Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e1991ec-11ea-3e0e-9574-41708a2b2de9.roa
File:                     1e1991ec-11ea-3e0e-9574-41708a2b2de9.roa (raw, json)
Hash identifier:          mTaaMY2A7LUNi6uE0dYtLUtOHeQxVd19Dm6mO3ty33Y=
Subject key identifier:   54:F8:86:18:FF:AC:71:4B:99:86:0E:31:57:B5:E1:45:FE:E6:2D:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4AC047B39868571F666E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e1991ec-11ea-3e0e-9574-41708a2b2de9.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396559
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:ac:04:7b:39:86:85:71:f6:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=d758c8fb-6798-4aee-b383-c58da6b40978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:c2:44:54:60:af:70:4a:95:0c:48:49:a3:
                    ad:0a:65:16:75:38:5d:a9:d3:37:ee:29:0f:a2:69:
                    60:5a:ea:f3:ec:45:67:7a:5a:10:ee:a8:4d:0f:14:
                    de:f6:89:ae:ca:36:c2:ce:fb:9d:da:c7:3f:6f:ce:
                    22:fe:c0:30:0d:5d:9a:dd:87:14:35:35:e4:51:df:
                    ec:29:7e:62:19:4a:a9:6a:81:96:d3:9c:16:11:91:
                    1e:25:25:b1:99:85:9c:c5:49:b0:55:e1:11:76:96:
                    7b:7f:80:42:78:38:81:fb:49:5f:77:d8:73:40:09:
                    6b:f1:3b:5c:76:48:53:db:11:7e:2d:a2:f8:32:86:
                    af:db:5f:36:b2:67:b4:2d:ff:18:4e:89:64:0a:d1:
                    19:a1:f2:4f:d3:eb:04:d5:18:33:9f:55:24:83:d3:
                    b8:b9:5d:9a:05:dd:2b:3c:37:fb:46:7a:0e:69:1f:
                    b8:7c:49:a1:f0:af:e1:f6:4f:31:9f:50:67:c7:9b:
                    44:85:00:b0:3f:54:ed:15:76:8e:3a:23:ac:df:83:
                    f9:9b:20:33:73:1b:63:79:21:bb:11:18:b3:ea:a6:
                    ed:fe:53:70:6e:86:69:6d:65:dc:c0:10:a7:e4:30:
                    86:54:06:3c:ed:92:fc:32:a5:c6:11:ce:59:d6:cc:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:86:18:FF:AC:71:4B:99:86:0E:31:57:B5:E1:45:FE:E6:2D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e1991ec-11ea-3e0e-9574-41708a2b2de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3a:7e:71:9e:77:62:9a:16:55:90:90:f0:48:76:bb:1e:c6:
         87:9f:d8:5c:44:ec:cb:7f:01:54:62:bb:fb:39:51:0a:91:e6:
         2e:24:da:bb:4a:a3:c3:1f:9c:bf:61:8d:97:9d:6d:2f:32:a7:
         bc:85:af:6c:df:0e:96:bb:46:30:fd:49:b8:c2:37:a6:9e:fa:
         03:03:2b:0a:3f:54:d0:ae:33:d0:85:6a:94:d1:19:fa:a8:e5:
         dd:94:0f:35:04:f0:b8:17:7b:7e:65:95:80:65:30:42:5a:b3:
         51:43:0f:10:fe:e5:16:be:77:03:0d:04:5c:cd:15:9f:f3:06:
         9d:62:a0:19:99:ea:a7:34:da:cc:01:8a:1d:84:fb:fe:8f:d5:
         bb:68:45:70:6b:3d:ce:a4:3c:f7:45:b2:75:30:16:ea:d7:a0:
         e4:6e:87:a1:1a:a9:13:90:fb:1a:31:90:4f:e4:57:83:a0:ec:
         4f:31:73:3d:07:fb:f2:c2:11:3b:f7:13:5c:ae:7e:c0:86:67:
         7e:c4:f8:33:d6:c0:cc:49:4c:38:1e:56:98:e5:75:c3:90:c4:
         29:92:9f:4a:77:06:65:cc:cd:6e:bf:61:25:4c:14:b6:46:37:
         ac:bc:86:c4:da:75:67:e6:f8:2b:27:d5:03:be:25:ce:ad:e1:
         9c:63:be:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKwEezmGhXH2ZuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZDc1OGM4ZmItNjc5OC00YWVlLWIzODMtYzU4ZGE2YjQwOTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8vCRFRgr3BKlQxISaOtCmUWdThdqdM37ikP
omlgWurz7EVneloQ7qhNDxTe9omuyjbCzvud2sc/b84i/sAwDV2a3YcUNTXkUd/s
KX5iGUqpaoGW05wWEZEeJSWxmYWcxUmwVeERdpZ7f4BCeDiB+0lfd9hzQAlr8Ttc
dkhT2xF+LaL4Moav2182sme0Lf8YTolkCtEZofJP0+sE1Rgzn1Ukg9O4uV2aBd0r
PDf7RnoOaR+4fEmh8K/h9k8xn1Bnx5tEhQCwP1TtFXaOOiOs34P5myAzcxtjeSG7
ERiz6qbt/lNwboZpbWXcwBCn5DCGVAY87ZL8MqXGEc5Z1szZsQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFT4hhj/rHFLmYYOMVe14UX+5i3LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUxOTkxZWMtMTFlYS0z
ZTBlLTk1NzQtNDE3MDhhMmIyZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAoOn5xnndimhZVkJDwSHa7HsaHn9hcROzLfwFUYrv7OVEKkeYuJNq7
SqPDH5y/YY2XnW0vMqe8ha9s3w6Wu0Yw/Um4wjemnvoDAysKP1TQrjPQhWqU0Rn6
qOXdlA81BPC4F3t+ZZWAZTBCWrNRQw8Q/uUWvncDDQRczRWf8wadYqAZmeqnNNrM
AYodhPv+j9W7aEVwaz3OpDz3RbJ1MBbq16DkboehGqkTkPsaMZBP5FeDoOxPMXM9
B/vywhE79xNcrn7Ahmd+xPgz1sDMSUw4HlaY5XXDkMQpkp9KdwZlzM1uv2ElTBS2
RjesvIbE2nVn5vgrJ9UDviXOreGcY758
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:52 2025 by rpki-client