Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/450d14e9-5893-33a2-a9d6-5b2c4401d844.roa
File:                     450d14e9-5893-33a2-a9d6-5b2c4401d844.roa (raw, json)
Hash identifier:          /k+OWRp2kl7m2zkrFIu9+UOGLWEL2CeqU74vMep02vA=
Subject key identifier:   11:05:8D:51:F1:CA:F0:63:96:30:F4:EC:53:88:3B:D5:4E:82:57:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A8C2BED06C2A097BF880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/450d14e9-5893-33a2-a9d6-5b2c4401d844.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396558
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a8:c2:be:d0:6c:2a:09:7b:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=930c71c9-9ff4-4753-adbb-2b810f958ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ca:0f:fa:bc:4f:1c:46:37:5b:7d:3a:f8:89:
                    77:a6:69:79:09:55:15:e7:4d:5e:cc:cf:2f:c9:54:
                    7d:a3:fa:ed:d7:f9:bb:47:11:33:22:5b:4f:1d:1a:
                    70:78:51:79:08:cb:bd:72:13:e1:3b:6a:3a:22:50:
                    2a:62:e2:ab:db:52:4c:5b:fd:59:50:12:71:f4:75:
                    fd:d6:aa:e4:18:35:fe:b8:9c:2a:ff:03:93:40:55:
                    e9:8a:da:f1:ee:10:6e:da:b3:cc:68:29:ac:e4:07:
                    aa:87:49:c5:3f:5d:e9:65:08:0f:44:dc:cd:c0:df:
                    e9:f0:46:91:b4:fe:d8:7a:48:2d:d5:4f:70:2f:b0:
                    73:46:c9:86:96:af:ab:96:09:42:e5:60:8e:2b:67:
                    1b:c2:b3:fa:e8:29:28:9d:b0:c8:41:47:67:eb:a9:
                    b8:66:3d:8a:18:96:29:dc:31:9d:be:c1:a5:2d:71:
                    38:ce:1f:2e:8b:13:a9:26:e2:7b:05:e9:c4:8d:1d:
                    28:a2:48:9d:e4:f9:13:f1:cf:1e:9f:ec:4d:2c:c9:
                    08:61:e4:d6:ad:c9:77:dd:d4:0c:1e:cc:ee:06:4f:
                    15:01:4a:e3:48:05:34:fb:32:5a:f2:4e:ad:4b:e2:
                    c7:dc:9a:6f:d1:ca:ee:1e:9d:be:f9:f4:aa:c3:11:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:8D:51:F1:CA:F0:63:96:30:F4:EC:53:88:3B:D5:4E:82:57:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/450d14e9-5893-33a2-a9d6-5b2c4401d844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:89:90:dc:68:8c:ab:53:b5:cc:a9:8e:5a:47:1e:4c:a2:6c:
         b6:d3:e4:51:88:91:a6:3b:78:44:f9:ae:a1:31:3b:28:cb:b5:
         b5:d5:57:b5:d8:c7:f6:3e:60:ff:3f:be:0b:27:7d:1e:f9:c6:
         96:29:8b:ec:f1:e2:4f:a8:36:80:64:95:da:41:b3:bb:ad:51:
         7e:73:ae:4d:d6:6d:90:cc:2b:62:d0:43:77:68:da:5f:4c:a4:
         24:a4:0a:51:ca:6b:70:aa:64:87:58:41:d3:5e:ba:23:9b:82:
         56:c3:fc:ab:8c:23:fb:36:87:50:14:58:51:6e:7a:54:71:15:
         95:3f:57:6b:63:cd:f6:7d:88:ab:bc:ac:84:ea:0f:70:97:70:
         48:03:32:fa:5a:b8:a5:4c:de:d3:22:f3:fd:57:fd:b6:9d:ae:
         7b:7e:5f:bf:b5:84:e1:61:5e:50:16:b0:eb:2d:26:0d:ff:49:
         f6:8e:01:17:d7:1f:b5:74:8d:b4:d1:e2:2a:28:99:52:75:62:
         c9:1b:e0:45:54:1d:c3:3e:0f:0e:ca:f3:3f:66:62:a6:cf:6a:
         4a:39:f8:cf:5b:fd:d5:21:c2:e6:9f:43:bc:89:83:a9:03:19:
         18:15:73:71:2a:6a:cd:c7:ad:a0:e0:81:46:62:e1:1c:70:20:
         7d:20:12:6b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKjCvtBsKgl7+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
OTMwYzcxYzktOWZmNC00NzUzLWFkYmItMmI4MTBmOTU4ZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscoP+rxPHEY3W306+Il3pml5CVUV501ezM8v
yVR9o/rt1/m7RxEzIltPHRpweFF5CMu9chPhO2o6IlAqYuKr21JMW/1ZUBJx9HX9
1qrkGDX+uJwq/wOTQFXpitrx7hBu2rPMaCms5Aeqh0nFP13pZQgPRNzNwN/p8EaR
tP7Yekgt1U9wL7BzRsmGlq+rlglC5WCOK2cbwrP66CkonbDIQUdn66m4Zj2KGJYp
3DGdvsGlLXE4zh8uixOpJuJ7BenEjR0ookid5PkT8c8en+xNLMkIYeTWrcl33dQM
HszuBk8VAUrjSAU0+zJa8k6tS+LH3Jpv0cruHp2++fSqwxHjRwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBEFjVHxyvBjljD07FOIO9VOglfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUwZDE0ZTktNTg5My0z
M2EyLWE5ZDYtNWIyYzQ0MDFkODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCRiZDcaIyrU7XMqY5aRx5Momy20+RRiJGmO3hE+a6hMTsoy7W11Ve1
2Mf2PmD/P74LJ30e+caWKYvs8eJPqDaAZJXaQbO7rVF+c65N1m2QzCti0EN3aNpf
TKQkpApRymtwqmSHWEHTXrojm4JWw/yrjCP7NodQFFhRbnpUcRWVP1drY832fYir
vKyE6g9wl3BIAzL6WrilTN7TIvP9V/22na57fl+/tYThYV5QFrDrLSYN/0n2jgEX
1x+1dI200eIqKJlSdWLJG+BFVB3DPg8OyvM/ZmKmz2pKOfjPW/3VIcLmn0O8iYOp
AxkYFXNxKmrNx62g4IFGYuEccCB9IBJr
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:21 2025 by rpki-client