Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa
File:                     545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa (raw, json)
Hash identifier:          ckBISwZIn1O9xUBe2dJUMHF9omAzCIxmouWGs9r5jOQ=
Subject key identifier:   49:3F:7B:18:7B:87:57:7F:E0:36:E7:BA:44:78:5A:31:62:17:C3:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BBB04C91849326C46D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396588
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bb:b0:4c:91:84:93:26:c4:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=bd37bc75-500d-478b-86cf-c1d6c8016bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:4c:30:b1:f0:6b:ab:a0:7a:ff:cf:7e:ea:
                    30:b5:0e:95:f3:d3:74:84:91:c9:13:c3:df:54:66:
                    30:16:8c:5c:3b:9c:7b:3a:63:c1:fd:52:e8:62:1d:
                    55:cf:02:71:32:88:88:6a:8c:00:99:c2:52:f3:f1:
                    ec:6b:88:0e:3d:84:0e:4d:78:39:a9:d6:7c:af:4c:
                    3c:91:74:38:49:5b:46:6f:b6:f4:b7:af:4f:1c:2c:
                    dd:6e:16:41:e7:a6:e6:af:25:a5:98:3a:58:43:6d:
                    43:fb:34:8a:70:c4:e2:55:41:b5:31:d4:46:2c:14:
                    01:94:e1:ed:25:36:44:35:d2:a4:63:09:90:c3:a8:
                    8b:02:4d:98:37:be:37:ba:60:cc:1f:19:8e:34:a5:
                    f5:4d:b0:54:d0:b0:60:90:04:ac:15:ca:e2:08:2c:
                    3a:53:4c:50:68:b2:b5:dd:fc:37:f0:cc:d5:df:46:
                    1b:a1:4c:64:74:90:5f:e4:0d:bb:b2:39:c7:35:7d:
                    fc:b2:98:79:6b:aa:94:50:9a:13:a9:fa:e4:4c:9a:
                    a4:37:93:c2:c6:cf:b5:06:b9:6c:2d:c3:b0:0f:f8:
                    2c:f3:38:8c:d0:77:81:2d:cb:82:4a:df:5d:2a:a6:
                    b5:21:89:2e:9a:90:ec:bc:24:f3:1c:7f:38:d1:d5:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:7B:18:7B:87:57:7F:E0:36:E7:BA:44:78:5A:31:62:17:C3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:58:b6:1e:ad:94:4f:f8:17:33:ac:fb:5b:59:07:18:25:d7:
         db:3c:b1:2c:1b:d5:cd:3a:ae:c5:85:29:cc:1b:c1:2e:7a:11:
         3b:e2:d3:f0:09:29:e1:1c:e2:e8:e0:f1:b3:73:1f:bc:b7:31:
         32:ab:3b:c2:16:6e:9a:45:db:8b:33:ef:80:9c:97:94:c1:c9:
         9d:6c:1b:21:d5:f4:06:58:a8:c6:c3:32:59:1f:e0:3b:bf:5c:
         c1:d0:9f:33:9d:94:ea:05:be:f8:c3:f7:56:55:e1:e0:d6:ed:
         b4:25:b2:85:1a:e6:dc:57:49:13:c0:d8:32:87:92:db:52:f6:
         37:6c:f9:c3:12:00:ff:74:5c:3e:1f:36:ac:ee:e7:3d:0f:13:
         94:6e:ea:19:68:0d:31:09:b8:a8:bf:9e:8b:f3:cc:a9:59:89:
         ec:40:fe:7d:97:bf:77:40:1f:fb:68:51:0e:13:67:0c:b2:02:
         85:60:a6:62:4f:e3:e9:a7:79:e8:0d:a0:0e:2d:29:52:23:4a:
         c6:1a:68:91:cc:62:63:f7:ab:1b:5b:cb:f8:c3:0a:93:c3:97:
         f9:98:e5:5f:f6:ab:b6:57:f2:bc:0d:0c:26:d5:e9:8c:75:b2:
         6e:84:a8:e4:fc:05:7a:3a:59:28:69:7e:35:c0:0c:dc:d0:c1:
         ea:7d:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:52:59 2025 by rpki-client