Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/320eafb0-f71d-3574-a483-6b1d749160e5.roa
File:                     320eafb0-f71d-3574-a483-6b1d749160e5.roa (raw, json)
Hash identifier:          Bfw3UaxHYyE15SU4G4UWZrQkJoA9/VDTX35dF6BOck4=
Subject key identifier:   7C:EB:D5:78:60:F2:EF:D3:1E:5D:BC:62:DF:0A:71:9B:85:3D:46:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FB9D1234742112F82300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/320eafb0-f71d-3574-a483-6b1d749160e5.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396559
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fb:9d:12:34:74:21:12:f8:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=61a541c8-ceb4-4cfb-8799-8d6737a93820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:e5:f6:94:a3:30:47:c1:b6:d5:80:91:c5:
                    45:11:e1:4e:d9:b3:f1:5b:75:85:0e:bd:60:2c:cd:
                    59:19:98:61:1c:b6:b8:a6:44:62:18:3b:03:0f:ef:
                    57:6b:87:ff:42:91:7c:8f:94:59:c6:a6:c6:f8:be:
                    be:4a:e3:1b:8f:8a:3f:c5:c8:8c:78:0e:ef:93:de:
                    b7:70:39:57:20:cd:d9:d7:1d:20:16:cc:f8:4f:02:
                    70:06:83:20:ba:45:d2:9e:6f:cd:1b:83:6b:b4:b7:
                    a7:b4:fd:78:41:1e:c2:c9:b7:63:d6:bd:08:8c:26:
                    3e:be:7a:38:36:fb:35:84:9d:9f:ae:f4:3e:90:a4:
                    d9:bd:d6:3a:07:9c:9e:68:f8:bb:83:67:ac:1e:c8:
                    7c:bc:86:b7:8d:8d:a5:df:47:2c:78:08:51:b4:f8:
                    bb:96:b2:9b:06:4d:ce:ff:72:68:0d:5f:6b:09:b9:
                    53:51:7d:4a:68:95:60:65:19:70:5a:16:d4:93:4c:
                    50:c7:5d:8a:99:0c:9d:81:70:4a:06:a6:a3:a6:25:
                    d8:05:64:ea:ac:94:3b:f3:d2:06:ba:88:8c:c0:cd:
                    7e:65:d2:a1:b6:7b:6e:9d:1a:37:2f:ab:d6:f0:82:
                    94:49:b5:31:bf:f2:aa:73:52:61:0b:da:26:40:21:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EB:D5:78:60:F2:EF:D3:1E:5D:BC:62:DF:0A:71:9B:85:3D:46:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/320eafb0-f71d-3574-a483-6b1d749160e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:02:75:27:c1:94:94:66:3f:37:9b:07:4d:18:24:c1:ae:29:
         0b:be:99:3f:19:67:78:f1:90:f6:4b:4f:57:40:01:38:bd:5f:
         fa:46:c3:10:13:fc:4e:4b:c4:c6:1c:9b:5e:2f:2f:9f:76:c5:
         90:2f:57:da:06:cd:97:60:57:12:81:c3:be:49:db:b7:72:4b:
         33:fe:37:f8:55:d2:bd:55:c8:72:12:4a:05:a6:b3:49:e7:a9:
         73:36:71:5d:ba:aa:ff:b0:6e:c3:f8:71:ee:da:8d:ca:99:50:
         2d:c9:7e:0c:7e:ac:6c:38:18:9e:df:81:37:45:a7:57:cc:3c:
         cc:62:7f:e2:cd:30:1e:72:40:85:08:3b:3d:27:32:a2:26:00:
         5c:79:ad:e9:fb:d9:e4:e7:47:c0:27:99:7a:f9:e1:ad:29:cf:
         56:50:f6:5b:14:e8:cd:d8:75:68:b2:0e:11:c3:d3:e7:da:58:
         06:22:1b:60:cb:2c:9a:c6:5f:e0:81:68:b7:65:28:f2:6c:a6:
         5a:11:f6:ac:25:50:7d:0d:ad:68:4b:71:82:82:c9:a2:4d:6d:
         c1:cf:4e:ef:24:f6:b4:9e:67:e0:6d:50:6b:0a:79:3c:6e:36:
         46:11:5e:e5:91:9c:a1:d7:af:27:b5:20:11:22:f3:3c:a4:80:
         15:d2:cd:bc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+fudEjR0IRL4IwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
NjFhNTQxYzgtY2ViNC00Y2ZiLTg3OTktOGQ2NzM3YTkzODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPTl9pSjMEfBttWAkcVFEeFO2bPxW3WFDr1g
LM1ZGZhhHLa4pkRiGDsDD+9Xa4f/QpF8j5RZxqbG+L6+SuMbj4o/xciMeA7vk963
cDlXIM3Z1x0gFsz4TwJwBoMgukXSnm/NG4NrtLentP14QR7Cybdj1r0IjCY+vno4
Nvs1hJ2frvQ+kKTZvdY6B5yeaPi7g2esHsh8vIa3jY2l30cseAhRtPi7lrKbBk3O
/3JoDV9rCblTUX1KaJVgZRlwWhbUk0xQx12KmQydgXBKBqajpiXYBWTqrJQ789IG
uoiMwM1+ZdKhtntunRo3L6vW8IKUSbUxv/Kqc1JhC9omQCG/MwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHzr1Xhg8u/THl28Yt8KcZuFPUa2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzIwZWFmYjAtZjcxZC0z
NTc0LWE0ODMtNmIxZDc0OTE2MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC4AnUnwZSUZj83mwdNGCTBrikLvpk/GWd48ZD2S09XQAE4vV/6RsMQ
E/xOS8TGHJteLy+fdsWQL1faBs2XYFcSgcO+Sdu3cksz/jf4VdK9VchyEkoFprNJ
56lzNnFduqr/sG7D+HHu2o3KmVAtyX4MfqxsOBie34E3RadXzDzMYn/izTAeckCF
CDs9JzKiJgBcea3p+9nk50fAJ5l6+eGtKc9WUPZbFOjN2HVosg4Rw9Pn2lgGIhtg
yyyaxl/ggWi3ZSjybKZaEfasJVB9Da1oS3GCgsmiTW3Bz07vJPa0nmfgbVBrCnk8
bjZGEV7lkZyh168ntSARIvM8pIAV0s28
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:25 2025 by rpki-client