Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aecfdaf5-f8ac-3f49-9aad-b446c8a985fa.roa
File:                     aecfdaf5-f8ac-3f49-9aad-b446c8a985fa.roa (raw, json)
Hash identifier:          MuMxfmWljoNlr8OmranVL6Huk1fbETnKEwDsJLZsVDc=
Subject key identifier:   6F:58:B3:2D:01:13:EA:6E:F4:B3:BE:56:F6:2A:90:06:3C:41:44:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB61AE9A61EF6F76783400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aecfdaf5-f8ac-3f49-9aad-b446c8a985fa.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396603
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:61:ae:9a:61:ef:6f:76:78:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=3252c961-2b12-40e7-87c6-8ff2cfe521d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:9d:7c:d4:67:dd:53:02:20:92:7f:8d:f6:
                    63:37:1f:91:59:db:55:4e:3c:94:83:7c:dc:eb:25:
                    44:1e:71:d1:3b:36:d8:7e:0a:f6:38:7b:f5:08:0e:
                    07:e3:f5:0a:90:13:66:99:43:c0:a4:aa:26:01:db:
                    ea:51:73:8c:57:ae:c7:b4:aa:67:74:0e:d4:7e:09:
                    78:44:30:c0:f5:2e:f1:cb:98:2d:5f:b3:b0:87:a5:
                    bb:40:e6:61:d5:70:f0:c6:8a:ba:e2:7b:90:10:f8:
                    e4:f7:28:db:78:cc:0b:57:3a:75:0e:25:0d:d4:f4:
                    b1:c8:d6:60:eb:ca:67:6d:3f:b1:0f:b9:62:df:eb:
                    6f:b8:82:13:f4:4a:9f:8d:f1:e1:86:ab:f6:26:bb:
                    ee:04:51:5c:f2:04:9a:e3:01:d1:07:88:3c:71:c4:
                    27:f7:52:1c:4d:8f:26:d7:ee:8a:95:ee:55:49:92:
                    42:70:b4:92:12:f0:42:23:dd:ae:de:8b:72:5c:09:
                    19:d7:d3:31:bb:04:48:c0:88:db:07:12:d0:4d:a8:
                    b9:91:54:52:59:93:f6:e0:ea:ee:fd:27:29:a8:a4:
                    d9:a4:97:ee:5a:b1:0b:51:47:7e:29:ea:37:b5:ec:
                    1c:c4:6f:6e:f7:36:e7:80:15:07:6b:dd:45:e8:55:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:58:B3:2D:01:13:EA:6E:F4:B3:BE:56:F6:2A:90:06:3C:41:44:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aecfdaf5-f8ac-3f49-9aad-b446c8a985fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:72:cd:98:1a:f5:66:f2:e7:53:cb:98:7a:16:27:0f:77:f7:
         eb:50:07:29:4c:3c:65:8a:79:cc:cf:22:c1:ac:f3:04:86:da:
         68:14:22:e4:cc:e2:ba:98:7c:ff:29:ee:7c:5a:6e:d0:6f:47:
         c9:18:36:ba:6f:d5:f4:b7:38:3b:fc:4f:02:7f:11:22:71:a3:
         b5:28:4e:4e:6b:1a:a7:51:e3:f2:59:72:5b:2c:5c:6f:85:b6:
         35:44:36:15:5c:ba:99:8f:2c:a2:6f:6d:06:1a:63:0c:f9:b6:
         74:97:87:1f:e9:94:48:11:ad:dd:f9:03:b6:bc:d2:f4:48:34:
         64:b8:ab:41:10:0f:ee:5b:a4:cf:11:e0:25:59:4d:c0:d8:f7:
         5d:8b:42:4a:15:ac:e0:23:b2:c0:3d:91:39:c1:db:ec:7b:78:
         16:c7:7a:48:a1:d4:fc:4a:b5:e1:ae:5d:9d:fe:d9:94:74:da:
         b1:80:f4:9b:db:a5:45:f0:cc:68:0a:19:a3:b5:12:22:c8:95:
         c3:18:99:69:58:55:99:91:16:eb:f6:63:11:06:96:2d:27:9e:
         15:31:49:df:a4:18:c1:27:a0:50:41:44:9c:67:e9:cd:7b:e1:
         7c:99:10:5d:5b:1a:d7:b4:da:3b:f3:12:b0:65:c9:8f:8a:37:
         90:96:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:20 2025 by rpki-client