Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa
File:                     4098cbd0-9842-33a3-97e3-c1f33675af83.roa (raw, json)
Hash identifier:          6YM/CRQIkw2PHfuZJhBHbvCgoe/nSTICRv/FBs18jMU=
Subject key identifier:   0E:8C:E3:7A:3C:33:E2:5B:BD:CB:80:A0:2D:D2:2C:DA:2F:B4:AB:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BA0B136B3CB48FD52700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396614
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:ba:0b:13:6b:3c:b4:8f:d5:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=7daf1a48-36ea-4d69-a6b7-a6d9f285cb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:48:61:de:69:aa:46:e4:bf:06:fd:03:6d:
                    5a:fd:da:14:48:c3:8b:1b:0d:c4:84:ff:02:3f:ac:
                    8b:3c:ae:6c:33:b9:80:64:40:00:24:dc:09:9b:53:
                    05:bd:73:e6:90:61:33:dd:e3:d5:44:44:91:07:5d:
                    18:54:91:4e:2a:02:92:9f:6b:06:9a:59:42:9c:19:
                    27:7f:76:71:da:e5:99:2b:62:37:d8:12:30:93:1a:
                    ca:8f:85:5b:96:c8:bb:83:bc:87:49:8c:b6:2a:dc:
                    a7:c5:1e:1d:f7:4b:e0:3f:b6:48:c4:6d:48:d9:ce:
                    14:c8:cd:92:8c:1d:cd:b6:59:fa:e5:92:f1:08:d6:
                    10:f0:98:01:b6:20:3c:02:fb:f0:c4:f7:e6:22:71:
                    f3:f5:1d:78:59:5a:ce:23:eb:3e:39:64:7f:eb:84:
                    92:b8:21:94:fe:b1:84:59:b1:41:2c:50:86:a7:a2:
                    34:2a:0e:ce:72:d5:41:85:f6:d2:b8:4f:a5:0f:81:
                    5e:c1:b8:b6:13:a3:cf:38:d5:94:d8:69:cd:6b:4b:
                    1f:72:5a:32:2a:0d:88:cd:d5:f6:a2:dc:2b:0b:f2:
                    99:4b:b6:2b:e2:52:96:fa:ab:53:ce:bb:8d:40:71:
                    8a:ac:60:2c:33:3d:c4:02:fa:5b:18:69:e9:a0:df:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:E3:7A:3C:33:E2:5B:BD:CB:80:A0:2D:D2:2C:DA:2F:B4:AB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4098cbd0-9842-33a3-97e3-c1f33675af83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:13:65:cd:49:79:b1:e7:7a:63:08:11:45:bc:57:6f:f5:f2:
         e1:98:fe:d8:d4:9d:83:f9:fb:5d:f2:69:7a:9c:04:63:d9:e6:
         b4:b1:42:18:ea:f4:17:cb:98:a7:b0:42:19:8c:09:4d:4e:47:
         f1:44:d4:e6:47:9e:8d:d2:eb:8c:75:8c:85:38:5c:c2:8e:59:
         70:20:84:12:fb:f0:ea:9c:e8:25:18:81:2a:b3:6c:2e:bb:73:
         9f:0a:d5:3b:7f:1f:d3:35:73:ff:82:65:63:5b:e0:ed:48:c1:
         83:72:33:7f:67:f4:56:15:7b:cf:97:dd:ad:03:75:ce:d4:e0:
         1b:2d:92:37:3d:6d:8b:be:b5:26:32:ed:67:23:09:46:2a:42:
         59:ea:b0:3d:43:fa:03:07:6c:61:84:4a:8d:06:4f:80:fb:55:
         0f:df:f5:3a:85:08:cd:ae:22:ce:65:81:14:d8:ac:05:a8:26:
         fa:6a:e3:77:03:64:46:dd:5e:cb:c4:82:96:dd:29:26:0f:2e:
         ae:45:d5:4d:dd:5e:a3:79:9b:1b:55:9a:41:84:54:b0:e6:5d:
         0c:ed:36:bc:e4:8d:86:7e:8e:9b:ef:c2:95:9a:04:b8:46:5e:
         0f:69:25:44:ed:ff:79:8f:e8:d3:07:f2:ff:60:ee:db:75:dc:
         ac:af:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:01 2025 by rpki-client