Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efa035ef-82fc-3f67-a3c7-3fa687d0ebb2.roa
File:                     efa035ef-82fc-3f67-a3c7-3fa687d0ebb2.roa (raw, json)
Hash identifier:          YI3+r+ToTC9fBS32U2yBvSJKtDvrWQ75c4El7gVYZtM=
Subject key identifier:   9A:18:4A:21:00:6F:28:D3:3A:CE:D5:22:E3:22:32:8A:3F:0C:8E:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FAD4CA33227F4CB1D180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efa035ef-82fc-3f67-a3c7-3fa687d0ebb2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396553
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fa:d4:ca:33:22:7f:4c:b1:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7f3d1ea6-591e-4039-901a-9ea8edc39188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:63:cc:58:bf:88:90:ee:07:5d:0b:e8:86:
                    2a:c4:5b:20:c5:31:14:9c:d7:92:1d:f1:40:6f:d5:
                    58:ad:10:bb:86:92:1b:3e:62:1f:f5:70:93:15:48:
                    53:94:48:9e:35:55:c8:48:81:b0:7b:81:a4:06:40:
                    18:b7:a1:65:4a:8a:4c:cf:31:88:83:e9:85:c4:7c:
                    cc:21:74:2f:22:66:40:9d:31:f5:a4:ac:68:74:91:
                    37:be:5c:1e:f4:a1:4d:c1:bf:b1:9c:4a:58:d5:bf:
                    7b:01:a8:10:35:b9:1d:26:b3:0a:ff:e4:82:ec:56:
                    09:7b:82:a1:0c:ad:f9:1d:f2:ee:db:6b:de:a4:e8:
                    f2:6f:f6:35:58:3b:b8:65:b6:0c:cf:6d:f4:c0:d0:
                    5e:cf:02:ff:95:9f:7a:99:28:35:be:88:ce:c6:fe:
                    cc:6f:04:9d:b8:6b:c8:c9:32:31:03:63:26:91:36:
                    ad:3b:80:5e:3a:ba:43:84:dc:ae:8d:67:0d:8c:b3:
                    f1:89:aa:3e:fe:b5:5b:4f:90:8a:db:de:13:99:63:
                    9e:ea:40:38:75:71:8f:c1:63:3a:b4:a2:5c:c2:5a:
                    31:12:a2:76:f1:7e:e2:bf:75:9c:19:2c:25:e4:12:
                    74:2a:dc:80:32:38:35:13:b2:d0:a7:e1:d3:f4:cb:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:4A:21:00:6F:28:D3:3A:CE:D5:22:E3:22:32:8A:3F:0C:8E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efa035ef-82fc-3f67-a3c7-3fa687d0ebb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:09:29:09:61:7b:53:29:38:f0:9e:68:30:ed:3f:1a:a8:3b:
         05:11:7c:6a:6a:49:cf:e0:17:7a:9d:88:9f:8f:25:dd:30:0c:
         8a:9a:ee:84:f0:7a:f8:9a:ea:41:8f:f2:1a:66:72:ae:aa:4d:
         99:c2:6c:fb:d1:2a:5c:21:28:c1:85:7f:d6:67:c5:66:a5:51:
         2c:a9:0b:b4:03:bc:ea:db:08:e2:0b:84:05:89:10:14:ec:44:
         66:ad:96:e6:7f:d0:de:7a:0d:6c:95:e5:2e:df:98:d4:3d:24:
         10:f3:4e:be:8f:7c:56:a2:26:6d:5d:36:99:1d:83:29:39:66:
         46:39:a7:d0:a8:a6:55:f3:48:b3:f7:56:d4:dd:ac:e2:fc:88:
         3d:a4:ac:82:31:ee:0d:5f:19:c0:64:a1:a2:5a:af:f9:82:cf:
         ed:09:a1:db:73:cc:e7:15:55:10:f3:47:fd:e5:58:12:75:e9:
         08:2a:6d:64:24:6b:92:fc:ac:65:27:d2:0b:8d:d6:bb:46:9d:
         04:d0:97:0d:01:3d:b5:32:35:51:ed:31:d0:5f:36:6b:2f:b9:
         48:ae:ac:28:a0:bb:8f:47:7e:05:7d:56:ce:b6:88:3f:ae:4a:
         1b:52:74:f9:c4:c6:83:03:a9:3e:33:7e:57:76:3e:a2:4d:c6:
         de:e1:a3:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhlvrUyjMif0yx0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
N2YzZDFlYTYtNTkxZS00MDM5LTkwMWEtOWVhOGVkYzM5MTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2xjzFi/iJDuB10L6IYqxFsgxTEUnNeSHfFA
b9VYrRC7hpIbPmIf9XCTFUhTlEieNVXISIGwe4GkBkAYt6FlSopMzzGIg+mFxHzM
IXQvImZAnTH1pKxodJE3vlwe9KFNwb+xnEpY1b97AagQNbkdJrMK/+SC7FYJe4Kh
DK35HfLu22vepOjyb/Y1WDu4ZbYMz230wNBezwL/lZ96mSg1vojOxv7MbwSduGvI
yTIxA2MmkTatO4BeOrpDhNyujWcNjLPxiao+/rVbT5CK294TmWOe6kA4dXGPwWM6
tKJcwloxEqJ28X7iv3WcGSwl5BJ0KtyAMjg1E7LQp+HT9MsthwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJoYSiEAbyjTOs7VIuMiMoo/DI56MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZhMDM1ZWYtODJmYy0z
ZjY3LWEzYzctM2ZhNjg3ZDBlYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC4CSkJYXtTKTjwnmgw7T8aqDsFEXxqaknP4Bd6nYifjyXdMAyKmu6E
8Hr4mupBj/IaZnKuqk2Zwmz70SpcISjBhX/WZ8VmpVEsqQu0A7zq2wjiC4QFiRAU
7ERmrZbmf9Deeg1sleUu35jUPSQQ806+j3xWoiZtXTaZHYMpOWZGOafQqKZV80iz
91bU3azi/Ig9pKyCMe4NXxnAZKGiWq/5gs/tCaHbc8znFVUQ80f95VgSdekIKm1k
JGuS/KxlJ9ILjda7Rp0E0JcNAT21MjVR7THQXzZrL7lIrqwooLuPR34FfVbOtog/
rkobUnT5xMaDA6k+M35Xdj6iTcbe4aO8
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:44:58 2025 by rpki-client