Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
File:                     f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa (raw, json)
Hash identifier:          cS5Khaue2Q6kZXWbiW5IjRTWazb6iFLQLKtCIVgrXU4=
Subject key identifier:   C7:3C:D3:49:78:1B:97:7E:FE:2A:5F:30:8B:8E:D1:FE:0D:9D:E5:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C847E3087037491416780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396579
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:84:7e:30:87:03:74:91:41:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=7be07147-1ded-4d06-9be8-e2a86abc814c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:3a:99:01:68:68:e6:4c:be:2a:e9:f9:6b:
                    fc:3e:cf:13:2c:73:c1:fd:7b:00:d9:20:59:74:51:
                    a1:56:3c:99:ce:ce:71:29:19:f0:b4:6e:e8:cf:08:
                    ce:03:33:46:0e:6b:b1:ba:e0:01:fa:ce:18:ad:7f:
                    4e:cf:44:36:87:4d:e2:4e:5f:be:08:cd:3a:ff:ce:
                    62:9a:29:ad:37:a4:51:63:38:57:0c:c4:33:4b:9b:
                    e8:be:5e:f4:a4:9b:58:dd:e2:0d:84:53:92:d4:48:
                    ea:27:d7:f6:e2:80:8c:d5:f9:00:3c:9a:43:42:8f:
                    df:4b:eb:74:92:cd:c2:32:1c:16:61:86:7d:2e:bd:
                    4d:37:ee:26:02:e2:65:4f:cd:e0:dd:71:70:dc:e4:
                    62:91:bb:ff:6d:d3:e8:75:25:0d:29:b1:e4:a2:4f:
                    7a:91:18:d0:5e:76:69:12:95:75:12:a2:ae:85:40:
                    e7:42:1e:0a:a5:02:c4:f6:51:7f:6a:bc:e4:35:96:
                    44:c0:d5:49:83:94:18:df:c9:69:c8:de:4d:f8:86:
                    3b:9a:d7:73:2a:83:12:2b:58:17:6e:ce:8a:f2:20:
                    12:28:8d:35:5a:2c:a4:c9:57:96:56:b7:20:fc:13:
                    91:b3:06:bd:8c:18:9c:87:61:e6:f4:45:ac:0a:83:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:D3:49:78:1B:97:7E:FE:2A:5F:30:8B:8E:D1:FE:0D:9D:E5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4f:7d:08:e7:89:3c:08:15:50:fb:12:f2:4c:ad:d2:2b:f2:
         96:ef:8c:1b:c9:85:36:25:b5:45:47:dd:b4:91:8b:d0:6d:dd:
         b0:a2:06:8e:66:5e:c2:34:08:d0:07:ac:40:50:fc:d6:b7:96:
         9a:18:30:2c:6d:f9:be:f3:83:8e:60:18:92:75:24:0c:6a:4d:
         a1:68:03:cb:e6:de:f2:b1:94:f3:2a:f2:43:76:10:5f:98:95:
         c7:16:cb:eb:6d:e1:91:e1:9f:db:97:c8:5d:09:aa:d6:21:e6:
         cf:62:57:4c:aa:e3:3e:98:59:8a:3d:98:f5:48:71:52:12:ef:
         15:64:e6:cb:c3:c8:33:50:18:a0:50:fb:7f:ae:0a:7e:e7:b1:
         fa:91:b5:ae:b4:69:4b:a5:18:79:a5:9e:ad:02:25:45:11:32:
         fc:48:85:94:27:da:dc:a9:ed:3c:97:83:aa:a8:4b:58:13:46:
         8d:d8:1a:a2:37:00:a4:c7:91:7a:4e:51:dd:be:59:8b:c3:33:
         31:d4:73:ed:bf:77:c5:42:06:1b:6e:67:3f:5e:c2:1f:01:e8:
         72:50:fb:00:69:6f:a8:87:3f:21:2e:43:60:ac:0e:36:83:fc:
         21:33:a4:de:db:6a:e5:b2:16:aa:42:17:cf:fe:3e:e6:9d:4e:
         2b:23:06:4b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIR+MIcDdJFBZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk
N2JlMDcxNDctMWRlZC00ZDA2LTliZTgtZTJhODZhYmM4MTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUo6mQFoaOZMvirp+Wv8Ps8TLHPB/XsA2SBZ
dFGhVjyZzs5xKRnwtG7ozwjOAzNGDmuxuuAB+s4YrX9Oz0Q2h03iTl++CM06/85i
mimtN6RRYzhXDMQzS5vovl70pJtY3eINhFOS1EjqJ9f24oCM1fkAPJpDQo/fS+t0
ks3CMhwWYYZ9Lr1NN+4mAuJlT83g3XFw3ORikbv/bdPodSUNKbHkok96kRjQXnZp
EpV1EqKuhUDnQh4KpQLE9lF/arzkNZZEwNVJg5QY38lpyN5N+IY7mtdzKoMSK1gX
bs6K8iASKI01WiykyVeWVrcg/BORswa9jBich2Hm9EWsCoMi2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMc800l4G5d+/ipfMIuO0f4NneU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJmNWFhNTktOWVjMy0z
OTUyLTkzMWUtNTE0ZWQ0NmNhMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQANT30I54k8CBVQ+xLyTK3SK/KW74wbyYU2JbVFR920kYvQbd2wogaO
Zl7CNAjQB6xAUPzWt5aaGDAsbfm+84OOYBiSdSQMak2haAPL5t7ysZTzKvJDdhBf
mJXHFsvrbeGR4Z/bl8hdCarWIebPYldMquM+mFmKPZj1SHFSEu8VZObLw8gzUBig
UPt/rgp+57H6kbWutGlLpRh5pZ6tAiVFETL8SIWUJ9rcqe08l4OqqEtYE0aN2Bqi
NwCkx5F6TlHdvlmLwzMx1HPtv3fFQgYbbmc/XsIfAehyUPsAaW+ohz8hLkNgrA42
g/whM6Te22rlshaqQhfP/j7mnU4rIwZL
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:21 2025 by rpki-client