Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa
File:                     e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa (raw, json)
Hash identifier:          Jy9NAND5XTJ2cwZKTNEASNUKYFtzrwBuYcA9oGLf4eo=
Subject key identifier:   26:5E:E4:6E:AB:E5:89:46:8E:95:BF:C1:61:39:7F:40:F7:C2:EF:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B86784C58CC2E4FC2100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     397204
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b8:67:84:c5:8c:c2:e4:fc:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=0e14fcec-bb43-410b-921b-f0e9cb8a5836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:66:ff:96:6c:83:ec:1b:61:4f:a3:16:72:
                    b5:6d:66:36:21:f1:8d:02:f6:ce:28:7b:0d:88:5a:
                    bf:e0:af:08:1f:2b:73:79:f4:9a:f7:54:a6:19:cc:
                    97:fe:41:35:83:fa:98:3c:68:21:13:93:19:c8:19:
                    77:18:ed:a2:72:36:32:3f:42:41:20:83:88:9d:8b:
                    98:4e:01:35:a7:30:c8:4a:f3:b6:ab:30:23:49:de:
                    db:d1:5e:3a:53:cc:00:28:7f:03:f5:b1:7b:37:5e:
                    03:fb:82:1d:73:52:ab:f6:65:15:32:d4:08:ba:3d:
                    58:6c:d9:e9:4c:e0:25:85:2e:88:ed:a3:dd:91:0c:
                    28:40:66:d5:18:c5:4f:6a:be:99:e2:75:13:f9:64:
                    c8:e4:73:32:e0:22:07:21:8a:03:59:c9:31:02:ba:
                    9d:07:f7:a1:94:f1:f5:7e:b0:74:69:66:ee:54:af:
                    3e:34:ee:af:a3:fd:30:74:60:f0:d5:2a:c6:a7:61:
                    7d:91:36:c3:3e:4b:a7:30:9c:61:69:2c:aa:31:cb:
                    e2:19:fb:bf:5d:8c:83:fc:5c:30:fe:81:e5:0b:7e:
                    03:f3:d0:39:2d:33:41:09:9a:eb:90:d0:66:06:18:
                    9c:1e:25:fe:79:88:64:62:a5:78:f5:69:cb:10:d8:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5E:E4:6E:AB:E5:89:46:8E:95:BF:C1:61:39:7F:40:F7:C2:EF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3c:f6:fe:bb:81:6c:56:1e:d8:42:38:24:f1:c9:d3:3b:49:
         c5:49:f2:45:eb:cf:51:28:23:43:cd:38:27:7e:65:6c:79:fc:
         43:15:06:0e:94:72:a1:db:4b:06:3e:1f:6e:4b:73:33:b9:b8:
         94:6f:f7:96:72:a5:6e:b0:c8:8d:89:12:7c:73:30:8a:b7:58:
         dd:9a:2e:f2:e6:a8:8a:e9:3b:90:93:87:19:d7:ba:a8:4d:99:
         00:c5:a8:4a:d0:48:19:1c:ea:cc:7e:8c:ca:88:0e:c9:5d:20:
         f3:81:7d:96:fe:84:a2:b5:fd:78:36:38:1c:32:b5:bc:20:6d:
         de:ac:c6:06:5a:7a:b7:81:1f:b4:b2:70:3c:34:d7:58:a7:09:
         19:89:56:38:ed:50:61:d3:c7:e4:75:87:06:81:7a:9d:8d:02:
         7c:8f:ed:af:d0:5c:b7:f0:89:39:c4:f7:55:9a:93:47:d5:be:
         3a:b1:09:bb:ae:34:75:95:13:82:7a:13:a6:9d:bb:57:53:05:
         d1:f2:f0:b6:56:de:2b:22:9a:92:14:27:ed:76:79:b5:d1:85:
         9b:56:f1:46:ce:62:70:c8:88:4d:b4:0a:fb:f2:b7:34:45:6d:
         97:55:d8:ab:aa:08:af:4f:ec:5e:c2:75:df:c0:1c:50:d8:88:
         03:7e:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:23:06 2025 by rpki-client