Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7089330f-e3e1-360b-bf64-9f37eedaa61b.roa
File:                     7089330f-e3e1-360b-bf64-9f37eedaa61b.roa (raw, json)
Hash identifier:          uRWXZQ1PmEvipyHmi3HkyPx5E8rP958WxUTRk7ZGOQA=
Subject key identifier:   E5:B9:49:DD:5B:4C:FD:9C:00:D5:AD:FA:68:31:FB:37:14:06:40:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62E677A13DDE7E2774F20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7089330f-e3e1-360b-bf64-9f37eedaa61b.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396587
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2e:67:7a:13:dd:e7:e2:77:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=2f31b294-8a22-45e3-b964-e7a9775d5531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:0b:0a:47:14:d4:a9:10:ee:0b:f9:11:0c:
                    6a:7b:c4:e7:2e:93:59:62:a3:23:26:cd:81:8b:b8:
                    70:48:fe:aa:6a:eb:d0:40:42:fe:19:a5:08:63:c6:
                    15:0d:cf:3f:e5:4e:76:45:2a:21:da:cb:3b:32:96:
                    2d:ab:ed:3c:61:2d:f9:58:0a:96:90:14:52:7a:3a:
                    14:a4:c6:40:6f:a5:f1:78:a9:a5:33:07:ff:8a:45:
                    2a:d5:d2:8d:ca:ed:63:32:36:28:04:73:ad:ab:40:
                    48:62:ed:8c:37:e1:93:fc:8f:18:aa:33:16:c7:04:
                    89:42:e1:5d:39:6b:1b:07:96:59:cd:bc:50:71:19:
                    a5:c1:48:7b:2a:9f:7d:c8:3c:b2:02:22:a3:4e:a9:
                    a4:cd:f8:e4:72:b9:36:d6:97:20:27:5c:3f:73:15:
                    59:59:36:d2:41:26:64:66:ff:38:20:d2:39:a4:47:
                    72:c9:cf:ed:fe:fb:d9:56:3c:00:86:57:cf:ad:75:
                    76:44:24:7e:9a:f4:57:76:d4:19:a3:ab:9f:f2:55:
                    20:bc:28:0e:6e:e8:f0:bf:4f:8e:0d:79:a6:ac:7c:
                    5d:85:ce:5f:ba:69:94:ff:aa:73:07:bb:cf:39:41:
                    b1:aa:17:05:d3:fc:ed:09:83:e7:1b:99:72:a4:74:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:49:DD:5B:4C:FD:9C:00:D5:AD:FA:68:31:FB:37:14:06:40:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7089330f-e3e1-360b-bf64-9f37eedaa61b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:15:97:e7:e4:6c:23:f5:31:1e:11:e0:2c:88:af:45:b7:e9:
         dd:ea:d3:45:f2:42:e3:05:82:dc:69:ee:e5:21:ac:63:23:62:
         55:38:a0:a1:ca:9b:f7:83:00:7f:f5:32:59:6a:74:1d:f3:d8:
         ae:4c:4c:8a:7d:0c:ff:db:d8:47:38:72:43:69:fd:40:83:cb:
         51:f6:e0:d5:ed:7e:b5:bc:0b:ea:dc:27:fe:9a:b4:d8:fe:01:
         b5:43:c4:cd:d8:b5:23:b3:da:d6:d2:70:80:55:b8:a7:a7:d5:
         28:96:26:06:b3:3e:c2:54:5b:1b:7b:bb:98:20:e4:24:5c:24:
         c7:61:a9:36:47:ac:99:7a:0a:9f:22:5b:70:7b:6a:58:e2:1b:
         cb:d0:3a:4d:16:0b:b2:49:d9:17:db:f7:79:97:fa:6f:81:7a:
         07:d9:81:ff:02:7d:1e:b3:f1:fb:fa:66:4e:58:95:3c:e7:41:
         84:da:5b:7a:db:c2:8a:4b:46:b9:c3:31:02:f5:5a:90:b7:42:
         f1:da:13:ce:04:43:75:2c:b8:e3:d8:f0:66:e2:89:29:71:69:
         68:c5:de:a3:c2:47:5c:2e:63:48:01:1c:0f:fd:92:eb:70:90:
         7c:c0:61:da:82:98:55:5d:73:ee:91:5a:a2:68:b3:4d:ea:ac:
         71:92:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:28 2025 by rpki-client