Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f55d5d23-8209-3078-9c37-39660835c655.roa
File:                     f55d5d23-8209-3078-9c37-39660835c655.roa (raw, json)
Hash identifier:          1Sk8QzDNsrQPIDWz3lrmn4A0r1dQHy8b13fySSzcCmk=
Subject key identifier:   98:DA:61:B2:E5:AF:5C:72:75:07:FA:3C:93:79:B7:30:3E:A9:59:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FB5C49C7635D7E4D4520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f55d5d23-8209-3078-9c37-39660835c655.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396617
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fb:5c:49:c7:63:5d:7e:4d:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=67421cdc-f4f2-4ab2-ae08-20beed19974c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e9:20:b7:e9:a1:94:bf:89:a5:2d:d9:4c:ce:
                    0d:4c:81:4f:3c:45:47:1d:fb:7e:65:80:a7:de:97:
                    65:95:4a:85:63:d9:60:19:82:89:1e:22:da:eb:3c:
                    2d:bc:19:57:79:6f:1c:27:a1:94:82:ff:55:c4:68:
                    cd:2d:87:fa:9d:72:63:87:c3:29:0b:9d:96:aa:4c:
                    6c:86:53:cc:9e:14:d3:5e:7f:2c:4e:5f:f4:72:47:
                    ca:1f:17:e2:0a:30:3a:56:39:3a:2e:db:e7:3b:4a:
                    08:c8:98:04:f1:7c:45:6e:f2:ff:c7:83:a8:41:1b:
                    a3:e3:47:79:3d:d7:bf:26:37:df:9b:55:1b:b6:78:
                    48:44:7b:ae:5f:05:d6:6d:4b:d3:c5:0a:e0:63:56:
                    9c:68:58:37:05:32:c0:98:35:a2:af:bd:3d:05:5b:
                    c0:32:60:a4:1a:54:54:40:b4:e2:36:25:02:da:75:
                    fa:62:d1:0c:24:3a:33:f0:09:e5:c5:8a:27:b0:af:
                    c7:92:22:d2:49:c0:db:65:91:e6:e8:aa:b2:15:21:
                    ba:b4:eb:5e:52:60:1d:5c:42:6d:19:a8:30:8c:9c:
                    a6:47:33:a9:3a:a2:f6:92:f0:1c:9a:e5:c5:c3:23:
                    c5:b8:5c:22:fa:a7:ac:7d:af:93:ee:c3:b5:fc:e7:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:61:B2:E5:AF:5C:72:75:07:FA:3C:93:79:B7:30:3E:A9:59:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f55d5d23-8209-3078-9c37-39660835c655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9d:d3:d0:a2:4a:fc:86:77:98:3e:b9:a0:49:62:d9:f4:d3:
         42:49:b8:bd:24:dc:4d:85:e5:7f:d6:8c:21:a3:7b:41:d8:81:
         9b:b4:88:d4:2c:fe:f6:8d:c9:8f:5a:95:b2:af:f8:57:ae:53:
         3c:de:36:fe:ac:b2:45:c5:c1:cc:bb:38:be:9d:9f:af:e3:76:
         bf:06:4a:8c:17:ed:b0:24:d2:cd:c6:68:c0:31:7d:b4:18:3b:
         86:86:8b:d1:fe:00:23:8a:8b:da:12:5d:d4:c0:5f:f2:29:82:
         17:1e:b3:ba:00:80:25:e8:5a:1c:a8:5e:1a:c4:74:36:11:8c:
         d5:42:d6:fe:dc:e9:60:dc:f1:2b:1d:6f:b0:65:ac:ad:f1:b8:
         75:c3:d4:50:8c:32:f6:9a:52:b5:43:9c:2a:04:56:31:59:e5:
         15:23:99:5e:5c:97:26:66:1b:67:bd:e5:60:b8:1e:04:6d:31:
         fe:ce:a5:d7:ea:6c:e0:aa:83:d7:e8:1e:b5:5c:0b:7f:27:94:
         f7:1a:c6:83:a4:d3:5a:9a:7a:4a:76:28:e6:8c:76:a7:a4:5d:
         f1:a0:a2:2d:f2:18:37:a5:18:08:9e:02:63:14:55:78:2d:6f:
         68:6c:1e:1a:1d:38:e8:3d:70:c5:7a:d1:2d:1b:76:28:21:b1:
         27:f6:d8:28
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhlvtcScdjXX5NRSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
Njc0MjFjZGMtZjRmMi00YWIyLWFlMDgtMjBiZWVkMTk5NzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhekgt+mhlL+JpS3ZTM4NTIFPPEVHHft+ZYCn
3pdllUqFY9lgGYKJHiLa6zwtvBlXeW8cJ6GUgv9VxGjNLYf6nXJjh8MpC52Wqkxs
hlPMnhTTXn8sTl/0ckfKHxfiCjA6Vjk6LtvnO0oIyJgE8XxFbvL/x4OoQRuj40d5
Pde/Jjffm1UbtnhIRHuuXwXWbUvTxQrgY1acaFg3BTLAmDWir709BVvAMmCkGlRU
QLTiNiUC2nX6YtEMJDoz8AnlxYonsK/HkiLSScDbZZHm6KqyFSG6tOteUmAdXEJt
GagwjJymRzOpOqL2kvAcmuXFwyPFuFwi+qesfa+T7sO1/OfpSQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJjaYbLlr1xydQf6PJN5tzA+qVnPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU1ZDVkMjMtODIwOS0z
MDc4LTljMzctMzk2NjA4MzVjNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqyHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFndPQokr8hneYPrmgSWLZ9NNCSbi9JNxNheV/1owho3tB2IGbtIjU
LP72jcmPWpWyr/hXrlM83jb+rLJFxcHMuzi+nZ+v43a/BkqMF+2wJNLNxmjAMX20
GDuGhovR/gAjiovaEl3UwF/yKYIXHrO6AIAl6FocqF4axHQ2EYzVQtb+3Olg3PEr
HW+wZayt8bh1w9RQjDL2mlK1Q5wqBFYxWeUVI5leXJcmZhtnveVguB4EbTH+zqXX
6mzgqoPX6B61XAt/J5T3GsaDpNNamnpKdijmjHanpF3xoKIt8hg3pRgIngJjFFV4
LW9obB4aHTjoPXDFetEtG3YoIbEn9tgo
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:19:34 2025 by rpki-client