Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b4292b1-52bd-393c-84c0-6fd93e8bc744.roa
File:                     5b4292b1-52bd-393c-84c0-6fd93e8bc744.roa (raw, json)
Hash identifier:          ZlPub9QqRdsHBTVM31SCjwaeSgfsaEIQdSyyBxg/74E=
Subject key identifier:   F0:E4:7B:1B:F5:C7:DF:38:FE:CD:A7:C4:F5:0C:CE:11:D0:6C:12:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A7AF5710554B33419D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b4292b1-52bd-393c-84c0-6fd93e8bc744.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396571
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a7:af:57:10:55:4b:33:41:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=2fa311ba-9874-45e1-8afb-85ac6c919673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:44:e8:5e:ec:81:eb:d6:69:85:7e:26:9f:
                    03:29:b5:47:ec:54:54:6a:3c:33:a2:b6:a7:5c:0b:
                    08:27:e4:11:3a:f8:a8:6f:e4:1a:a3:47:41:47:27:
                    06:be:8a:1c:b8:6b:41:dc:da:d0:fe:4d:b9:19:9c:
                    8f:29:5e:a5:68:d3:db:bd:d6:e2:85:02:3f:d0:8c:
                    53:2d:74:cf:b6:7a:73:f5:ae:b9:56:1c:05:f9:ec:
                    c3:c9:24:a0:71:e3:7a:56:4a:d5:1c:9d:58:99:ca:
                    85:66:82:04:03:1c:93:07:bd:b1:b2:f3:20:95:0b:
                    6e:86:d9:c3:89:b8:b8:f2:e1:db:6f:40:d6:4d:81:
                    f9:3a:28:3c:4d:94:a9:28:50:8a:7a:2e:33:29:a9:
                    a2:e2:08:80:c4:64:00:3c:aa:ec:6f:eb:8b:57:fe:
                    e6:a2:ea:91:84:2c:66:f9:a0:5f:f7:23:6e:4d:5e:
                    0f:d5:eb:4f:08:0b:fd:fd:4f:54:74:33:47:4c:67:
                    a6:ca:67:07:07:9d:87:b1:14:7c:e2:f0:30:40:9c:
                    f2:2b:51:bc:5c:5b:a5:23:b9:e6:23:86:0e:b4:1c:
                    60:57:43:2e:57:cd:48:e7:00:f2:62:85:35:be:18:
                    bf:92:d7:22:3d:ee:f6:51:77:8e:fc:ed:fd:40:29:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E4:7B:1B:F5:C7:DF:38:FE:CD:A7:C4:F5:0C:CE:11:D0:6C:12:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b4292b1-52bd-393c-84c0-6fd93e8bc744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:c2:25:34:82:bf:4d:59:e9:0b:68:31:4b:e8:0d:a6:61:41:
         8a:1d:1d:7b:d4:d0:c7:a6:fb:bd:ff:95:fa:9c:80:f4:c3:29:
         04:0f:3e:e9:a4:d8:56:f4:5b:fa:ea:4f:a4:0c:06:15:12:8c:
         53:99:81:e8:2d:ad:49:68:ff:4b:f5:b1:2d:f2:63:c4:df:b0:
         8c:e4:f0:12:5e:f7:ce:6d:b2:af:91:e6:1e:74:55:9c:12:98:
         ce:93:e5:11:27:4d:a4:88:7f:4c:d3:89:6e:ab:6a:5c:c6:0d:
         1b:54:a4:02:06:11:87:43:7a:1f:1d:c6:92:83:08:b6:5a:28:
         ed:f6:26:34:cd:af:43:b5:cf:26:36:35:c1:c5:2c:1b:f0:85:
         ba:e1:d0:49:0e:0d:d3:95:70:10:82:0f:81:97:ef:ef:38:0c:
         c7:3a:33:f2:30:5e:28:3a:46:89:e8:fd:e8:a0:8d:c4:51:65:
         2f:d3:9f:df:a6:ae:67:ae:26:73:80:e0:42:b2:ef:b1:fc:7d:
         24:5f:e8:64:e8:6f:42:d6:f8:79:9e:6f:7e:3c:94:37:e5:e9:
         75:68:1f:05:98:a4:eb:b7:22:7d:6f:25:b7:16:90:c6:68:78:
         e8:b3:7d:be:ec:1f:30:b6:ad:e1:e8:17:ba:da:46:9f:95:fb:
         83:13:ee:bf
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmWxKevVxBVSzNBnSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
MmZhMzExYmEtOTg3NC00NWUxLThhZmItODVhYzZjOTE5NjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq05E6F7sgevWaYV+Jp8DKbVH7FRUajwzoran
XAsIJ+QROviob+Qao0dBRycGvoocuGtB3NrQ/k25GZyPKV6laNPbvdbihQI/0IxT
LXTPtnpz9a65VhwF+ezDySSgceN6VkrVHJ1YmcqFZoIEAxyTB72xsvMglQtuhtnD
ibi48uHbb0DWTYH5Oig8TZSpKFCKei4zKami4giAxGQAPKrsb+uLV/7mouqRhCxm
+aBf9yNuTV4P1etPCAv9/U9UdDNHTGemymcHB52HsRR84vAwQJzyK1G8XFulI7nm
I4YOtBxgV0MuV81I5wDyYoU1vhi/ktciPe72UXeO/O39QCmzdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPDkexv1x984/s2nxPUMzhHQbBJSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWI0MjkyYjEtNTJiZC0z
OTNjLTg0YzAtNmZkOTNlOGJjNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDdTHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC+wiU0gr9NWekLaDFL6A2mYUGKHR171NDHpvu9/5X6nID0wykEDz7p
pNhW9Fv66k+kDAYVEoxTmYHoLa1JaP9L9bEt8mPE37CM5PASXvfObbKvkeYedFWc
EpjOk+URJ02kiH9M04luq2pcxg0bVKQCBhGHQ3ofHcaSgwi2Wijt9iY0za9Dtc8m
NjXBxSwb8IW64dBJDg3TlXAQgg+Bl+/vOAzHOjPyMF4oOkaJ6P3ooI3EUWUv05/f
pq5nriZzgOBCsu+x/H0kX+hk6G9C1vh5nm9+PJQ35el1aB8FmKTrtyJ9byW3FpDG
aHjos32+7B8wtq3h6Be62kaflfuDE+6/
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:01:29 2025 by rpki-client