Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
File:                     0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa (raw, json)
Hash identifier:          xcx8kBF+qnknP9uDQ1SHouYhjlx9qbEpxLJ+d89zXv8=
Subject key identifier:   55:DB:0B:11:E4:EE:EC:B5:AF:A9:D3:0A:C6:B4:F7:50:66:54:E0:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62E7590F23E9EC1A35360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396561
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2e:75:90:f2:3e:9e:c1:a3:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=2c4c5e9a-eae7-49eb-924c-0181c8c0507a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:1c:d6:9c:bc:53:1e:19:12:84:11:1c:6f:
                    a6:89:09:f4:2f:8f:ff:a4:bd:d4:84:14:0e:d7:b1:
                    aa:23:83:08:33:a8:46:a9:58:e2:a7:f1:3f:cd:74:
                    42:4f:8b:fe:da:40:05:17:04:43:74:f6:12:32:27:
                    ff:32:1c:5d:a4:63:7b:c3:78:79:17:e3:33:8c:a0:
                    d3:27:e4:1c:52:46:30:2b:38:a7:8c:55:1c:6f:c1:
                    74:c2:52:4a:3d:55:79:df:83:9f:2d:f5:60:2f:30:
                    97:60:e9:fe:31:42:f7:0d:67:fc:40:86:48:fb:23:
                    72:88:5a:2d:64:7c:ac:ff:0b:77:5f:3b:38:da:20:
                    75:81:97:6a:9c:e3:b5:18:f0:30:01:2e:83:30:17:
                    c8:89:89:ed:0b:6f:2f:41:d6:e1:db:a7:d3:89:c3:
                    6f:f5:e5:00:14:ea:02:84:b3:29:3a:bb:72:76:e2:
                    b3:9b:2d:37:bd:b0:c7:d6:05:1a:7b:55:f7:1a:a9:
                    08:8f:29:8d:c4:3c:50:9f:06:e6:42:ef:14:10:66:
                    2d:50:01:8a:b4:a8:c3:40:d0:f4:c3:ed:af:f3:57:
                    bb:ed:7c:a8:eb:c7:04:e8:9e:60:d0:f5:67:c8:ce:
                    06:7b:85:a3:61:cd:d2:f6:82:c6:d5:8b:bb:2b:80:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:0B:11:E4:EE:EC:B5:AF:A9:D3:0A:C6:B4:F7:50:66:54:E0:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:95:17:47:b6:f0:c9:8f:bc:6a:7f:4d:c6:cb:e9:46:f6:99:
         d0:64:37:22:32:05:e0:ec:16:1c:d8:0c:59:e6:d5:5f:87:dc:
         f9:63:f3:0b:6e:29:bc:f2:80:99:7b:3a:8c:0c:39:40:e1:e2:
         d4:06:2d:e0:40:7f:cf:96:61:9c:cc:4c:f8:fc:8d:94:da:94:
         d7:27:75:0e:bc:c7:86:5c:ec:86:0f:fd:d2:42:17:ae:2a:ba:
         e9:e3:41:f9:a3:51:67:d6:5d:eb:b4:cc:23:e9:36:09:05:e2:
         fe:51:f9:28:22:9b:17:cf:20:df:ad:a0:2d:e3:6a:a1:a5:68:
         f0:3b:7c:c3:b7:a3:24:00:c1:b9:79:c7:c3:29:7b:37:3e:a1:
         5f:94:4a:67:42:58:b9:03:d1:b1:94:09:6e:81:1e:bb:bc:ab:
         38:e4:b7:e6:5d:90:af:d4:80:64:e2:32:2b:a2:02:13:55:26:
         d6:02:f8:ea:79:9c:be:c6:fd:3c:7c:ec:c0:9e:38:ee:f4:97:
         c7:e1:cf:11:d4:a4:61:86:44:7a:ea:1a:1c:e8:88:67:9b:cd:
         f7:4d:68:ee:ba:b6:ef:7e:23:31:bc:8c:e0:5a:f8:fc:e9:4b:
         a0:35:d8:4a:fd:6a:26:88:4d:3e:d8:5b:a3:c1:9c:2e:04:e2:
         22:fc:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:43 2025 by rpki-client