Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f747f73a-556d-3a85-8af2-1fad223dda4c.roa
File:                     f747f73a-556d-3a85-8af2-1fad223dda4c.roa (raw, json)
Hash identifier:          +SNaczPW3NZnmYrRBSrg0OVDvF8zViQ/KtupILbWht0=
Subject key identifier:   53:94:31:DF:B0:D9:92:15:EE:97:4E:9B:BD:71:8D:C6:49:51:24:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2424524B7BC26FE22D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f747f73a-556d-3a85-8af2-1fad223dda4c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397203
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:24:24:52:4b:7b:c2:6f:e2:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=fd63851f-e67f-4d6a-ac60-d5bd40686b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:7e:81:7d:14:06:ca:7a:09:8c:83:9a:37:
                    fc:f7:ad:47:ad:ef:ee:4d:d2:7f:7a:bc:82:e9:8c:
                    8b:4c:aa:59:af:87:4f:06:ad:a9:48:c1:93:d9:47:
                    ea:b4:90:57:91:3d:1a:5a:9b:27:f6:3b:16:02:e5:
                    d8:8c:1b:05:3e:08:15:d1:00:fc:bb:53:88:2e:c6:
                    1c:ae:f8:c0:da:34:89:df:dc:10:49:8f:d2:47:2c:
                    bb:10:6b:9f:09:70:37:0c:f3:12:24:b5:13:13:e9:
                    99:d6:be:de:94:47:46:a0:52:bb:f7:3e:66:ac:37:
                    9e:38:47:10:e4:82:9e:b3:84:2a:bf:49:85:16:26:
                    1c:70:86:ef:3e:da:d7:96:81:a5:62:94:b9:ff:77:
                    4f:be:c0:b0:d2:e0:03:0a:da:5b:a7:1b:35:37:8c:
                    c2:16:fb:dc:ba:f2:a2:74:7f:bd:1c:68:9e:3c:2c:
                    02:41:10:9b:fb:a1:29:ca:f6:df:ce:44:8c:aa:96:
                    97:27:08:2b:00:17:c4:9f:2a:1f:b3:3d:d3:d1:ce:
                    1a:0c:17:0c:c4:70:cd:77:de:66:f7:6c:88:32:6d:
                    9a:67:95:f0:db:96:75:8f:84:1c:df:f5:a5:cd:4a:
                    41:c1:a1:9c:88:a5:45:fd:77:f9:82:50:c2:18:31:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:31:DF:B0:D9:92:15:EE:97:4E:9B:BD:71:8D:C6:49:51:24:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f747f73a-556d-3a85-8af2-1fad223dda4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:16:94:c9:f8:df:0e:a1:50:b5:08:b7:a6:a8:23:8a:59:
         41:19:fb:ce:f8:cf:c5:06:d1:83:6f:8c:1e:1c:f5:9b:65:00:
         ac:bb:d3:76:fb:30:11:f1:66:12:d4:ca:cc:81:ee:d3:9f:0d:
         77:cc:74:9a:14:70:c3:64:09:6f:50:fe:c3:a6:15:60:67:95:
         e6:ae:f9:b5:da:c3:2e:b9:47:da:49:af:9a:42:a4:6a:9d:7d:
         12:e3:8b:c9:9f:38:09:e1:88:4c:89:4c:be:b3:d0:d1:15:ec:
         69:c0:b4:ce:4d:bd:ee:f7:53:cd:46:12:b4:4f:24:44:17:ae:
         4a:74:73:46:4f:7f:6c:af:eb:37:4e:32:c5:d7:64:d6:75:58:
         5e:05:86:7f:0e:66:d7:2e:87:87:52:64:a5:eb:8f:d4:cb:cb:
         92:48:75:fd:b9:a7:44:54:70:31:7c:5b:87:20:f2:71:ab:ff:
         de:6a:bb:9a:d0:6c:cd:0b:12:f3:1e:6b:33:f0:94:c3:d0:bc:
         0a:cf:90:fe:cb:6e:06:b9:20:78:a2:16:34:29:f5:0e:6e:f1:
         11:06:a8:09:da:e2:7a:dd:09:2e:3b:dc:15:1c:60:19:02:2d:
         59:cb:ce:7b:74:db:6b:42:97:b0:04:9e:df:8a:7d:66:29:ca:
         30:35:14:fe
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2yQkUkt7wm/iLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZmQ2Mzg1MWYtZTY3Zi00ZDZhLWFjNjAtZDViZDQwNjg2YjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAret+gX0UBsp6CYyDmjf8961Hre/uTdJ/eryC
6YyLTKpZr4dPBq2pSMGT2UfqtJBXkT0aWpsn9jsWAuXYjBsFPggV0QD8u1OILsYc
rvjA2jSJ39wQSY/SRyy7EGufCXA3DPMSJLUTE+mZ1r7elEdGoFK79z5mrDeeOEcQ
5IKes4Qqv0mFFiYccIbvPtrXloGlYpS5/3dPvsCw0uADCtpbpxs1N4zCFvvcuvKi
dH+9HGiePCwCQRCb+6EpyvbfzkSMqpaXJwgrABfEnyofsz3T0c4aDBcMxHDNd95m
92yIMm2aZ5Xw25Z1j4Qc3/WlzUpBwaGciKVF/Xf5glDCGDGN6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFOUMd+w2ZIV7pdOm71xjcZJUSTSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjc0N2Y3M2EtNTU2ZC0z
YTg1LThhZjItMWZhZDIyM2RkYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmVBaUyfjfDqFQtQi3pqgjillBGfvO+M/FBtGDb4weHPWbZQCsu9N2
+zAR8WYS1MrMge7Tnw13zHSaFHDDZAlvUP7DphVgZ5Xmrvm12sMuuUfaSa+aQqRq
nX0S44vJnzgJ4YhMiUy+s9DRFexpwLTOTb3u91PNRhK0TyREF65KdHNGT39sr+s3
TjLF12TWdVheBYZ/DmbXLoeHUmSl64/Uy8uSSHX9uadEVHAxfFuHIPJxq//earua
0GzNCxLzHmsz8JTD0LwKz5D+y24GuSB4ohY0KfUObvERBqgJ2uJ63QkuO9wVHGAZ
Ai1Zy857dNtrQpewBJ7fin1mKcowNRT+
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:23 2025 by rpki-client