Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/933dad01-21a5-3bab-b926-c513941ea36a.roa
File:                     933dad01-21a5-3bab-b926-c513941ea36a.roa (raw, json)
Hash identifier:          R1QaEGtelhkMjxyt7hRrWmg9DtR71TU/msecqeMwcRs=
Subject key identifier:   E9:9C:A6:75:C2:64:20:D2:EF:81:8C:F3:AA:59:9F:4C:EE:A8:49:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B964184EF9624D5731A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/933dad01-21a5-3bab-b926-c513941ea36a.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     396613
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b9:64:18:4e:f9:62:4d:57:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=1703d58d-2dd7-48f8-8450-3dbd56a1df0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:f0:88:0e:6f:32:a0:6a:52:d4:66:93:6f:
                    12:9d:74:7d:4d:68:6f:8e:33:eb:d2:b1:d9:13:a8:
                    28:79:fb:98:62:88:be:11:67:ba:ef:61:28:cf:74:
                    2f:93:99:71:f5:d3:7d:91:4e:b8:1e:f0:6f:4c:03:
                    2d:9e:3f:c5:64:7f:5a:bd:bb:e3:fb:0c:d7:d3:4a:
                    15:4c:79:3b:b2:3b:38:f1:f1:8d:2c:6d:b5:73:1f:
                    a3:67:80:cd:a4:51:6b:30:2e:ca:c0:2c:da:26:d7:
                    cc:0e:86:c0:73:a9:7c:7c:ea:62:78:08:b7:03:4a:
                    a1:05:3d:9a:a0:69:0c:2b:5b:97:c5:e3:d8:18:1e:
                    5c:f4:26:c9:cc:bd:8e:01:6d:0b:2f:7e:61:80:9b:
                    13:01:7d:2f:87:bf:ba:29:7a:5a:ed:44:ea:51:c9:
                    fe:2a:16:c8:37:67:40:32:4d:90:d0:c2:05:11:03:
                    10:86:29:7c:5d:0e:6b:af:59:98:ee:0d:31:54:e9:
                    6b:fd:d5:d8:87:77:bd:3b:7c:99:cb:56:42:97:7b:
                    34:3c:c1:b6:49:15:0b:3b:ed:18:ed:9a:f3:21:7a:
                    94:cc:fb:fc:5c:c4:21:ed:0e:6f:e9:80:a5:da:46:
                    0c:e4:bf:35:9f:9d:62:e1:b9:8f:43:ec:d1:de:43:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:A6:75:C2:64:20:D2:EF:81:8C:F3:AA:59:9F:4C:EE:A8:49:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/933dad01-21a5-3bab-b926-c513941ea36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ad:e4:04:22:14:40:f5:bf:92:68:ef:2a:1d:d2:23:a7:88:
         2a:e7:1a:7b:8b:58:59:90:2f:86:0e:0d:2e:b6:c9:95:13:33:
         03:d1:11:29:5a:8f:12:3f:0d:9b:0f:3f:66:38:1f:9a:b4:9e:
         c4:d8:88:96:94:51:78:7f:83:98:a7:1f:45:10:3f:7c:1f:e3:
         37:74:54:e1:ea:8c:cd:ea:33:21:ea:dd:57:ed:29:d1:5f:85:
         cb:63:8a:2a:d2:1c:ff:39:e1:4c:f6:42:b7:d8:b9:41:ab:ec:
         2d:0e:98:df:0f:d5:a5:87:5d:bd:61:d6:96:92:1f:10:1b:d4:
         15:ca:53:0e:28:f8:8d:7d:82:67:48:63:cc:35:bb:80:45:9a:
         76:8d:ca:6f:2e:21:a4:b9:d7:38:0e:ea:54:be:c5:4c:3b:93:
         f8:5b:a7:96:a6:8d:5e:63:c2:8e:5d:5c:65:bb:b9:87:28:cf:
         7a:62:fa:0f:d9:a3:d3:f7:ed:4c:8b:59:c8:8d:7b:63:db:bb:
         48:81:e7:73:6d:fe:79:90:f7:5a:f9:35:32:45:12:f2:69:07:
         0a:83:13:2e:96:6f:ed:42:e4:6e:99:26:48:bc:32:5f:b4:bf:
         63:36:d2:cb:9b:b8:5f:e8:64:3a:97:11:27:59:64:7e:40:a5:
         9a:de:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:54:38 2025 by rpki-client