Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/472a8447-1564-3d60-b372-db44aa441d44.roa
File:                     472a8447-1564-3d60-b372-db44aa441d44.roa (raw, json)
Hash identifier:          wmmdK6SUE3GJMNK6SiuGWhiOyHkOHPwhhBOwNJMEmcY=
Subject key identifier:   EA:AB:18:B5:FF:99:EA:CF:8E:E9:F7:A5:26:98:DD:63:6B:05:09:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB023382B14AFBAA005580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/472a8447-1564-3d60-b372-db44aa441d44.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396595
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:02:33:82:b1:4a:fb:aa:00:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ee434f3e-00c9-45dc-aba9-62ad8d518ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:26:69:d6:f6:63:b3:ec:bf:6e:e5:73:e8:
                    dd:4b:b1:63:b6:38:50:de:52:2d:4f:6f:34:c2:cb:
                    7f:be:d4:3f:c5:a1:59:21:a7:08:0d:5b:a3:3a:70:
                    02:e1:a0:f9:ff:96:d1:b1:e1:50:92:a3:cc:5d:45:
                    c1:ea:93:1d:47:2b:4a:27:49:15:50:1b:32:f8:e5:
                    63:1d:6f:49:8e:ee:cc:29:be:5d:9e:28:cd:87:a1:
                    09:a8:df:9d:03:1b:b9:f3:fb:e1:83:f3:88:de:2b:
                    9d:0b:d9:e6:5f:59:d3:03:9f:14:bf:48:53:c6:a0:
                    1b:00:dd:c0:6f:81:ea:1d:11:22:96:fc:ae:4d:c5:
                    9b:7f:e8:83:13:99:23:6c:da:b1:90:e5:ff:3d:22:
                    64:e3:4f:d5:52:0e:bb:71:1c:65:6f:88:7f:6c:c5:
                    76:d6:b8:31:32:96:4a:a3:e7:79:3a:d0:0b:2d:d7:
                    05:e5:58:25:0d:86:f1:c3:7e:71:dc:cd:08:7c:51:
                    7f:53:16:1c:15:55:49:76:1f:73:04:88:d7:a3:07:
                    99:40:ae:6b:2c:6e:86:f1:0d:95:55:a6:24:15:2b:
                    ca:16:81:57:39:9d:13:9e:98:a4:37:58:12:90:57:
                    d7:6a:a7:8f:0e:d7:77:84:14:26:58:ea:bb:15:13:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AB:18:B5:FF:99:EA:CF:8E:E9:F7:A5:26:98:DD:63:6B:05:09:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/472a8447-1564-3d60-b372-db44aa441d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:34:db:86:52:cd:12:b4:a0:a8:e4:0a:e2:ef:82:b2:37:ab:
         1d:9e:36:6d:e1:66:00:ed:1d:83:5d:a4:e1:bb:af:c3:77:57:
         9e:e4:21:ac:b3:67:7f:4c:55:0b:67:9b:b6:42:dc:82:49:e8:
         bb:1e:7e:44:f5:af:87:f0:e2:e6:a8:e6:22:4e:e4:db:d4:61:
         b7:73:23:5b:c5:01:a0:a1:27:fd:4d:25:07:9a:64:6d:77:f7:
         6c:63:6d:1e:9c:55:22:7d:66:c0:1b:89:38:1a:94:4c:d3:6d:
         9a:81:cf:f8:14:6d:37:31:c6:ff:2c:28:f5:58:a3:83:4b:b0:
         ee:0b:a6:ff:9c:cb:39:23:24:2a:ef:4d:63:bb:ad:6b:14:5c:
         cb:09:5b:26:82:92:a2:d9:fb:48:84:59:b8:54:82:66:68:66:
         e4:08:c2:14:ff:81:33:a4:b5:b6:1a:d5:7e:3d:9d:85:a3:ff:
         eb:1b:ca:ac:11:2a:48:98:ee:8e:f1:72:f6:3c:25:10:4c:8c:
         58:cd:d7:34:28:5b:77:d3:57:8e:51:55:78:ea:97:57:dc:44:
         5f:c1:5c:e4:d1:c3:d3:b6:6b:d3:c0:9b:fc:5f:dc:c4:d3:6d:
         b3:d7:d5:ee:28:39:ad:25:63:6e:38:4f:57:c6:10:e0:52:56:
         11:1e:7e:d2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2wIzgrFK+6oAVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZWU0MzRmM2UtMDBjOS00NWRjLWFiYTktNjJhZDhkNTE4ZWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdMmadb2Y7Psv27lc+jdS7FjtjhQ3lItT280
wst/vtQ/xaFZIacIDVujOnAC4aD5/5bRseFQkqPMXUXB6pMdRytKJ0kVUBsy+OVj
HW9Jju7MKb5dnijNh6EJqN+dAxu58/vhg/OI3iudC9nmX1nTA58Uv0hTxqAbAN3A
b4HqHREilvyuTcWbf+iDE5kjbNqxkOX/PSJk40/VUg67cRxlb4h/bMV21rgxMpZK
o+d5OtALLdcF5VglDYbxw35x3M0IfFF/UxYcFVVJdh9zBIjXoweZQK5rLG6G8Q2V
VaYkFSvKFoFXOZ0TnpikN1gSkFfXaqePDtd3hBQmWOq7FRN+jQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOqrGLX/merPjun3pSaY3WNrBQmnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDcyYTg0NDctMTU2NC0z
ZDYwLWIzNzItZGI0NGFhNDQxZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYNNuGUs0StKCo5Ari74KyN6sdnjZt4WYA7R2DXaThu6/Dd1ee5CGs
s2d/TFULZ5u2QtyCSei7Hn5E9a+H8OLmqOYiTuTb1GG3cyNbxQGgoSf9TSUHmmRt
d/dsY20enFUifWbAG4k4GpRM022agc/4FG03Mcb/LCj1WKODS7DuC6b/nMs5IyQq
701ju61rFFzLCVsmgpKi2ftIhFm4VIJmaGbkCMIU/4EzpLW2GtV+PZ2Fo//rG8qs
ESpImO6O8XL2PCUQTIxYzdc0KFt301eOUVV46pdX3ERfwVzk0cPTtmvTwJv8X9zE
022z19XuKDmtJWNuOE9XxhDgUlYRHn7S
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:46 2025 by rpki-client