Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f86006-901e-39f9-8a8c-24ebafc0587b.roa
File:                     38f86006-901e-39f9-8a8c-24ebafc0587b.roa (raw, json)
Hash identifier:          D2oxjBMy6j6YJy4ULWdQ8dN8fHCxyjjiaEZWrpdre3M=
Subject key identifier:   6E:31:1C:ED:AE:3E:C3:91:90:5C:DB:F5:8D:99:F6:1B:3B:C0:11:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A8F3002F79A4898F3380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f86006-901e-39f9-8a8c-24ebafc0587b.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396609
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a8:f3:00:2f:79:a4:89:8f:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=e968871e-3e06-4b36-8bb3-dad25fdd5ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:68:b2:63:7c:9f:ed:49:e6:bd:11:e1:17:
                    fa:33:87:4e:df:e8:f1:d1:82:e9:c9:d4:4c:b9:de:
                    63:4f:1b:3a:0a:10:8b:3b:4e:ad:3f:83:0b:e2:fe:
                    d2:db:26:f9:b4:b6:85:a3:4e:92:49:de:d8:0a:27:
                    0b:48:02:e8:a6:b4:9e:fa:25:59:09:37:e7:21:f4:
                    ca:f8:7f:fb:f4:c2:e1:f5:b3:cb:aa:46:1f:f4:a3:
                    7b:99:eb:72:6e:bc:90:fd:81:c1:70:85:f2:7e:f6:
                    5d:f1:77:21:4f:9c:35:fd:a2:96:07:25:d4:a5:3c:
                    b0:2c:7b:37:d4:d3:d5:d9:40:28:56:34:84:5a:ec:
                    31:29:1c:05:a4:73:9e:0d:2d:95:ad:57:83:80:26:
                    03:da:13:b0:ab:01:13:43:0a:e8:32:6b:45:ca:ee:
                    8c:f3:8e:84:65:75:d4:09:9e:56:ba:fb:09:cf:db:
                    b6:1a:16:8e:9b:6a:0c:71:48:14:ed:17:6b:0d:b0:
                    19:c4:13:96:d8:d2:71:08:a4:c0:97:92:30:31:65:
                    13:8a:91:d7:d9:93:e3:98:e2:0c:f9:17:f7:c7:71:
                    b9:93:78:60:26:b3:a0:7e:55:ff:74:ae:7a:ba:83:
                    e5:96:a8:4f:13:d4:02:b2:cc:a5:52:4f:b6:7b:50:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:1C:ED:AE:3E:C3:91:90:5C:DB:F5:8D:99:F6:1B:3B:C0:11:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38f86006-901e-39f9-8a8c-24ebafc0587b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8b:c4:3c:e4:de:10:3d:72:7b:02:16:bc:d0:b6:1c:ee:a9:
         a7:d3:4b:14:8d:79:16:18:a1:55:04:89:10:fa:70:4d:1b:52:
         59:8b:6b:0a:e0:23:22:8b:38:4c:5a:a8:36:43:21:58:3f:8c:
         77:0f:38:27:4f:7a:9e:35:fd:2a:48:bd:eb:99:72:0f:06:14:
         be:52:8f:26:40:84:09:a8:4c:9b:60:65:87:f5:ce:f4:71:0c:
         e0:44:79:c5:f9:fa:24:6d:56:f7:e1:70:84:96:61:a6:8a:5d:
         5f:07:31:79:ac:3b:28:4f:e7:f3:fd:1e:45:09:3c:04:ff:d3:
         f5:b1:94:8c:ed:30:88:4d:c2:8a:a8:36:9a:18:5c:cf:0a:27:
         d8:8d:64:56:fe:de:5d:fc:43:98:52:7f:e2:74:2c:fc:8e:1e:
         28:45:88:13:6f:c5:58:bf:5d:54:41:45:da:d7:a0:66:08:f5:
         42:8a:8b:8b:f4:6b:b5:f1:e5:ad:24:74:12:93:5d:cc:8a:b0:
         f8:91:98:5b:ef:ca:80:43:4e:be:91:18:ed:01:b2:42:68:45:
         8e:62:82:b2:3a:07:75:3f:84:14:ab:06:7a:4a:cb:57:5d:da:
         e5:e6:a2:e4:d1:41:ac:88:a2:59:f9:dc:bc:ff:15:f4:44:0c:
         0a:34:be:7a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKjzAC95pImPM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTk2ODg3MWUtM2UwNi00YjM2LThiYjMtZGFkMjVmZGQ1ZWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPlosmN8n+1J5r0R4Rf6M4dO3+jx0YLpydRM
ud5jTxs6ChCLO06tP4ML4v7S2yb5tLaFo06SSd7YCicLSALoprSe+iVZCTfnIfTK
+H/79MLh9bPLqkYf9KN7metybryQ/YHBcIXyfvZd8XchT5w1/aKWByXUpTywLHs3
1NPV2UAoVjSEWuwxKRwFpHOeDS2VrVeDgCYD2hOwqwETQwroMmtFyu6M846EZXXU
CZ5WuvsJz9u2GhaOm2oMcUgU7RdrDbAZxBOW2NJxCKTAl5IwMWUTipHX2ZPjmOIM
+Rf3x3G5k3hgJrOgflX/dK56uoPllqhPE9QCssylUk+2e1DZ7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG4xHO2uPsORkFzb9Y2Z9hs7wBGeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzhmODYwMDYtOTAxZS0z
OWY5LThhOGMtMjRlYmFmYzA1ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYi8Q85N4QPXJ7Aha80LYc7qmn00sUjXkWGKFVBIkQ+nBNG1JZi2sK
4CMiizhMWqg2QyFYP4x3DzgnT3qeNf0qSL3rmXIPBhS+Uo8mQIQJqEybYGWH9c70
cQzgRHnF+fokbVb34XCElmGmil1fBzF5rDsoT+fz/R5FCTwE/9P1sZSM7TCITcKK
qDaaGFzPCifYjWRW/t5d/EOYUn/idCz8jh4oRYgTb8VYv11UQUXa16BmCPVCiouL
9Gu18eWtJHQSk13MirD4kZhb78qAQ06+kRjtAbJCaEWOYoKyOgd1P4QUqwZ6SstX
Xdrl5qLk0UGsiKJZ+dy8/xX0RAwKNL56
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:19 2025 by rpki-client