Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2382ae69-8f27-34f6-89ae-67ba54ac24c4.roa
File:                     2382ae69-8f27-34f6-89ae-67ba54ac24c4.roa (raw, json)
Hash identifier:          SGex8QdIOX0WIjpIl/0/msiuY93yFDiN3gnahrEZycE=
Subject key identifier:   01:DA:76:86:99:1A:B5:07:1B:41:01:9E:F9:7B:DF:45:8E:1E:9F:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290952C4789F47FE1AB6080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2382ae69-8f27-34f6-89ae-67ba54ac24c4.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396588
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:95:2c:47:89:f4:7f:e1:ab:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=195d8bf1-b5fa-45cc-8de1-a287538ea4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:ea:55:71:ee:57:af:8a:c5:0c:e4:a5:86:
                    3b:78:69:d9:f6:9a:16:2a:4c:47:6d:cf:2b:95:74:
                    7f:d7:24:7a:d5:3b:03:e1:c3:d7:66:99:f2:f4:77:
                    86:fd:e9:b7:2d:9c:cd:5d:52:87:db:0f:a7:7d:e3:
                    62:28:ae:fb:d1:d9:a0:94:4d:20:a8:f3:33:cd:d3:
                    a5:85:c2:10:c8:a4:a5:19:18:8e:4d:ed:7c:37:42:
                    46:30:72:b2:76:91:bc:e2:cc:58:c7:4d:fd:44:f6:
                    e7:7c:c2:23:a2:de:af:1d:3f:3a:7a:bc:37:dc:5f:
                    eb:10:51:76:0c:61:11:f2:b7:c8:11:03:08:ef:ee:
                    b6:15:5f:c8:9c:e6:2b:25:da:a0:c7:bc:55:43:24:
                    ca:5a:f2:d0:93:24:9c:9b:42:a6:dc:2f:0c:6c:91:
                    1e:e6:77:56:b5:fa:da:52:38:84:37:de:1e:fc:d5:
                    f5:c7:01:8f:f4:32:0e:7b:36:a2:5f:8a:dd:4a:0a:
                    35:d8:e8:5c:db:aa:a5:47:df:3a:fb:be:fd:a8:d5:
                    e9:65:51:14:af:b8:36:12:95:34:22:8e:84:4a:61:
                    d4:47:93:64:c3:51:d2:83:68:d4:63:01:4b:82:74:
                    5f:a3:9e:c1:2d:d3:53:79:1a:64:f3:f5:4f:88:d6:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:76:86:99:1A:B5:07:1B:41:01:9E:F9:7B:DF:45:8E:1E:9F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2382ae69-8f27-34f6-89ae-67ba54ac24c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2d:8d:b8:3c:d2:19:96:2d:0e:f4:a2:64:f4:e4:f4:e9:c6:
         ea:23:65:4f:31:bb:a9:21:75:fa:b7:bf:82:53:b0:54:f5:43:
         5a:5d:3d:64:7d:cc:1d:fe:08:43:7d:fd:3b:5b:61:2b:3d:16:
         45:a4:8a:40:d5:d3:62:01:86:cb:15:2d:3f:ec:4c:74:a1:7c:
         2f:f1:00:d9:24:ed:b3:cd:67:aa:22:83:e8:a4:09:1e:df:52:
         78:1c:aa:89:53:d9:f6:6f:2f:ed:dc:ae:8d:e5:bf:4d:39:f8:
         b1:40:38:53:15:bf:98:91:a5:fe:e7:0d:c6:15:55:27:40:be:
         fa:5d:a4:45:12:92:43:70:11:9e:88:a3:17:5a:b4:b0:fd:2c:
         30:8c:54:a1:e9:41:66:f3:97:64:46:0a:28:3f:9a:86:a5:8e:
         db:55:81:94:4d:28:a4:91:5d:5f:52:cb:0f:23:86:dd:8d:62:
         08:b9:01:3d:c7:f4:c8:28:13:b0:38:23:29:20:63:74:e5:fd:
         cb:ca:77:fc:d3:12:42:62:6a:46:9d:45:5b:a3:2a:14:11:55:
         71:94:93:f9:24:3d:8b:80:ac:10:07:1d:2a:53:79:4b:0b:26:
         de:74:36:aa:2d:cd:68:d9:a7:e2:ae:a2:b1:b2:ee:b1:4b:be:
         a1:17:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:18 2025 by rpki-client