Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
File:                     f84ad808-5259-3a89-b4ec-ee12d809fef5.roa (raw, json)
Hash identifier:          wJZ+3s4yeObrMpl3cp4IHRgdKZhoR/dm+/X0bfcgJK8=
Subject key identifier:   04:89:4E:A6:19:11:B3:99:9F:A0:1A:68:89:7A:4A:7C:4A:B2:65:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FC5075D2491E99C55B50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     27544
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fc:50:75:d2:49:1e:99:c5:5b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=0bccad74-b087-4710-bcc5-4cf1b14c06fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:0d:23:54:de:b6:0f:29:78:39:24:0a:c9:
                    1e:28:5f:9e:7e:e7:16:4d:af:5e:61:a1:a7:5c:62:
                    4e:5a:3e:cc:06:c2:8b:ad:9c:34:ac:44:39:2d:e1:
                    33:68:70:33:f1:fd:df:56:65:08:7a:2d:74:4b:bb:
                    49:50:f9:06:7a:4e:e1:48:c1:a7:43:42:f5:f2:18:
                    f4:2c:06:0e:a1:78:38:12:97:1f:94:98:13:29:19:
                    39:51:a8:d2:7f:6b:3d:d5:67:d3:6a:17:b1:0d:76:
                    39:48:31:73:98:7d:1b:5a:6d:e2:82:f2:38:1a:f4:
                    77:b8:09:4d:d5:0b:d2:1e:73:72:12:b0:32:91:eb:
                    95:ef:3c:e8:73:50:2b:73:30:11:1d:47:23:ce:12:
                    b3:f2:f9:2b:84:bd:37:e8:03:29:a4:b5:36:1c:4c:
                    41:b5:8e:3c:c0:3c:00:43:3a:a3:be:cc:4f:c0:80:
                    c8:a6:9c:50:79:3e:a3:7a:66:c0:00:c1:ed:03:0c:
                    bf:b0:a2:f1:34:f0:91:f2:30:19:c6:0c:52:8a:d4:
                    7c:39:1c:7d:fc:34:c4:02:a5:ef:a7:6a:b5:1e:99:
                    0b:2a:a4:f3:6d:38:72:c6:f1:51:be:0d:20:ed:aa:
                    a4:e7:27:e8:5e:fa:64:d7:7d:90:34:7e:4e:80:6f:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:89:4E:A6:19:11:B3:99:9F:A0:1A:68:89:7A:4A:7C:4A:B2:65:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f84ad808-5259-3a89-b4ec-ee12d809fef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:d0:c1:db:6b:19:4d:81:c4:fb:a6:bb:d1:ab:a9:6a:27:
         46:31:28:47:8d:a5:2f:b4:dd:43:46:f2:0c:bd:27:fa:56:cd:
         38:29:1c:dc:1b:00:4c:79:75:d6:94:9c:ee:71:d4:de:35:f3:
         70:31:4f:78:a4:26:fa:46:60:c8:23:b0:b3:71:0a:c7:66:e7:
         d1:ec:24:79:30:66:e9:a8:d7:80:25:29:d0:f7:af:92:05:bb:
         a1:3e:6f:07:68:b9:19:5f:5b:94:5f:1e:7f:bf:65:fc:be:9f:
         37:99:1b:ad:b2:c6:0c:52:91:4f:ec:d1:d3:56:46:db:83:a9:
         60:90:8c:57:e2:8b:28:23:4d:94:47:05:38:e5:3f:48:81:0d:
         70:35:50:48:d9:27:75:15:59:15:22:23:d5:1c:11:c6:f3:ba:
         f7:6a:db:55:30:61:59:a0:ea:aa:18:54:96:bd:0b:1b:79:84:
         44:6f:b9:8c:7a:a8:ab:29:6c:c8:9e:20:e4:6d:fd:4b:1b:3b:
         66:e9:23:a2:3c:4e:f1:12:40:45:89:f7:a4:3a:0e:60:15:aa:
         9f:85:74:76:93:b8:e7:63:71:d2:78:34:2f:5c:63:ec:7c:bc:
         11:45:d6:12:df:2f:c6:70:c5:c0:c6:ec:11:72:1c:c5:62:6d:
         90:ba:20:b2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+fxQddJJHpnFW1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
MGJjY2FkNzQtYjA4Ny00NzEwLWJjYzUtNGNmMWIxNGMwNmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlsNI1Tetg8peDkkCskeKF+efucWTa9eYaGn
XGJOWj7MBsKLrZw0rEQ5LeEzaHAz8f3fVmUIei10S7tJUPkGek7hSMGnQ0L18hj0
LAYOoXg4EpcflJgTKRk5UajSf2s91WfTahexDXY5SDFzmH0bWm3igvI4GvR3uAlN
1QvSHnNyErAykeuV7zzoc1ArczARHUcjzhKz8vkrhL036AMppLU2HExBtY48wDwA
QzqjvsxPwIDIppxQeT6jembAAMHtAwy/sKLxNPCR8jAZxgxSitR8ORx9/DTEAqXv
p2q1HpkLKqTzbThyxvFRvg0g7aqk5yfoXvpk132QNH5OgG8BAwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFASJTqYZEbOZn6AaaIl6SnxKsmWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjg0YWQ4MDgtNTI1OS0z
YTg5LWI0ZWMtZWUxMmQ4MDlmZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyDNDB22sZTYHE+6a70aupaidGMShHjaUvtN1DRvIMvSf6Vs04KRzc
GwBMeXXWlJzucdTeNfNwMU94pCb6RmDII7CzcQrHZufR7CR5MGbpqNeAJSnQ96+S
BbuhPm8HaLkZX1uUXx5/v2X8vp83mRutssYMUpFP7NHTVkbbg6lgkIxX4osoI02U
RwU45T9IgQ1wNVBI2Sd1FVkVIiPVHBHG87r3attVMGFZoOqqGFSWvQsbeYREb7mM
eqirKWzIniDkbf1LGztm6SOiPE7xEkBFifekOg5gFaqfhXR2k7jnY3HSeDQvXGPs
fLwRRdYS3y/GcMXAxuwRchzFYm2QuiCy
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:34:55 2025 by rpki-client