Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa
File:                     1398b2ca-4578-35a3-8153-34f01ea14169.roa (raw, json)
Hash identifier:          PdDLheyGlYrBAXgzP92ejrzeH7jPsFdkD2yvywEpTs0=
Subject key identifier:   80:61:F8:F6:32:F4:A5:1C:0D:00:B4:A7:C3:FD:E3:41:B2:D4:6D:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BD0883311C7708D7C860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396594
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bd:08:83:31:1c:77:08:d7:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=8099254e-8ee3-4e62-b8e7-a48eca91e3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:c2:6e:d2:2e:d7:9a:e5:c6:5f:9f:ed:d8:
                    a0:7d:91:63:83:89:4e:e0:16:7c:df:15:1b:d0:40:
                    b3:d7:36:00:cd:3c:26:79:4b:c3:0c:82:3b:96:a6:
                    3e:a1:ee:c0:59:c8:87:e7:00:5d:67:60:c8:f0:68:
                    d1:d1:63:92:de:dc:49:f9:0b:f6:28:af:d7:19:26:
                    09:3e:16:4c:bf:24:bb:ae:2d:75:5b:b1:78:7b:6b:
                    c0:48:04:ec:4c:e5:29:dc:7d:92:d2:f5:2a:7c:3a:
                    01:cf:2e:0a:f5:9f:dc:e6:69:24:9b:25:2b:a1:da:
                    cc:02:cd:41:d8:6a:fe:fd:66:db:b7:ab:ad:fc:85:
                    eb:41:ba:45:ee:6a:ae:74:96:05:9b:66:18:be:c7:
                    6d:b8:b8:54:56:b4:fa:a3:c0:54:4d:3a:f2:d5:74:
                    41:74:e9:e4:7f:55:b2:80:22:16:70:c1:c4:a5:0f:
                    37:d4:e2:f1:37:a6:5b:b6:62:b8:9a:c6:1c:3b:cd:
                    7d:c3:2f:fa:0a:29:d6:9b:92:1d:24:39:85:3f:4f:
                    e9:e8:13:c3:d3:4a:28:dd:66:57:00:1e:53:a5:2c:
                    d4:99:f6:c5:bb:91:9a:7b:31:d1:20:d6:1c:7a:a3:
                    da:c4:c1:99:2e:19:0a:9c:bc:96:b9:00:a3:03:cd:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:F8:F6:32:F4:A5:1C:0D:00:B4:A7:C3:FD:E3:41:B2:D4:6D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:ff:c6:54:59:a8:5e:b6:96:48:f8:26:0c:ed:08:04:e3:
         9d:fe:6d:19:fb:1d:21:1c:70:ae:e3:3e:20:c6:e8:51:7e:4b:
         41:1a:3b:9a:56:66:ca:14:f0:bd:4f:e8:4c:f5:3d:87:26:3a:
         5f:7d:73:2b:b9:62:55:fb:e2:64:72:e2:c9:78:99:9a:c1:d0:
         a6:a9:68:ef:5e:80:c3:8b:e0:00:07:bc:0d:80:05:82:32:95:
         19:0c:7c:6d:04:6e:f4:5a:57:74:89:57:26:e6:71:80:31:f3:
         55:ba:24:2c:84:b1:f1:b3:d5:17:33:e3:ed:63:fe:16:dc:6c:
         5a:5e:8c:40:a0:00:14:d2:02:6d:05:56:b7:b4:17:6d:a6:5c:
         31:b7:c3:f3:81:c5:ee:ee:d7:0f:48:5d:4b:8f:b0:ec:30:cf:
         3e:73:07:13:02:f0:ac:e9:2c:fd:9f:10:3c:01:1c:6b:7e:51:
         ae:1f:29:b1:9b:95:83:0c:d5:77:14:d1:37:c4:8a:e5:5f:3e:
         f4:ef:68:35:54:85:2f:59:38:8e:9c:20:aa:ca:e7:1b:c3:96:
         c7:dc:95:56:a9:47:ec:09:a4:73:ff:f3:32:e1:ce:be:bc:2a:
         83:61:a0:27:8c:ad:4d:5a:23:73:e4:fb:f6:71:a2:19:ca:25:
         dd:49:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:47 2025 by rpki-client