Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/459748ee-0666-3ac6-8cd8-90d0a4d1f00f.roa
File:                     459748ee-0666-3ac6-8cd8-90d0a4d1f00f.roa (raw, json)
Hash identifier:          o3aQbUAa3prmMpOOLjUoc2rKtJm7FUQucCGhKgACq+U=
Subject key identifier:   9A:FC:2B:13:DF:B6:3C:18:6F:92:27:88:E5:54:73:37:7E:5C:A2:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BE6FEE27B41BDC459A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/459748ee-0666-3ac6-8cd8-90d0a4d1f00f.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396569
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:be:6f:ee:27:b4:1b:dc:45:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=004af3ee-dd3e-4872-82a2-80f1b14cbcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:8a:96:75:a7:34:a9:5a:72:06:88:6c:a5:
                    c0:82:4f:31:ad:ec:d6:0c:67:a5:cd:0c:a7:b3:6a:
                    f9:10:55:4e:8f:76:58:96:6d:fe:eb:17:01:98:21:
                    10:fe:b7:d1:d0:9d:43:a3:fc:fe:2b:4d:c8:be:fa:
                    7f:fa:12:08:c5:53:35:d2:86:9a:fe:b7:5f:3b:0e:
                    d1:38:0f:47:3e:4e:88:fe:ef:1f:c5:1f:45:6d:b1:
                    53:8a:21:4f:12:39:7e:e0:9e:12:3c:39:ee:14:f9:
                    d3:64:53:66:23:e0:b6:2d:e9:0a:b7:8c:d7:2f:1f:
                    99:7b:84:c8:67:b4:4e:1d:14:7e:f8:b9:6b:fa:45:
                    42:2d:76:0f:64:aa:61:b9:de:2a:1c:85:8c:d1:f9:
                    29:2d:a5:30:01:ae:19:c4:4d:5e:68:51:7b:a6:2a:
                    12:63:50:77:c8:64:4e:f6:af:08:d5:d6:04:f4:51:
                    e9:4b:5a:1d:ef:ff:a1:0c:9d:a9:d6:c0:a9:4b:58:
                    8d:5b:a1:c3:b5:18:f9:4f:58:de:6e:a8:80:14:0a:
                    0c:0d:dc:08:29:6d:95:30:c0:dd:5d:af:3c:ff:76:
                    ad:da:0f:c3:93:d3:7f:01:53:d6:89:73:5e:8d:ce:
                    b4:7c:4d:8c:ee:59:36:59:1d:fe:61:a3:a1:b9:a9:
                    cf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FC:2B:13:DF:B6:3C:18:6F:92:27:88:E5:54:73:37:7E:5C:A2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/459748ee-0666-3ac6-8cd8-90d0a4d1f00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:59:81:d1:8b:a0:50:2f:98:40:89:8f:ea:f4:6f:af:a3:d5:
         87:98:31:6e:0d:95:53:45:dd:71:31:e8:ea:34:6f:0a:c7:84:
         92:a9:72:4d:9d:f8:bc:8a:96:99:8c:82:82:1c:d8:22:6f:48:
         a6:08:bc:f4:1b:60:b5:3b:b3:88:1d:47:29:60:f1:7e:08:b9:
         2a:7a:50:b9:30:f5:62:39:b4:36:9f:35:ce:76:e5:5c:c6:2b:
         e5:75:04:f7:5b:89:8b:d0:48:e3:75:84:35:48:b0:f3:4e:1b:
         58:d0:2b:5d:72:a1:4b:37:42:01:63:ff:d6:97:3c:25:68:02:
         ec:30:14:cc:9e:75:f3:95:28:71:10:c4:89:b1:bb:c4:3b:e0:
         40:f8:0d:39:d6:97:d1:b4:16:ef:8b:57:dc:29:ef:93:c2:74:
         8c:96:bf:65:22:c7:81:cd:6b:7f:ed:81:e6:b3:01:69:06:be:
         4a:65:01:d5:e0:60:eb:1e:20:10:af:19:dc:91:fb:6b:d1:c9:
         36:a1:e7:ff:fa:c0:55:01:55:cc:48:61:05:b3:af:af:03:fa:
         44:43:89:49:f6:ba:c3:81:59:e5:03:09:29:27:d2:c1:95:d4:
         47:31:a6:97:a4:ba:ed:6a:77:5b:af:13:6c:1b:68:f4:2d:2a:
         a3:65:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:25 2025 by rpki-client