Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664f2977-141e-3832-9dac-e2488af0b819.roa
File:                     664f2977-141e-3832-9dac-e2488af0b819.roa (raw, json)
Hash identifier:          HEVz6AS660X9nzkfzct/YlAYVFZ/5irAnYYjfi4Ophw=
Subject key identifier:   E5:D7:8B:97:7C:66:22:FA:8C:EE:AC:E8:18:1E:66:B7:AB:40:F7:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFAA8047FBC61083E1C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664f2977-141e-3832-9dac-e2488af0b819.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36623
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fa:a8:04:7f:bc:61:08:3e:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=385e5820-b113-4ec7-8278-ed6e71cb6a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:55:d5:94:68:27:e6:59:08:53:e5:83:d4:
                    56:a8:54:81:4b:c2:23:9f:7f:3d:8c:b6:a7:94:8a:
                    62:0b:b1:14:83:08:77:f5:75:5f:00:e0:39:ff:4b:
                    3d:28:5c:31:0f:16:55:e5:2d:8d:e0:d1:60:b0:c9:
                    1a:26:20:3a:56:1e:53:3d:56:ca:f8:b4:71:66:bb:
                    0a:3b:b6:cc:05:95:77:99:39:7f:f5:f2:13:29:16:
                    ec:1f:13:8b:d0:2c:97:35:54:86:40:30:fc:27:a1:
                    d8:ec:ad:60:14:3d:45:42:46:90:8e:00:c8:6e:88:
                    80:ff:d8:26:4f:55:8d:b7:46:49:e3:5e:3a:a7:15:
                    95:5a:f0:6c:7d:77:4a:9d:07:8b:bc:e5:ac:3b:86:
                    c1:49:53:3b:e8:14:6e:54:de:b3:29:86:92:56:bf:
                    0d:13:cc:29:13:40:66:c6:f4:6f:76:43:2b:fc:e8:
                    8e:57:54:76:de:d0:bb:f6:7a:ad:4d:38:55:9a:35:
                    f6:03:81:8d:0d:bc:db:7a:14:92:8b:9e:e4:8d:e8:
                    1d:5f:ed:32:25:78:b4:1d:f6:c2:9f:2d:f4:1e:d6:
                    10:9f:bd:f7:f4:04:8d:45:73:bd:67:43:9c:72:c3:
                    67:c0:90:b6:38:4a:0e:cf:b7:2a:b4:02:07:81:2f:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:8B:97:7C:66:22:FA:8C:EE:AC:E8:18:1E:66:B7:AB:40:F7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664f2977-141e-3832-9dac-e2488af0b819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:68:f6:47:24:60:61:4f:ea:88:ab:3e:d9:4f:e9:5f:48:
         ef:08:91:8a:f1:62:60:ab:ba:a0:94:95:05:df:5e:a6:77:78:
         ac:ab:17:75:50:f6:fc:ae:36:78:24:63:ee:eb:c1:47:db:a3:
         90:d8:0c:db:96:e9:74:89:96:0b:09:0c:ff:9c:01:be:ad:81:
         15:d6:2b:a7:f3:25:b9:f3:e4:2e:fa:81:8a:e9:01:03:f8:bd:
         e4:03:7f:2e:6e:a5:df:96:dd:d3:15:8b:cf:be:be:3d:37:0c:
         5e:e1:f1:43:d9:4e:cf:31:32:0f:2d:53:00:e3:c9:18:31:20:
         34:c1:f6:47:79:35:44:19:50:36:c1:6f:6b:42:83:e7:f6:9e:
         49:c2:dd:b6:36:94:27:af:68:38:a0:f2:73:ef:1a:a7:20:59:
         80:68:3a:8e:75:74:9f:ad:ea:4f:2e:f3:86:96:b0:1e:b9:30:
         ec:5c:5d:ab:e1:2c:89:4a:28:9b:13:43:5f:a0:7c:2c:3a:f3:
         80:41:d1:bd:67:0e:82:a2:a5:c7:7d:88:a9:10:47:2b:ee:e0:
         91:fe:c6:4a:d6:cb:90:1d:ed:f4:e3:82:b6:e3:68:74:56:ac:
         40:55:e0:4a:a0:3e:34:37:6c:9a:d7:77:29:fe:f5:29:f2:57:
         82:81:e8:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2vqoBH+8YQg+HIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
Mzg1ZTU4MjAtYjExMy00ZWM3LTgyNzgtZWQ2ZTcxY2I2YTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kZV1ZRoJ+ZZCFPlg9RWqFSBS8Ijn389jLan
lIpiC7EUgwh39XVfAOA5/0s9KFwxDxZV5S2N4NFgsMkaJiA6Vh5TPVbK+LRxZrsK
O7bMBZV3mTl/9fITKRbsHxOL0CyXNVSGQDD8J6HY7K1gFD1FQkaQjgDIboiA/9gm
T1WNt0ZJ4146pxWVWvBsfXdKnQeLvOWsO4bBSVM76BRuVN6zKYaSVr8NE8wpE0Bm
xvRvdkMr/OiOV1R23tC79nqtTThVmjX2A4GNDbzbehSSi57kjegdX+0yJXi0HfbC
ny30HtYQn7339ASNRXO9Z0OccsNnwJC2OEoOz7cqtAIHgS94CQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOXXi5d8ZiL6jO6s6BgeZrerQPeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjY0ZjI5NzctMTQxZS0z
ODMyLTlkYWMtZTI0ODhhZjBiODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCoOWj2RyRgYU/qiKs+2U/pX0jvCJGK8WJgq7qglJUF316md3isqxd1
UPb8rjZ4JGPu68FH26OQ2Azblul0iZYLCQz/nAG+rYEV1iun8yW58+Qu+oGK6QED
+L3kA38ubqXflt3TFYvPvr49Nwxe4fFD2U7PMTIPLVMA48kYMSA0wfZHeTVEGVA2
wW9rQoPn9p5Jwt22NpQnr2g4oPJz7xqnIFmAaDqOdXSfrepPLvOGlrAeuTDsXF2r
4SyJSiibE0NfoHwsOvOAQdG9Zw6CoqXHfYipEEcr7uCR/sZK1suQHe3044K242h0
VqxAVeBKoD40N2ya13cp/vUp8leCgege
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:56:16 2025 by rpki-client