Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c635403-78ab-3487-9114-86eac9debdbf.roa
File:                     3c635403-78ab-3487-9114-86eac9debdbf.roa (raw, json)
Hash identifier:          MivDQg3GCl8cYXSv7AXh5zmJN0YSmkJaiQ0gGCiYz60=
Subject key identifier:   B4:7A:94:18:3E:00:3E:42:C5:B0:47:04:13:BB:E8:D4:94:C3:3D:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB64B06BB7BE3A77412E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c635403-78ab-3487-9114-86eac9debdbf.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396608
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:64:b0:6b:b7:be:3a:77:41:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=14f7eb25-db31-48e7-b9a4-f768b821e3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:54:e6:ae:94:95:f8:07:3e:fa:c1:34:ee:
                    da:58:c5:92:31:49:50:89:46:70:ec:47:c9:fa:7e:
                    5e:a3:d3:c7:71:81:89:2b:08:4a:53:15:0d:21:f1:
                    7e:b9:e1:2c:31:8d:44:24:1d:54:5a:97:57:de:60:
                    2b:19:2b:ce:00:92:3e:70:da:c3:1d:bc:43:a1:4a:
                    3e:bf:b1:d1:10:06:cf:28:56:c1:84:f0:04:f5:64:
                    27:09:91:ed:1a:94:26:2c:8e:c7:6a:7b:cc:4c:9c:
                    2d:88:0c:85:b6:23:90:d2:f9:f2:32:ba:69:63:5a:
                    a3:a4:a7:6d:2d:1e:7c:ea:9b:71:29:91:f6:a6:92:
                    ae:89:ce:f8:e7:36:41:12:58:a8:eb:a0:6c:87:51:
                    f9:f8:72:a1:2e:fd:7f:bc:eb:3d:1f:29:49:2e:fe:
                    3b:cc:89:5a:d5:05:da:f2:b1:b8:75:44:2a:47:fd:
                    5b:34:3b:a2:e0:f9:6a:b2:0e:d8:7a:8b:dd:43:8e:
                    0d:01:ad:47:12:4e:f2:0d:53:f7:a1:ea:b8:4a:f1:
                    ad:15:3a:bc:27:4d:83:1b:06:48:18:ff:81:a6:e8:
                    b1:19:74:ff:7e:76:4a:e3:8d:b6:03:e5:c6:2a:d5:
                    56:3e:bd:03:1f:1c:48:02:21:e3:5e:fb:2c:e4:85:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:94:18:3E:00:3E:42:C5:B0:47:04:13:BB:E8:D4:94:C3:3D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c635403-78ab-3487-9114-86eac9debdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:8b:fb:4c:d4:cd:cf:4e:bb:a3:03:33:fe:0f:d9:6b:a8:
         0f:07:86:53:51:6b:7d:e2:59:f9:59:16:2e:6d:e2:87:7d:72:
         67:84:dd:9c:a1:d9:76:b0:b5:a2:db:7d:18:0c:8c:90:86:83:
         a5:6b:14:ca:34:be:7d:24:96:5a:b4:f3:c2:b7:02:a8:c8:6b:
         4f:96:36:d6:9f:48:8d:46:52:de:24:62:d4:4e:fd:ab:d5:30:
         1d:8e:51:39:e7:29:7a:41:81:a6:30:ab:da:3e:cf:af:7a:7f:
         c8:23:db:a1:51:8a:f7:c6:cf:a1:e1:69:97:a9:ed:a0:fd:85:
         85:8e:e4:6c:f7:00:6d:08:db:5f:23:2e:2f:6d:eb:d7:19:1c:
         ed:85:59:65:62:41:ba:ac:ac:d1:b1:8d:2d:95:28:91:11:33:
         cb:b8:bc:bf:4b:41:90:b4:31:25:aa:c2:fb:8c:e2:ce:7a:e7:
         6b:80:3d:7f:3c:c3:88:b2:37:84:27:a7:7f:35:82:e1:8b:d6:
         6d:20:b3:84:4d:1c:b9:3a:9a:6d:d3:9e:eb:d2:37:b4:17:db:
         15:94:86:bc:aa:40:18:88:1a:a3:23:ba:5c:f8:b0:e0:55:22:
         99:dd:ab:c0:ac:6e:ec:7a:3c:b1:d9:23:99:d1:97:08:4b:07:
         14:4d:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:15 2025 by rpki-client