Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5bd91bf-4032-35f7-b943-a77fd5d89e4c.roa
File:                     c5bd91bf-4032-35f7-b943-a77fd5d89e4c.roa (raw, json)
Hash identifier:          fKS43pmddjhkj3jpExlR/zHDzfCxyNiRjLjObBkZTco=
Subject key identifier:   B1:A9:04:E3:7B:70:3A:55:6D:26:8A:D3:EB:32:CD:68:4C:2C:ED:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB67C867C739094F4E1F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5bd91bf-4032-35f7-b943-a77fd5d89e4c.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396575
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:67:c8:67:c7:39:09:4f:4e:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=cf3de893-f405-4065-81ea-a254cf5a4c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:d9:59:65:e1:f0:48:83:86:bf:96:e3:13:
                    e9:f4:5a:8d:bd:78:40:73:b1:9f:38:02:df:de:0e:
                    2c:4a:58:88:8e:ee:fc:38:cf:f3:26:ee:c8:78:bb:
                    c0:18:c4:15:b4:a4:ca:11:01:81:a7:f9:87:f6:11:
                    d1:57:7d:ee:63:6f:2a:9e:d6:5e:7e:54:0b:55:23:
                    51:e3:fc:af:1e:48:dc:87:dc:f9:b4:aa:d1:e0:ef:
                    d0:f5:61:ce:c9:24:4e:41:66:04:d7:b2:38:6c:82:
                    b3:96:21:f3:16:99:1b:24:5a:59:76:42:12:29:f5:
                    dd:8f:c2:b6:ff:4f:d9:51:9c:dd:6f:3c:e5:08:90:
                    46:02:78:d9:af:23:83:f1:6f:52:30:b4:dc:26:e9:
                    a8:a7:c4:57:19:aa:e4:f5:22:5b:f1:6f:6d:c3:f0:
                    b5:66:94:52:8e:a5:c5:aa:49:73:04:35:a1:7e:a5:
                    5e:2a:3d:6a:71:f6:21:eb:c7:12:84:ef:dc:eb:0e:
                    6d:a9:72:1b:ef:e5:78:49:f5:06:8c:47:07:df:26:
                    2c:c1:c6:11:ad:d0:5f:4a:92:5f:ea:bb:95:77:12:
                    af:2a:7a:2c:10:7a:23:a7:0e:ba:e3:95:0f:00:f0:
                    93:00:9f:bb:4b:ec:5c:29:c6:b5:60:ff:69:64:65:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A9:04:E3:7B:70:3A:55:6D:26:8A:D3:EB:32:CD:68:4C:2C:ED:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5bd91bf-4032-35f7-b943-a77fd5d89e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:25:ec:22:c0:63:f8:2f:89:f4:b4:ae:b1:83:0c:b1:01:bd:
         dc:c2:68:ca:fe:f3:24:0e:9d:3f:1a:fb:27:93:ad:e7:de:c7:
         00:b9:1f:fc:53:29:b8:dd:ec:99:0e:91:fe:17:26:4c:3d:c8:
         97:a2:d3:a9:aa:e6:cf:13:15:64:07:eb:18:5c:0b:f3:cd:75:
         a8:70:df:9c:c4:2d:a4:36:b3:c3:c9:d4:2b:b3:1f:41:65:61:
         11:88:63:4d:99:44:2e:39:11:e5:25:f8:66:43:4f:d0:c7:4e:
         b0:5e:d8:41:dc:d5:f1:76:0c:e4:84:bf:bc:91:a9:6e:ee:33:
         08:71:ea:0a:6d:f6:59:a3:2a:20:84:2b:75:20:15:e7:ea:69:
         ad:98:3e:a9:a9:2d:f9:d8:22:36:79:e6:a6:b7:e8:1a:c5:d6:
         dd:32:cd:bd:3d:4f:35:0d:37:19:49:b0:f6:17:11:72:d6:92:
         a4:7d:bc:fe:7f:6a:cd:89:87:ee:36:4d:0b:2b:4f:f5:10:de:
         3c:33:6e:a2:cb:0c:fe:00:0d:42:2a:18:04:cd:14:9e:30:b6:
         9c:4f:4d:ec:0b:36:77:e2:be:0e:25:44:45:ae:04:b3:46:f3:
         46:96:90:9b:02:6e:1d:f0:c6:0f:1d:28:c9:24:cb:7e:d2:e3:
         f9:89:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:21:20 2025 by rpki-client