Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a74f7b1-ae42-39bf-9fad-f134b9b23fef.roa
File:                     1a74f7b1-ae42-39bf-9fad-f134b9b23fef.roa (raw, json)
Hash identifier:          Q6JaWYlCSRYqNFcKH68vbCGxhXCVej1/AvQ9MGyMeFw=
Subject key identifier:   85:5B:7B:13:7B:FB:2D:A0:DE:91:2F:23:FB:67:F0:19:30:4E:77:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B8EA2467157FCC18C000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a74f7b1-ae42-39bf-9fad-f134b9b23fef.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396568
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b8:ea:24:67:15:7f:cc:18:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=b17e2ebb-229f-4a51-8dea-d7d881b8228c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:5f:d4:78:79:0f:fe:d4:6c:1b:64:43:86:
                    a3:84:6e:85:bf:56:c5:de:b6:12:65:51:05:e9:8c:
                    6b:b3:91:57:b8:3c:90:69:4e:a4:9d:75:c0:6a:0f:
                    df:fa:ba:f4:28:7f:91:f0:ee:e4:29:09:a5:50:73:
                    c0:71:00:35:39:26:51:19:7d:12:bb:0e:f9:4c:74:
                    e4:ac:55:fc:6c:11:f4:1a:9e:0f:a7:8a:5d:b4:79:
                    7b:7d:7f:91:d5:00:2a:d0:5a:17:e0:fe:79:11:5b:
                    b5:72:b5:71:87:aa:34:bd:22:e2:ae:6a:52:c6:09:
                    c8:77:ba:90:70:09:b3:1c:c5:7f:cc:32:b3:25:f4:
                    51:1a:9c:89:4d:59:06:85:09:af:f2:37:79:f5:21:
                    b2:b2:88:70:14:68:35:5a:20:3c:f1:de:04:51:43:
                    b0:89:a4:b7:d8:db:61:88:2e:2e:2a:4f:a8:4c:af:
                    a5:1a:3c:fc:8b:4c:72:77:2a:6e:a4:a3:49:9a:19:
                    42:43:9b:dd:2a:59:2d:cc:ed:70:c4:a0:d1:12:6d:
                    0b:08:55:a1:dd:4b:1d:14:f2:b7:55:39:be:40:0d:
                    01:b2:dd:67:c5:df:fd:ed:4b:73:ef:0e:d3:d9:0b:
                    f2:42:c7:5b:17:75:9d:46:52:03:67:d3:34:1a:f5:
                    81:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:7B:13:7B:FB:2D:A0:DE:91:2F:23:FB:67:F0:19:30:4E:77:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a74f7b1-ae42-39bf-9fad-f134b9b23fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:8c:30:b4:96:42:94:8f:f4:4d:9d:e2:3a:47:29:fd:cc:
         be:bc:0d:7e:ce:b7:a0:f6:5d:08:cf:97:d9:a4:d2:54:bb:8e:
         33:25:c2:c6:0d:f2:ed:c4:e9:dc:34:73:5a:69:3b:5a:7f:f6:
         11:13:49:4b:f8:a4:96:02:29:e5:08:71:e9:28:37:97:4d:60:
         3b:bd:76:40:03:43:57:d8:99:b3:e4:bd:cc:de:cb:a8:24:04:
         9b:04:8f:ca:fd:24:d5:ac:2c:74:b0:06:ec:73:f5:12:a5:17:
         30:2a:51:bd:5f:19:0d:ec:45:08:08:7d:f4:e3:a7:0b:c9:02:
         54:85:84:f5:22:81:57:bf:4d:82:c4:eb:d3:fd:9d:2f:46:b8:
         09:0f:0b:a5:11:b3:e8:9f:d7:d4:c6:c7:e0:53:b8:8b:37:ba:
         cb:2d:5f:2d:e0:a6:e4:a0:12:bb:59:ba:ff:1a:44:e1:b3:19:
         df:86:9a:9d:d8:7c:5a:dd:f8:f6:dc:85:0a:6d:2c:e3:f8:11:
         43:4f:3a:3c:0d:f1:90:b8:54:e4:32:74:24:67:e2:6f:0c:55:
         e1:b6:3c:73:17:9d:9d:97:f0:90:11:ae:88:c8:ef:0d:73:db:
         f8:d1:9d:5b:b6:3d:2f:0b:95:9d:d9:be:c7:16:17:0b:35:79:
         8b:57:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:16 2025 by rpki-client