Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa
File:                     c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa (raw, json)
Hash identifier:          VG+0Ug5EI4FjMicPO9BwnJo3uZdLwxCoApDT/ChGwps=
Subject key identifier:   96:FC:9C:B3:2C:D0:5C:4F:A5:6C:92:94:24:02:07:FB:57:96:4D:97
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A9E964645514BB8A329EFFCA4
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     396575
IP address blocks:        209.112.127.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:46:45:51:4b:b8:a3:29:ef:fc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=7862c737-d114-4763-a6ba-ab71a0f5c9be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:33:fe:5c:97:f0:24:7d:f6:02:46:6d:9f:
                    ea:62:ad:d3:6a:b3:a1:ef:8a:16:02:09:2c:b4:c7:
                    5b:5f:29:6a:9f:a1:47:6c:d6:99:b3:63:62:2d:04:
                    67:94:de:41:77:0b:ef:4a:e9:8c:e8:75:ea:d1:72:
                    37:9b:46:05:3e:79:ab:f3:8c:0d:b6:87:1d:21:7d:
                    cc:32:70:ab:8f:7f:3e:99:1a:95:85:25:a4:d6:57:
                    1f:a8:f2:37:6c:3d:02:c0:2b:3f:17:d8:a9:67:6f:
                    40:43:17:ee:6a:88:3e:2e:08:73:d3:f9:4b:7d:a8:
                    0e:3b:b2:4f:bb:4b:dd:f9:06:e0:06:73:2a:19:c1:
                    c2:17:26:c5:29:21:65:f3:54:89:bf:e0:d3:02:99:
                    5d:73:e7:fe:af:07:e2:76:68:99:ef:99:30:6b:16:
                    57:13:33:dc:6e:51:8c:97:1b:6f:51:29:65:54:d1:
                    f4:c1:eb:48:18:71:23:08:ca:cd:c8:88:e3:1c:46:
                    fc:b4:76:a2:e9:80:8f:22:91:f4:17:83:40:9b:b5:
                    eb:0b:5d:cc:b0:8c:0b:64:ad:30:8d:23:5e:2b:93:
                    8f:7e:bb:d9:3b:50:fe:b2:f2:cc:7e:a5:ee:17:6d:
                    ee:89:d9:ed:31:b5:7f:6a:33:93:fd:9f:61:0b:99:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FC:9C:B3:2C:D0:5C:4F:A5:6C:92:94:24:02:07:FB:57:96:4D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.127.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:2b:2c:4d:86:c3:9f:02:93:94:24:1a:12:81:c1:5a:b2:
         85:cf:3d:e8:a1:15:d5:b4:3a:ad:cc:3c:d1:a7:ad:c9:4c:f2:
         c5:a0:78:0c:3a:2f:97:86:c0:7c:50:ac:2c:85:e8:ce:02:9c:
         94:68:ab:37:77:ef:69:74:5a:c6:3d:83:3b:ca:a1:ef:0a:5a:
         66:0e:60:eb:c3:f2:4c:07:fd:09:8d:47:1a:a5:1a:28:7a:83:
         77:f0:cd:c2:c9:02:f0:fd:0e:73:ad:ec:83:ba:34:52:38:d9:
         74:4a:66:13:86:45:05:11:ea:66:94:b6:d8:0f:cb:5a:7b:06:
         be:c1:44:e0:17:de:b4:ac:d5:5a:90:96:d9:8a:6c:89:55:c2:
         b2:60:64:2d:5d:d3:60:c9:3f:e1:ba:26:d9:8e:8a:e4:96:f2:
         cc:a3:14:7c:28:42:e4:bf:94:12:5f:33:22:a5:2c:16:11:3c:
         aa:44:f3:e5:1d:ce:9c:41:8a:b4:c7:05:9c:7a:02:d4:6c:ad:
         d0:54:ca:ff:29:62:5a:d2:5a:56:a4:84:ef:e5:9b:ca:b9:21:
         c1:e1:28:8c:ac:18:0d:a2:05:33:4c:96:e0:f1:28:7b:a9:38:
         21:55:4d:a5:5f:95:1d:f9:d4:67:c9:0d:b6:45:72:ec:ed:31:
         19:01:61:06
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkZFUUu4oynv/KQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
Nzg2MmM3MzctZDExNC00NzYzLWE2YmEtYWI3MWEwZjVjOWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqToz/lyX8CR99gJGbZ/qYq3TarOh74oWAgks
tMdbXylqn6FHbNaZs2NiLQRnlN5BdwvvSumM6HXq0XI3m0YFPnmr84wNtocdIX3M
MnCrj38+mRqVhSWk1lcfqPI3bD0CwCs/F9ipZ29AQxfuaog+Lghz0/lLfagOO7JP
u0vd+QbgBnMqGcHCFybFKSFl81SJv+DTApldc+f+rwfidmiZ75kwaxZXEzPcblGM
lxtvUSllVNH0wetIGHEjCMrNyIjjHEb8tHai6YCPIpH0F4NAm7XrC13MsIwLZK0w
jSNeK5OPfrvZO1D+svLMfqXuF23uidntMbV/ajOT/Z9hC5mSFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJb8nLMs0FxPpWySlCQCB/tXlk2XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzgwYmQ1ZWEtMjAwYS0z
ZDhlLWEyOWMtNGI4YzU5MzRmMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAQTCssTYbDnwKTlCQaEoHBWrKFzz3ooRXVtDqtzDzRp63JTPLFoHgM
Oi+XhsB8UKwshejOApyUaKs3d+9pdFrGPYM7yqHvClpmDmDrw/JMB/0JjUcapRoo
eoN38M3CyQLw/Q5zreyDujRSONl0SmYThkUFEepmlLbYD8taewa+wUTgF960rNVa
kJbZimyJVcKyYGQtXdNgyT/huibZjorklvLMoxR8KELkv5QSXzMipSwWETyqRPPl
Hc6cQYq0xwWcegLUbK3QVMr/KWJa0lpWpITv5ZvKuSHB4SiMrBgNogUzTJbg8Sh7
qTghVU2lX5Ud+dRnyQ22RXLs7TEZAWEG
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:41 2025 by rpki-client