Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2ac8d26-faef-3311-a229-bebcf861245a.roa
File:                     e2ac8d26-faef-3311-a229-bebcf861245a.roa (raw, json)
Hash identifier:          I8qSk19As0koDvTdMTjhBCd2F3PJurCmK4p6Ei/HqnU=
Subject key identifier:   61:E4:17:0F:5D:14:6E:C0:4A:DA:8F:C4:BA:38:10:E9:B3:30:08:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC2069773DCC16D506680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2ac8d26-faef-3311-a229-bebcf861245a.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396587
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c2:06:97:73:dc:c1:6d:50:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=2fe9986d-7b2c-44b4-9eab-fa099aa6c2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:68:de:0c:84:cf:83:26:4d:3c:4f:bc:1e:
                    68:3e:96:74:0a:a9:f9:be:e5:42:be:7c:a9:f8:a6:
                    b7:a3:cb:f7:a4:22:6b:b8:55:b8:48:88:4f:56:6c:
                    80:1d:e2:b6:92:90:8a:8b:d2:7a:46:49:28:8e:46:
                    8b:65:8c:e8:f5:07:1a:9a:a9:69:17:59:bc:8b:1c:
                    b2:f0:93:a4:a4:31:60:69:24:94:b1:7a:b8:11:33:
                    5d:28:0f:37:31:f0:50:61:c0:f8:d3:1b:7c:66:d9:
                    87:bb:37:ba:31:e5:27:09:41:7b:c2:f0:2d:47:d1:
                    4d:eb:43:05:f3:ff:ff:ba:92:72:ac:43:c6:e7:5a:
                    67:93:82:5a:d4:79:cf:8e:79:b1:91:2b:a6:71:cc:
                    de:55:0e:10:22:62:ad:c0:f4:82:e9:8f:0e:0a:e8:
                    f8:a8:4a:68:43:e7:f4:94:d4:07:a2:6e:00:e6:81:
                    27:98:a5:f5:0c:75:4b:c5:09:9d:fc:00:90:21:7c:
                    ef:38:37:b0:38:7b:f1:11:85:c3:e2:b8:a9:8f:08:
                    fa:7e:61:13:c7:49:9c:ae:7b:a4:23:a0:c1:b5:7e:
                    02:35:05:04:5b:b7:c1:e8:b3:d2:0c:63:bc:00:09:
                    ec:a2:40:2d:1f:b2:26:1c:cd:c7:6f:fb:45:1b:45:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:17:0F:5D:14:6E:C0:4A:DA:8F:C4:BA:38:10:E9:B3:30:08:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2ac8d26-faef-3311-a229-bebcf861245a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:62:f5:be:46:53:f8:99:1e:5c:d4:a3:f4:1a:f9:3b:9a:d0:
         e2:83:48:a0:c8:19:7b:00:48:4f:e4:9b:0b:7e:83:bd:2e:10:
         70:a3:ee:85:6b:92:30:2b:60:78:9a:16:00:13:6e:f4:0b:27:
         78:ee:a4:05:73:15:b6:d9:e6:24:9e:72:ac:1b:47:bd:b1:a8:
         9c:15:3e:85:4d:14:53:90:81:27:28:73:33:6f:be:c3:85:4a:
         d1:ae:d3:91:51:65:dd:88:be:e2:47:da:d4:d8:4e:c9:b2:6a:
         49:0f:44:15:02:10:ca:b8:98:62:27:e3:e5:c4:79:16:86:e7:
         08:cc:2a:49:df:9a:1b:4c:70:7c:75:74:50:1e:a7:a4:63:63:
         a4:21:50:8b:d6:f7:2d:67:4d:6d:c6:90:d4:54:1b:0b:e5:d0:
         48:86:6d:03:c0:30:86:1a:da:aa:30:39:6c:04:a2:29:7d:5f:
         32:aa:82:c9:b7:4d:21:ec:e8:90:71:5c:85:51:67:89:48:39:
         6d:7b:08:7b:79:41:21:a6:6a:03:3e:ff:27:f7:a2:c5:f2:38:
         14:3e:98:28:b7:23:6b:42:c0:cd:65:11:9d:ba:4f:0f:e1:1a:
         da:f4:8b:9e:bb:85:2c:1a:6d:16:f7:08:6e:a1:fe:f2:a1:84:
         64:d7:d1:3b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoeKsIGl3PcwW1QZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
MmZlOTk4NmQtN2IyYy00NGI0LTllYWItZmEwOTlhYTZjMmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtolo3gyEz4MmTTxPvB5oPpZ0Cqn5vuVCvnyp
+Ka3o8v3pCJruFW4SIhPVmyAHeK2kpCKi9J6RkkojkaLZYzo9QcamqlpF1m8ixyy
8JOkpDFgaSSUsXq4ETNdKA83MfBQYcD40xt8ZtmHuze6MeUnCUF7wvAtR9FN60MF
8///upJyrEPG51pnk4Ja1HnPjnmxkSumcczeVQ4QImKtwPSC6Y8OCuj4qEpoQ+f0
lNQHom4A5oEnmKX1DHVLxQmd/ACQIXzvODewOHvxEYXD4ripjwj6fmETx0mcrnuk
I6DBtX4CNQUEW7fB6LPSDGO8AAnsokAtH7ImHM3Hb/tFG0Wn+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGHkFw9dFG7AStqPxLo4EOmzMAiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTJhYzhkMjYtZmFlZi0z
MzExLWEyMjktYmViY2Y4NjEyNDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqwHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWYvW+RlP4mR5c1KP0Gvk7mtDig0igyBl7AEhP5JsLfoO9LhBwo+6F
a5IwK2B4mhYAE270Cyd47qQFcxW22eYknnKsG0e9saicFT6FTRRTkIEnKHMzb77D
hUrRrtORUWXdiL7iR9rU2E7JsmpJD0QVAhDKuJhiJ+PlxHkWhucIzCpJ35obTHB8
dXRQHqekY2OkIVCL1vctZ01txpDUVBsL5dBIhm0DwDCGGtqqMDlsBKIpfV8yqoLJ
t00h7OiQcVyFUWeJSDltewh7eUEhpmoDPv8n96LF8jgUPpgotyNrQsDNZRGduk8P
4Rra9Iueu4UsGm0W9whuof7yoYRk19E7
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:08 2025 by rpki-client