Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eff647f8-78b7-3c04-8367-98e3acb0b577.roa
File:                     eff647f8-78b7-3c04-8367-98e3acb0b577.roa (raw, json)
Hash identifier:          VqPqE2uzg+T6j6TlVJFcTwYFsgQJqAwKQBXaD4SMexs=
Subject key identifier:   CE:A9:D6:52:65:51:C6:2B:1E:FF:9A:5E:BB:20:0C:2A:83:94:7C:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B0B190A685E0BEB2EB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eff647f8-78b7-3c04-8367-98e3acb0b577.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396552
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b0:b1:90:a6:85:e0:be:b2:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=fd04fb96-9c97-4ce7-9fd7-2e8264e744fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:a1:e4:77:ec:d6:25:cb:ff:5c:d8:1d:c8:
                    13:93:d0:f3:a1:a7:db:ee:d6:ca:65:69:dd:09:c9:
                    9f:e3:62:34:c0:46:36:71:a7:d1:f5:1b:4b:56:1d:
                    27:a7:bc:29:68:97:75:22:bb:b2:ef:ca:de:41:9a:
                    fe:09:86:a1:77:9f:39:fc:4a:03:75:38:db:b5:ac:
                    18:8d:91:c6:56:e9:b7:9d:27:d9:ce:33:97:40:c0:
                    11:df:d4:8d:4a:4f:e5:45:8d:64:93:85:a7:55:eb:
                    8e:f5:fb:92:39:19:f2:e5:71:4d:47:a8:f3:d1:e5:
                    39:06:b2:30:bf:e0:28:07:5c:8a:5d:8e:ec:27:d4:
                    10:d3:c2:5d:ef:66:06:d9:48:37:b8:81:6a:9a:ad:
                    ce:41:93:54:09:f4:2b:52:9a:11:69:63:9d:2e:92:
                    09:8c:40:04:6b:ce:96:7e:30:2e:bf:43:0d:e8:8a:
                    0c:4b:e0:d3:0b:96:f6:e1:62:97:a5:3e:16:54:13:
                    be:01:2f:f5:cb:dc:ee:e8:76:a0:68:64:d6:c9:6f:
                    88:dc:97:03:0d:73:8a:e8:62:da:ef:9c:d1:de:4a:
                    d4:d6:28:cc:63:10:19:6f:a3:72:4e:e1:36:9a:54:
                    3d:e4:ec:46:76:6d:4a:aa:dd:e2:b3:d0:3d:f9:21:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A9:D6:52:65:51:C6:2B:1E:FF:9A:5E:BB:20:0C:2A:83:94:7C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eff647f8-78b7-3c04-8367-98e3acb0b577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:82:19:3c:2b:9f:e1:29:f2:87:01:0d:9c:00:97:2a:7c:26:
         50:fa:e3:db:d4:22:0d:e8:1a:1b:f1:bb:53:06:2b:1e:6c:39:
         7a:b2:f6:8d:dd:20:49:86:87:b1:f8:6f:83:1f:b0:31:1f:12:
         24:e0:5b:cf:98:de:61:de:95:9f:4d:ad:96:d0:28:5a:fa:ef:
         7e:38:5c:42:20:eb:4d:4a:a9:49:42:d7:58:0e:d4:d1:d2:40:
         93:8c:80:ed:bc:a3:91:dc:85:bf:cf:1d:80:6f:cc:18:92:ee:
         2f:67:db:97:32:81:b0:b3:35:fb:de:96:46:5a:b9:e3:09:f0:
         b4:e4:b3:6a:d7:e5:89:e4:72:74:9e:22:08:a2:dc:29:b1:87:
         fc:46:77:0b:59:1d:a6:3f:91:69:b8:89:bf:60:63:88:a3:b4:
         d6:de:e0:5a:86:a2:51:30:3d:f3:35:45:d2:41:8b:de:48:ff:
         7a:68:e7:ac:06:2b:7e:12:45:2b:e0:76:e8:f4:97:11:30:c6:
         d7:24:02:df:de:15:63:f3:6c:b3:c4:30:49:63:b7:4d:12:6e:
         5f:bf:49:71:70:ca:9a:3f:0c:cb:2d:45:49:04:ff:09:f7:20:
         4c:ff:4f:dd:1a:d3:40:93:27:fa:2c:e8:a5:ab:0a:3c:de:9b:
         87:f3:d4:a8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8bCxkKaF4L6y6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
ZmQwNGZiOTYtOWM5Ny00Y2U3LTlmZDctMmU4MjY0ZTc0NGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKWh5Hfs1iXL/1zYHcgTk9Dzoafb7tbKZWnd
Ccmf42I0wEY2cafR9RtLVh0np7wpaJd1Iruy78reQZr+CYahd585/EoDdTjbtawY
jZHGVum3nSfZzjOXQMAR39SNSk/lRY1kk4WnVeuO9fuSORny5XFNR6jz0eU5BrIw
v+AoB1yKXY7sJ9QQ08Jd72YG2Ug3uIFqmq3OQZNUCfQrUpoRaWOdLpIJjEAEa86W
fjAuv0MN6IoMS+DTC5b24WKXpT4WVBO+AS/1y9zu6HagaGTWyW+I3JcDDXOK6GLa
75zR3krU1ijMYxAZb6NyTuE2mlQ95OxGdm1Kqt3is9A9+SGy4QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM6p1lJlUcYrHv+aXrsgDCqDlHzXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZmNjQ3ZjgtNzhiNy0z
YzA0LTgzNjctOThlM2FjYjBiNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCJghk8K5/hKfKHAQ2cAJcqfCZQ+uPb1CIN6Bob8btTBisebDl6svaN
3SBJhoex+G+DH7AxHxIk4FvPmN5h3pWfTa2W0Cha+u9+OFxCIOtNSqlJQtdYDtTR
0kCTjIDtvKOR3IW/zx2Ab8wYku4vZ9uXMoGwszX73pZGWrnjCfC05LNq1+WJ5HJ0
niIIotwpsYf8RncLWR2mP5FpuIm/YGOIo7TW3uBahqJRMD3zNUXSQYveSP96aOes
Bit+EkUr4Hbo9JcRMMbXJALf3hVj82yzxDBJY7dNEm5fv0lxcMqaPwzLLUVJBP8J
9yBM/0/dGtNAkyf6LOilqwo83puH89So
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:34 2025 by rpki-client