3c:30:ab:8c:46:71:32:a9:2e:9a:94:3a:20:25:3c:
         2b:97:02:d9:44:91:0d:e2:4a:c6:30:d6:da:36:05:27:47:96:
         a5:ac:c3:69:bc:1d:45:2a:64:ad:8a:2b:c1:1b:17:ca:75:5b:
         64:3b:b1:3b:86:ed:42:ec:cc:c7:3f:84:3b:57:71:43:78:ea:
         84:89:23:dc:61:fd:aa:bb:c7:88:18:34:68:d0:1b:e2:47:83:
         62:da:35:3a:69:f6:d3:76:c0:6b:4a:84:c2:03:c8:28:d5:bb:
         2e:5c:8f:4c:d1:44:18:37:4b:33:8c:d7:b9:e7:01:7e:81:a5:
         e3:e6:cd:8b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpYyw52w/X0+f8iyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
Zjg0ZGNmYTUtNGNkMi00MDJiLWEzMDgtZjI4MzRkODI3NjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg48xVMEXb4LEDX2uzJp169JZNyxVa3k8Z0Gb
xnZi5GF79kcUiitMr4monPAaQrsa22b04ayoK5MfmhLbgbSG9YEyiw65k/b20TNk
pHiQ8/tKiBS0UMU1RRK0gslkpO+9ocD9oavgqy9ufL0pcdhS8K6L9CLCmy9UCCbN
JWeXVwgQrZ5QFo7abO6gn0JDrv48e5rBaWr9itCI5TkvcJp3YchJ6vMIWxxGlFsn
sxRcaWsvFbRASC3zSWNenN7trwz8yUdbSqe4cVqpPhrSGrG+VBYX+K5MbkTxqpCe
QTvLlhJJZkDw7FKTLImfN4UJeu9SBh79CbEl6mshlda0UQX5zQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD51YbJNCspbksKQf/G/Q52wtKRGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTVjNDI0N2QtMjY0ZS0z
MDQyLWEzY2YtMDVmMDA4MTg3YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQATRhiLQeG8g24zVe0eVLb0GWcq1WHLtDLVkJR0O/DhrUVf4FIUbqg3
nKsu0SxeNFc6SWJsnt7zyZaz4d58w7UjQxfxAU0v9UxP+wsTubLZO7XnBIiJhArz
r0DYs47J1jInK5Ed2HoNIp6hDVRVSivGC62v/Xbyu4DjTPttPFLfoSs8MKuMRnEy
qS6alDogJTwrlwLZRJEN4krGMNbaNgUnR5alrMNpvB1FKmStiivBGxfKdVtkO7E7
hu1C7MzHP4Q7V3FDeOqEiSPcYf2qu8eIGDRo0BviR4Ni2jU6afbTdsBrSoTCA8go
1bsuXI9M0UQYN0szjNe55wF+gaXj5s2L
-----END CERTIFICATE-----
Generated at Tue Jul 1 04:45:10 2025 by rpki-client