Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/531cfdbe-e13e-398b-9f94-a96a08e2fffc.roa
File:                     531cfdbe-e13e-398b-9f94-a96a08e2fffc.roa (raw, json)
Hash identifier:          VkEzEeIzp17WrQeQnc1nkinUNGGYTQLbl3oqt8dDFjo=
Subject key identifier:   18:66:19:91:4F:F5:F0:F8:E0:69:ED:8A:D8:FA:EB:BB:18:5B:21:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62E4C684F33E8AABD7C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/531cfdbe-e13e-398b-9f94-a96a08e2fffc.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396553
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2e:4c:68:4f:33:e8:aa:bd:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=7e784154-93cc-4812-9780-3f00c74d67db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:de:d5:bb:62:44:2b:1a:86:ac:2f:d5:19:
                    ae:73:80:53:d1:7e:60:6c:c5:f1:80:f1:c6:49:52:
                    30:62:b0:6b:20:20:f4:a1:af:01:2d:d9:d7:19:4c:
                    19:89:ab:6d:52:d6:4f:e1:9e:31:e8:88:86:b3:d4:
                    3e:12:09:65:c0:3d:7b:dc:98:c1:b5:6b:72:12:da:
                    e4:72:d6:65:22:f4:68:79:5c:ea:5f:ce:5f:bd:85:
                    16:f7:85:0c:ee:8b:00:e8:5e:02:b4:9a:2b:0a:19:
                    32:90:d3:2b:6b:14:b7:91:92:36:0e:6d:b7:10:df:
                    79:b6:cf:da:39:8b:c3:08:57:c8:f5:23:5a:08:21:
                    5c:49:c0:41:ce:14:95:f3:ee:9e:26:d2:a8:7a:80:
                    22:8a:23:fd:6d:e0:24:99:c9:30:75:75:47:d6:ee:
                    3b:28:1a:19:8c:6e:94:27:74:23:0b:ce:cf:a4:03:
                    23:b7:17:5d:4f:f2:02:db:f8:c1:d4:a4:53:2f:e3:
                    54:72:be:b3:a7:af:f4:cd:43:be:93:55:b8:9e:2e:
                    c7:f1:f2:0e:63:0d:d7:33:5e:10:d3:13:d6:ba:6f:
                    71:fc:13:cb:9f:90:b0:68:67:77:3d:d5:82:77:43:
                    d2:5d:04:da:53:60:0b:f8:f0:39:4c:c7:2f:bb:b5:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:66:19:91:4F:F5:F0:F8:E0:69:ED:8A:D8:FA:EB:BB:18:5B:21:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/531cfdbe-e13e-398b-9f94-a96a08e2fffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:51:11:11:03:04:75:e0:13:be:67:9d:6c:96:9e:27:3d:
         a0:b5:e7:b8:90:ef:1a:ba:52:76:a1:8e:54:85:8d:99:d1:43:
         bf:0c:7f:84:ca:70:14:8a:a3:22:92:6b:4f:69:38:fc:8f:8f:
         e1:57:02:07:8a:37:a3:a1:e4:53:80:88:13:50:27:a3:31:f0:
         b9:b9:43:3e:91:b7:cd:f0:76:cf:65:b8:b7:a7:a6:18:fa:db:
         9e:58:37:9e:bd:49:19:1a:ee:45:cd:0f:c4:2c:65:2e:f8:3f:
         76:39:a8:14:a4:bf:50:96:b4:32:44:ec:01:11:9e:fa:4c:b3:
         95:0e:c1:aa:31:e9:e8:54:67:3b:03:b1:69:dc:cc:2f:1f:91:
         45:5f:6b:f0:47:35:9e:6b:3b:17:7f:6f:3d:b4:59:af:50:35:
         c5:50:0a:32:24:28:6c:91:17:ff:24:5f:de:20:9c:b8:ed:96:
         cb:01:7d:f4:56:9a:eb:73:49:b7:bd:3d:be:af:91:34:4e:90:
         c9:da:d6:14:02:6c:29:c2:19:7d:9f:8f:f2:71:2d:6a:7c:3f:
         b6:6c:98:d1:34:a8:08:3d:69:63:63:9d:64:df:e6:18:8d:01:
         01:fb:7f:4a:8c:d9:1e:1b:0e:0b:68:05:2c:42:2e:28:c5:b3:
         d9:40:18:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:39:29 2025 by rpki-client