Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de2106d8-48b7-3557-b737-421266496db9.roa
File:                     de2106d8-48b7-3557-b737-421266496db9.roa (raw, json)
Hash identifier:          Jxx+0xIkkxG+ke3NQBATiUX00cu6USsyOQKzro0+ZTs=
Subject key identifier:   AD:35:30:A0:16:03:EB:21:DF:81:43:EC:85:0C:8A:C2:4F:99:64:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268AD1D60DE02F4E65F501C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de2106d8-48b7-3557-b737-421266496db9.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     10515
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:d1:d6:0d:e0:2f:4e:65:f5:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=b425948f-d743-42d7-bb78-464a05e85a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:41:88:a3:98:f7:78:b7:80:67:b1:d0:a3:
                    65:9b:e4:f6:b1:0a:e7:5c:51:ac:91:10:33:cf:a1:
                    4f:d9:ba:09:2e:d4:c7:66:14:35:c2:50:8b:ef:73:
                    ef:ca:c9:60:21:9d:34:17:03:c0:67:dd:7f:24:c2:
                    cd:96:00:48:7d:fa:f2:8f:3c:b3:fa:45:6d:e3:01:
                    e8:0e:8e:7a:27:5b:1c:c5:3c:e0:27:a8:60:1f:78:
                    41:25:b3:53:87:20:db:4b:45:e8:74:57:06:5b:28:
                    5d:9f:ec:bb:8e:8e:aa:dc:d9:de:5b:ad:34:04:d5:
                    db:fe:81:27:b0:c1:bd:1a:83:8b:29:6f:45:fb:b3:
                    0d:75:87:5e:7c:dc:cc:14:a7:82:f9:c8:ae:b5:be:
                    22:98:94:70:41:86:fe:12:d2:b7:af:ed:ce:e2:b1:
                    15:f9:12:40:da:2b:54:c9:d4:89:69:fd:98:96:67:
                    ba:ce:93:23:0d:e1:cb:53:eb:69:f9:21:7d:b3:1b:
                    a8:40:bb:7e:56:be:c0:e2:f7:c6:bc:e3:13:48:77:
                    a5:d8:b3:14:e8:da:97:15:d6:6d:a5:95:a3:cb:e1:
                    44:98:a0:9c:85:9c:82:fe:c7:fe:69:f3:8b:4a:a6:
                    28:4e:4a:d5:4a:aa:8b:c5:d5:cf:82:fe:03:62:d2:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:35:30:A0:16:03:EB:21:DF:81:43:EC:85:0C:8A:C2:4F:99:64:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de2106d8-48b7-3557-b737-421266496db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:35:20:d5:7f:14:c7:96:3c:ea:d4:92:c2:48:e2:01:d2:01:
         5a:21:40:e7:f6:6f:c1:3c:aa:db:c3:32:f6:5b:5d:6c:95:36:
         9b:0c:96:57:6c:74:7a:a4:ad:ea:c0:93:e9:9e:0a:68:f8:4c:
         01:f4:79:78:63:c2:d0:29:ab:fb:7d:3c:89:6d:e6:48:96:00:
         9f:0c:4d:6a:12:c4:d8:38:c7:a1:35:7c:21:bb:38:c9:b0:57:
         42:c8:70:49:d3:c0:45:ad:ee:f4:53:66:1b:82:7f:66:27:58:
         ff:23:ae:c8:de:28:b6:dd:b0:8e:34:fe:03:ac:f7:d8:06:c3:
         e2:77:ec:eb:da:21:89:f4:17:34:7a:1c:d9:ef:f8:e6:29:04:
         6b:19:94:2e:94:7b:34:a7:c1:98:5d:13:82:66:b4:9a:7d:28:
         11:08:cc:96:04:fa:10:8a:df:d8:32:92:11:2a:c9:3b:37:4e:
         a4:f2:94:26:7f:06:b5:c9:13:24:73:e1:2c:08:a8:64:57:be:
         b1:f3:5c:54:cc:5f:8e:5f:96:b5:fc:f3:c6:d7:6d:f5:85:0e:
         e0:49:7a:c4:3f:ed:15:5f:23:53:ab:02:da:03:31:f4:d8:a0:
         fd:21:ea:6a:77:0e:75:8e:d3:27:d2:72:70:99:24:1c:c5:01:
         cc:d4:80:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEomitHWDeAvTmX1AcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
YjQyNTk0OGYtZDc0My00MmQ3LWJiNzgtNDY0YTA1ZTg1YTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoFBiKOY93i3gGex0KNlm+T2sQrnXFGskRAz
z6FP2boJLtTHZhQ1wlCL73PvyslgIZ00FwPAZ91/JMLNlgBIffryjzyz+kVt4wHo
Do56J1scxTzgJ6hgH3hBJbNThyDbS0XodFcGWyhdn+y7jo6q3NneW600BNXb/oEn
sMG9GoOLKW9F+7MNdYdefNzMFKeC+ciutb4imJRwQYb+EtK3r+3O4rEV+RJA2itU
ydSJaf2Ylme6zpMjDeHLU+tp+SF9sxuoQLt+Vr7A4vfGvOMTSHel2LMU6NqXFdZt
pZWjy+FEmKCchZyC/sf+afOLSqYoTkrVSqqLxdXPgv4DYtI1vwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFK01MKAWA+sh34FD7IUMisJPmWSuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGUyMTA2ZDgtNDhiNy0z
NTU3LWI3MzctNDIxMjY2NDk2ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCvNSDVfxTHljzq1JLCSOIB0gFaIUDn9m/BPKrbwzL2W11slTabDJZX
bHR6pK3qwJPpngpo+EwB9Hl4Y8LQKav7fTyJbeZIlgCfDE1qEsTYOMehNXwhuzjJ
sFdCyHBJ08BFre70U2Ybgn9mJ1j/I67I3ii23bCONP4DrPfYBsPid+zr2iGJ9Bc0
ehzZ7/jmKQRrGZQulHs0p8GYXROCZrSafSgRCMyWBPoQit/YMpIRKsk7N06k8pQm
fwa1yRMkc+EsCKhkV76x81xUzF+OX5a1/PPG1231hQ7gSXrEP+0VXyNTqwLaAzH0
2KD9Iepqdw51jtMn0nJwmSQcxQHM1IDg
-----END CERTIFICATE-----
Generated at Wed Jun 18 07:00:52 2025 by rpki-client