Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29520179-cd78-3b44-b8d9-cea08a953296.roa
File:                     29520179-cd78-3b44-b8d9-cea08a953296.roa (raw, json)
Hash identifier:          H2lusse8jWR+tRrJYVUQBaifNLU0W1QbFWwZi15xJIM=
Subject key identifier:   32:B3:AD:58:5B:F1:5E:79:B2:34:39:2B:87:07:4A:7F:31:6F:B3:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A60DE1E95BD4BF77D21D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29520179-cd78-3b44-b8d9-cea08a953296.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     36631
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:0d:e1:e9:5b:d4:bf:77:d2:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=18ac4a3b-d04a-40be-bb83-d530b7620b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:fc:5f:af:ac:b6:bf:b8:77:5c:10:d0:5a:
                    a3:d1:07:9e:da:e6:54:af:15:29:f6:66:20:2b:83:
                    e6:5a:f2:4e:60:39:c8:e0:f8:95:ff:83:5e:e1:00:
                    d6:84:a6:b2:62:31:21:31:fc:36:d4:85:16:f2:4e:
                    ab:cd:cd:89:87:6d:9c:28:5b:01:59:ae:57:a0:9b:
                    28:36:4d:d5:87:71:0f:e9:d3:8e:17:72:46:f7:d1:
                    65:fb:8a:e8:cc:54:5a:40:4b:92:d4:5d:5f:92:2b:
                    20:c5:e7:b6:a4:76:e7:56:16:88:a4:cb:ab:64:12:
                    2c:f6:9b:f3:2e:48:61:74:47:e7:88:02:e6:55:0d:
                    b0:73:eb:32:d5:16:b3:76:a3:f3:a5:44:bb:d3:54:
                    a2:40:fa:4b:cc:e3:04:df:a9:9b:37:f9:fa:eb:3d:
                    c5:84:08:60:2f:4e:62:34:d1:d1:2a:e2:15:bf:42:
                    be:4c:83:56:45:4c:4d:3b:3f:77:a2:1f:8e:ac:2e:
                    18:93:b4:a7:87:8b:34:1a:a9:fd:5f:56:51:f9:41:
                    9e:37:af:3a:a0:0b:81:1d:0a:f9:41:f0:1e:8a:bb:
                    b5:c2:f4:5b:71:64:91:9c:9d:ba:2e:2d:57:b6:37:
                    9b:85:85:43:ae:c6:82:cc:67:13:d9:9c:88:dc:34:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B3:AD:58:5B:F1:5E:79:B2:34:39:2B:87:07:4A:7F:31:6F:B3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29520179-cd78-3b44-b8d9-cea08a953296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:1f:63:1b:7c:73:9b:e4:7d:e7:54:3e:f8:b8:a5:ea:8a:
         cd:96:cf:5f:a0:3a:aa:4f:d1:70:ee:b2:a3:95:ab:89:70:a0:
         3d:2e:fb:7f:c1:8b:8d:a6:36:74:a2:de:3f:3d:8c:db:8f:8e:
         9d:18:0f:fb:e6:2d:b8:ed:3b:a7:c3:eb:cf:f1:36:49:95:14:
         d0:a3:15:9f:95:6f:f1:b3:9e:4f:bf:81:06:2c:46:42:9d:22:
         96:f1:55:7d:c6:c8:cd:c8:40:64:7f:a8:b6:d9:d7:8d:79:8a:
         4b:f2:24:cb:2a:f6:92:d8:49:54:ad:06:a5:5b:4b:92:b9:c6:
         9a:b0:a3:43:88:45:c1:05:39:47:e3:3f:16:71:69:2a:ab:cc:
         09:30:76:e9:4e:1e:0d:28:aa:e5:b7:7a:fe:10:2a:6a:60:9c:
         d8:6c:f8:45:9e:45:76:d5:b6:48:59:8a:47:cd:45:44:3a:6a:
         31:6d:e4:c3:7e:af:fb:a4:23:a6:78:c9:cd:11:b8:5e:65:8f:
         bd:4c:b1:b6:7a:67:38:f6:84:01:8e:c4:65:ff:50:96:51:69:
         1a:7c:6d:d6:c3:83:f7:7d:7b:3f:78:4b:08:13:89:67:c8:87:
         28:89:f9:b6:a4:28:32:46:05:88:81:0c:68:41:81:88:69:3d:
         32:e6:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:57:09 2025 by rpki-client