Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91ad9e14-55a4-3b43-886a-fb998761b8ca.roa
File:                     91ad9e14-55a4-3b43-886a-fb998761b8ca.roa (raw, json)
Hash identifier:          6mnalaEqJiZ/h3vazI99YnBTCfau43ii3zxBBX/peyQ=
Subject key identifier:   C1:A4:82:03:1B:EE:6C:80:CA:30:C4:AC:03:D4:3F:C5:CF:DB:73:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BA2D365399765ED83180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91ad9e14-55a4-3b43-886a-fb998761b8ca.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396612
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:ba:2d:36:53:99:76:5e:d8:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=48fba1c2-3359-4fa9-8e9b-97d595fbfc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:b6:cd:61:3a:fc:99:70:b4:cc:c2:d1:a1:
                    10:1e:71:12:4b:95:5b:54:40:a0:31:ad:dc:0a:0f:
                    f2:67:a3:85:5e:43:71:a6:6d:a3:52:31:0e:7b:7a:
                    01:ea:6e:b5:c5:28:82:4a:db:b1:36:15:67:ce:89:
                    19:20:22:bf:cf:43:78:77:95:9d:a7:84:6d:df:c4:
                    89:5f:13:92:b8:23:9a:7b:8a:59:90:1f:1b:ac:e3:
                    25:29:7e:e9:a0:db:1b:34:6e:97:f1:d0:ad:e3:38:
                    ca:65:21:51:e3:39:1e:96:fa:50:86:38:5f:64:6e:
                    ef:90:5f:e7:a6:49:a5:71:e8:fe:51:fd:45:5e:0f:
                    8b:10:38:1e:cf:d0:d4:a1:dd:5b:01:42:a2:4e:17:
                    fb:80:d0:de:c9:86:3b:0f:13:95:1b:0c:9a:2f:8a:
                    2d:e2:12:f2:77:e6:13:94:7e:ed:cf:86:e2:0a:83:
                    b2:5d:10:41:12:3e:95:59:24:3a:1b:b1:05:04:79:
                    d2:da:fe:55:bb:24:33:28:33:bc:94:7d:c8:f6:ef:
                    d1:1d:a1:21:48:dc:1f:f2:82:4b:2b:82:64:b8:56:
                    8e:d9:a4:71:d4:e9:91:fc:d4:b5:28:6f:d5:73:e7:
                    f7:f6:03:1e:b7:2b:26:3a:0a:b9:1c:be:2c:13:8a:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A4:82:03:1B:EE:6C:80:CA:30:C4:AC:03:D4:3F:C5:CF:DB:73:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91ad9e14-55a4-3b43-886a-fb998761b8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ef:ac:31:c1:15:4d:ee:87:5b:63:62:ef:41:89:3e:43:2e:
         4c:ba:b7:92:93:c1:59:55:18:ca:e1:2f:83:08:5d:d2:3e:e9:
         56:8a:69:f0:08:b5:59:a8:8c:25:aa:7b:73:6c:40:f5:82:ed:
         f3:7b:ec:07:2a:f7:f5:2d:03:ed:a6:3e:fe:07:18:03:88:8c:
         ba:9f:53:a4:1e:58:51:85:83:19:a5:9f:2d:de:62:79:5d:3a:
         ab:34:73:35:d2:2d:d3:9f:38:36:9a:02:db:3b:58:82:7a:22:
         cf:1e:19:fc:68:28:43:6a:22:da:54:27:dc:23:61:9a:a0:e7:
         12:43:20:56:50:f2:7f:32:77:ca:c2:20:b4:f4:02:d5:98:45:
         6f:c8:8c:81:e1:3a:28:b4:8f:ef:8a:19:fe:6f:ba:fd:56:61:
         ff:49:55:96:c1:db:64:5a:c6:63:6b:99:6e:36:20:99:44:49:
         2b:dd:6b:63:32:b0:82:4d:57:04:5b:1e:77:80:32:eb:87:74:
         da:dc:af:34:f3:9f:d1:b1:fc:ce:0a:69:4d:29:d7:36:c1:2e:
         da:b6:b0:1b:4c:5c:f3:b7:ff:9e:a4:4f:0b:94:1c:c9:f5:bb:
         88:e0:b0:27:40:ad:8f:5a:67:5c:cd:62:52:38:b7:62:34:ba:
         7f:f3:9e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:05:22 2025 by rpki-client