Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd16e1a-5bc8-34a7-ba7a-1564a61537cd.roa
File:                     0bd16e1a-5bc8-34a7-ba7a-1564a61537cd.roa (raw, json)
Hash identifier:          A9vh1dkHjI5EWqzkx/0KIfd9ByiPg64hekKSSZHoTJA=
Subject key identifier:   13:49:38:7E:C4:C7:B3:39:B6:07:D0:E3:32:7F:48:2A:84:90:D8:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACB40AEC9156C645B6180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd16e1a-5bc8-34a7-ba7a-1564a61537cd.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36625
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cb:40:ae:c9:15:6c:64:5b:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=33e49252-278b-4850-8925-906e6584a921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:3b:fe:42:b4:3b:18:c6:dc:ea:5a:0c:9b:
                    9d:35:58:ee:50:9a:55:e0:d8:23:a3:fa:df:c3:33:
                    f4:7d:a2:6a:09:9f:cf:15:5b:9e:a5:df:de:4d:e3:
                    a7:29:06:aa:2b:0f:30:25:33:22:9b:61:ed:ea:a0:
                    8e:e3:b4:80:e1:d0:ef:03:b7:ce:4e:b5:88:a0:70:
                    70:34:04:4f:0c:b7:84:db:eb:1a:62:66:f3:58:68:
                    f9:d8:e5:40:32:51:a8:77:92:97:af:da:71:20:a1:
                    d9:4e:9f:9f:82:8f:b3:9b:aa:03:a6:f5:66:10:fc:
                    ad:97:89:0f:98:5e:40:2d:88:b2:5d:89:aa:98:f4:
                    0a:ff:82:b1:39:7a:46:b5:33:6b:dd:fd:f3:54:96:
                    5f:74:d5:6e:ce:85:16:df:0f:5b:a5:bc:6b:39:99:
                    32:7a:fe:81:06:a6:6f:b3:af:f0:8a:7f:2e:77:be:
                    a8:0f:c8:ef:40:02:46:01:4e:75:61:b2:e4:69:ec:
                    1b:d8:a3:11:95:2b:c2:4a:bf:2f:9d:74:1f:e5:e7:
                    fe:46:e7:b2:e3:1a:cf:96:f0:5f:5c:91:49:8f:20:
                    60:17:a2:78:85:ae:40:c8:89:79:81:91:1e:aa:eb:
                    d7:af:8b:6c:d0:d6:69:0d:be:4b:3d:2d:4f:bb:7c:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:38:7E:C4:C7:B3:39:B6:07:D0:E3:32:7F:48:2A:84:90:D8:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bd16e1a-5bc8-34a7-ba7a-1564a61537cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0d:ac:01:71:02:87:97:b1:b3:c5:89:80:16:54:6b:1f:bf:
         78:75:96:a5:e3:87:7f:b1:ad:a7:f2:27:58:eb:d7:9a:20:63:
         32:d6:ea:a9:67:26:67:df:9f:9c:35:6e:ad:d5:11:88:82:13:
         7c:cc:ed:60:e1:de:ee:a7:b8:26:4a:97:0b:66:8e:60:d3:22:
         31:33:5c:31:06:89:2b:34:97:e0:1e:5e:61:6d:e7:76:0d:38:
         80:b1:eb:81:cb:44:c0:94:bb:99:53:46:48:59:d9:3c:84:5e:
         a6:d9:2d:b8:75:1e:4f:e0:5d:50:6f:9c:77:20:d5:27:e0:7f:
         19:37:52:ed:e1:cc:fa:d6:6f:12:9a:53:53:c6:de:03:71:5f:
         6c:f7:4d:f4:28:b5:33:75:1f:8d:39:7b:a3:4b:b8:b6:78:29:
         ba:01:3b:31:61:32:60:eb:f7:32:e9:69:60:d8:b9:41:3b:29:
         aa:6f:16:e8:3f:37:c6:70:e6:20:2f:a9:3d:b3:ca:d2:3d:39:
         1b:b0:69:09:8c:86:55:22:1c:f7:73:0f:4a:75:df:e5:c8:c2:
         4b:d9:59:50:7e:3c:7e:60:1a:ec:dc:9c:9e:90:ee:fe:9c:76:
         1a:3a:ea:cc:c5:6b:d7:0d:66:f2:53:ea:d2:ac:3a:04:34:b4:
         cf:4e:ec:1f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomistArskVbGRbYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
MzNlNDkyNTItMjc4Yi00ODUwLTg5MjUtOTA2ZTY1ODRhOTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKo7/kK0OxjG3OpaDJudNVjuUJpV4Ngjo/rf
wzP0faJqCZ/PFVuepd/eTeOnKQaqKw8wJTMim2Ht6qCO47SA4dDvA7fOTrWIoHBw
NARPDLeE2+saYmbzWGj52OVAMlGod5KXr9pxIKHZTp+fgo+zm6oDpvVmEPytl4kP
mF5ALYiyXYmqmPQK/4KxOXpGtTNr3f3zVJZfdNVuzoUW3w9bpbxrOZkyev6BBqZv
s6/win8ud76oD8jvQAJGAU51YbLkaewb2KMRlSvCSr8vnXQf5ef+Ruey4xrPlvBf
XJFJjyBgF6J4ha5AyIl5gZEequvXr4ts0NZpDb5LPS1Pu3z7DQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBNJOH7Ex7M5tgfQ4zJ/SCqEkNgoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJkMTZlMWEtNWJjOC0z
NGE3LWJhN2EtMTU2NGE2MTUzN2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnDawBcQKHl7GzxYmAFlRrH794dZal44d/sa2n8idY69eaIGMy1uqp
ZyZn35+cNW6t1RGIghN8zO1g4d7up7gmSpcLZo5g0yIxM1wxBokrNJfgHl5hbed2
DTiAseuBy0TAlLuZU0ZIWdk8hF6m2S24dR5P4F1Qb5x3INUn4H8ZN1Lt4cz61m8S
mlNTxt4DcV9s9030KLUzdR+NOXujS7i2eCm6ATsxYTJg6/cy6Wlg2LlBOymqbxbo
PzfGcOYgL6k9s8rSPTkbsGkJjIZVIhz3cw9Kdd/lyMJL2VlQfjx+YBrs3JyekO7+
nHYaOurMxWvXDWbyU+rSrDoENLTPTuwf
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:34:24 2025 by rpki-client