Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aacea7e-e51e-3d93-ae2e-b2fe1655fd17.roa
File:                     5aacea7e-e51e-3d93-ae2e-b2fe1655fd17.roa (raw, json)
Hash identifier:          yMDNYuOGRd5eSXTF5JHzydSqOKWQR1saEp+sKuuRJMw=
Subject key identifier:   11:EA:1E:5B:9D:2C:8C:7D:27:57:5C:28:2B:0C:A2:9A:08:41:38:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB62B0A43D46AC3F3926C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aacea7e-e51e-3d93-ae2e-b2fe1655fd17.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396569
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:62:b0:a4:3d:46:ac:3f:39:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=4aaf236f-7c51-4d89-8598-570831905982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:0f:39:c2:72:8f:51:1c:ee:12:8a:7c:25:
                    ac:3e:6d:2c:a1:29:ac:6f:07:8c:60:b9:e7:0e:b5:
                    5e:9a:53:51:08:d8:ea:5f:f2:36:16:08:0f:4f:9d:
                    7f:94:f8:d1:8e:a6:61:0f:f8:3a:16:9f:2f:9d:cc:
                    e3:02:50:ae:d9:45:3a:38:a4:8e:51:80:98:ca:69:
                    a3:a1:7c:6c:1e:89:17:c3:73:bb:13:c9:a8:06:9d:
                    26:9c:c3:c3:30:cd:75:4b:c0:c3:36:10:56:ce:74:
                    ba:32:f0:f7:90:b0:97:45:c2:60:21:88:1e:6a:f4:
                    72:40:00:12:d6:bc:de:98:e2:2d:10:ab:4f:95:1f:
                    7b:36:45:23:15:2c:b7:3d:34:3c:51:30:6d:ab:c7:
                    d1:b8:fc:ae:e1:a6:72:b9:4e:41:28:4e:d4:34:89:
                    05:98:0d:0f:11:d4:c9:fc:dc:d3:6d:80:6d:e9:f9:
                    e1:69:80:7a:b8:6b:db:97:0c:1b:54:d1:62:02:73:
                    da:ff:2a:5b:7c:fd:0a:67:57:27:17:7c:a1:74:b5:
                    38:15:bc:c4:d9:5a:12:12:04:17:8a:b1:a1:7d:84:
                    b7:fa:f1:25:75:ef:03:aa:d1:87:c1:54:b3:5f:26:
                    65:aa:d2:5e:1f:c5:0e:6c:96:72:c0:ae:a7:26:18:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:1E:5B:9D:2C:8C:7D:27:57:5C:28:2B:0C:A2:9A:08:41:38:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aacea7e-e51e-3d93-ae2e-b2fe1655fd17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:66:55:e5:33:ac:14:f1:a0:09:4a:06:17:72:94:a6:d7:94:
         e8:58:24:09:4f:92:ca:c8:a3:6e:22:2b:fa:ea:b5:d3:39:fe:
         9b:66:31:e9:9f:f7:d8:42:e2:00:0e:1c:49:3c:d3:f0:6a:98:
         9a:27:df:16:44:66:15:03:cb:70:de:13:70:23:22:b2:a2:a2:
         17:6f:e1:a3:d3:f1:57:9f:73:2f:5e:8d:99:57:e9:f1:21:2b:
         a0:cb:cd:3e:4b:eb:2e:3f:83:44:62:6a:02:98:93:cb:a0:22:
         53:7f:04:62:4d:bc:5a:04:ad:2a:61:f3:94:12:72:b1:e9:ae:
         27:07:1e:5a:32:17:6c:46:1c:c3:96:d7:f2:5c:6b:df:ce:94:
         52:41:d5:6a:2e:db:fe:cb:57:ee:23:e7:b9:b3:53:5b:d9:0b:
         d6:c8:a5:e2:ac:41:63:8f:2e:43:b5:ca:13:a8:8d:cd:57:c0:
         f8:77:34:bc:b5:88:26:dc:5a:a3:07:98:41:1f:a1:c9:dc:2b:
         b6:55:6b:b8:90:c0:16:5e:79:5b:ce:a8:ed:63:64:7f:06:23:
         b2:38:b6:46:ef:2d:c4:51:46:aa:ec:ae:c3:25:32:eb:7d:a1:
         fe:5c:05:68:ae:18:f7:e0:a1:89:9b:9d:11:b5:68:4a:d0:71:
         2d:3e:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:19 2025 by rpki-client