Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa
File:                     2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa (raw, json)
Hash identifier:          bLbRLn6JdJAYi6B/ATFr8x8eR5bj0Uc7fDQPcGvqcEQ=
Subject key identifier:   F6:B7:BD:E0:17:0A:20:FA:40:AA:C7:1F:8E:A3:83:E3:9B:12:44:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B9CB1CF01161220809C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     36625
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b9:cb:1c:f0:11:61:22:08:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=2baaea44-aefd-4249-bc44-ca28c9b56465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:30:4d:fc:a1:eb:fc:d1:f8:7d:58:60:e3:
                    92:56:f9:81:44:ed:3a:43:88:a9:54:42:48:1a:49:
                    9a:85:b5:78:a6:23:c7:29:41:b0:14:8c:fe:f2:b6:
                    e3:78:05:bb:48:64:9b:bc:f4:20:57:19:bc:e8:e1:
                    53:f5:31:56:9e:a2:70:dc:03:44:2a:e6:5f:69:52:
                    b6:9e:4a:36:fe:59:a1:d5:7e:8e:1b:19:a6:61:a7:
                    4f:03:49:7b:eb:c3:b1:8e:21:7a:6b:58:03:a2:95:
                    2f:d3:cd:ce:42:6f:4e:cc:ea:ed:a4:24:0b:bc:3c:
                    5c:14:21:ba:35:b4:74:eb:31:f4:bb:64:fd:93:fc:
                    61:bf:96:e4:d7:a6:36:79:ff:4c:54:f2:54:fa:1f:
                    b2:e7:79:56:da:1e:f8:14:1a:73:a5:a4:53:7a:ab:
                    7c:93:52:a0:cd:e6:c0:2c:0e:ee:56:6b:91:5e:14:
                    73:9d:5e:7f:37:af:37:5f:53:3c:81:c7:1a:78:f7:
                    c9:a7:f7:f9:cf:4b:4b:e7:ba:a0:76:29:89:e1:c2:
                    b2:cd:ab:0a:0b:82:96:b5:c2:4e:19:a6:18:de:a4:
                    a1:62:0d:7c:2e:ab:ae:5c:6c:4b:68:59:05:15:83:
                    ca:da:23:bf:3f:3b:04:cc:27:b1:05:96:7d:bd:fd:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:BD:E0:17:0A:20:FA:40:AA:C7:1F:8E:A3:83:E3:9B:12:44:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:76:22:56:cd:ed:80:a5:4b:46:ee:83:e7:ca:b4:b9:80:
         a4:92:fe:97:dc:cc:8f:c0:e2:e8:a6:68:19:91:43:39:10:50:
         f4:ff:16:27:b5:02:74:22:c1:8b:bd:ed:bb:a3:3c:e2:02:18:
         25:89:f1:90:70:11:99:d9:19:c1:b9:be:81:46:54:82:fd:ab:
         7e:4b:47:e7:75:80:7a:ad:5c:8c:64:2d:fd:3f:d2:22:0d:77:
         94:2e:9e:d4:42:f3:bd:30:a4:b8:91:8b:64:2f:24:85:76:2f:
         b2:f6:e9:78:b7:a9:a6:fb:54:91:b4:87:3e:9f:04:68:8a:36:
         a6:3a:bb:ae:0c:ac:b5:c2:e6:a0:70:e2:e8:a8:24:af:55:89:
         11:11:92:fb:93:2d:38:47:9c:81:39:4b:5a:45:ff:8f:fd:bf:
         19:74:f0:1c:49:3a:0f:01:3a:47:f4:16:bd:de:d3:f5:ae:a9:
         47:54:d5:5d:ed:ad:90:9a:ae:95:aa:bd:1e:ea:85:b7:70:23:
         f2:e5:44:7b:09:82:5a:7a:30:24:df:c7:a6:83:67:cf:20:f4:
         2b:51:34:de:ef:5c:8e:16:a9:7c:b4:af:e8:73:96:be:fb:c5:
         c8:01:31:6b:e1:d2:18:dc:71:74:0e:0d:cd:5f:0f:59:8b:71:
         8a:2b:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:35 2025 by rpki-client