Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a9d4af0-f7d4-3b05-a3b9-3dcf508499b6.roa
File:                     8a9d4af0-f7d4-3b05-a3b9-3dcf508499b6.roa (raw, json)
Hash identifier:          4yUXxUwL5sjIX8KnLZhKOkzvhW/MErQ9j2Tm3rjSv3M=
Subject key identifier:   15:7D:3C:67:F1:BB:1B:B7:EF:87:23:50:E0:31:BA:77:60:DB:6C:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A761B6C36A1ECD085B5DE91C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a9d4af0-f7d4-3b05-a3b9-3dcf508499b6.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     396613
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:6c:36:a1:ec:d0:85:b5:de:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=a7a9e9be-10a0-4bc2-a7f0-87427505df72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:bf:d8:31:8e:8e:2c:ea:95:80:a3:98:88:
                    d2:84:18:62:55:fb:fd:b4:3d:7f:1a:99:fa:88:40:
                    8d:76:fc:88:05:2f:1b:ba:c6:a6:ce:e8:38:b7:88:
                    f4:ae:03:ed:28:bd:f3:fa:42:ee:15:3c:33:0d:d0:
                    fd:f0:9f:c1:d7:22:1b:a8:48:a8:aa:83:8a:dc:2b:
                    f7:ef:40:cc:46:a4:1c:54:df:db:63:0b:a7:ad:4e:
                    bd:16:43:9e:62:d5:9b:0c:7e:aa:49:a4:1d:53:cf:
                    2f:6c:0e:c7:5a:79:11:81:64:79:bd:e5:63:fb:89:
                    a1:98:b6:a8:0f:41:ec:51:61:f9:f8:34:54:3a:25:
                    72:fd:64:95:73:bf:e3:65:55:9b:b7:02:f1:93:80:
                    9a:89:29:82:b2:d4:51:57:ac:56:16:4b:ba:b0:ae:
                    75:75:a1:76:7f:14:d8:4f:c3:8a:74:74:cd:b4:5c:
                    37:2f:bc:d5:01:de:4f:aa:6f:0f:4d:ef:89:c0:68:
                    11:91:00:1f:52:6f:31:65:06:8c:9d:5f:95:65:6e:
                    ff:cd:fa:54:0b:df:a6:09:02:93:ee:08:79:aa:9d:
                    49:12:e4:dc:63:cb:a3:13:5b:dd:5e:68:99:cd:23:
                    1d:21:01:ea:a3:f8:f3:f0:9e:3b:89:8a:81:63:5c:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:3C:67:F1:BB:1B:B7:EF:87:23:50:E0:31:BA:77:60:DB:6C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a9d4af0-f7d4-3b05-a3b9-3dcf508499b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:11:c5:69:87:40:06:0a:8c:5c:c4:33:50:d9:e1:e1:0a:02:
         26:70:8f:81:3f:9d:e7:f8:81:d5:b9:f7:36:9b:7e:f2:66:81:
         58:60:fc:5b:e9:16:ab:87:c7:b8:89:54:4c:8f:9f:f1:8d:7b:
         f4:b0:5a:4a:ee:86:5d:17:62:5e:98:6d:1a:61:24:b6:92:a5:
         da:87:72:c2:a7:77:b4:d5:74:89:d2:fe:43:f2:b9:4b:28:89:
         e6:0d:07:56:85:ec:66:45:20:1d:84:64:37:13:41:41:18:4a:
         08:c0:fb:6f:2e:12:81:23:da:22:75:8c:0f:c6:ea:b8:7a:f0:
         c2:6c:53:99:d8:cc:95:7e:b9:2d:02:e6:50:06:86:8f:af:74:
         ce:a6:f9:6f:31:2c:62:c7:3f:2c:62:82:5c:86:93:a3:be:48:
         bc:d9:96:89:56:28:d3:66:a9:f7:0d:7a:cd:d8:a5:49:54:0d:
         39:6c:2a:2a:24:c3:d5:e4:fd:fb:02:17:d0:42:32:89:76:92:
         d9:b5:74:61:b7:e1:88:3f:3d:cb:6c:99:b2:44:83:58:78:f0:
         67:f5:38:1b:0e:f8:23:0a:88:81:55:1c:36:31:57:8c:02:d1:
         1c:76:55:f0:f1:1f:1e:a3:46:e9:7f:e8:54:fc:48:e2:1e:ae:
         52:0c:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:11:43 2025 by rpki-client