Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb06f1c2-45ee-32e7-ae26-b542dd94929e.roa
File:                     eb06f1c2-45ee-32e7-ae26-b542dd94929e.roa (raw, json)
Hash identifier:          olwmPo91fY01GHnHKhRTCameGHVSfy2WG3bbw8jK28k=
Subject key identifier:   6A:F7:22:9D:AA:B9:17:1F:AC:60:AC:38:6B:73:DF:70:67:18:01:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A60F058AF74BEEB0C2EBA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb06f1c2-45ee-32e7-ae26-b542dd94929e.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     397193
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:0f:05:8a:f7:4b:ee:b0:c2:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=2140d4e3-adf8-4740-9542-c48ceefaf6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:75:58:bd:7d:48:57:cd:62:22:71:2f:fb:
                    e7:96:d6:73:57:bb:d4:e0:c8:62:23:ac:70:02:e4:
                    b5:eb:e1:ed:dc:86:fa:38:67:7b:6c:9a:f9:df:d3:
                    fb:23:95:e3:f2:57:e3:b2:dd:97:d0:20:36:62:f0:
                    33:8b:97:5b:5a:01:c6:3e:10:ba:90:0c:72:41:67:
                    3d:75:e0:f1:b2:2d:96:b5:f4:61:39:6e:15:ec:92:
                    18:f6:ca:0b:5e:f9:56:8e:fe:18:da:af:9a:91:25:
                    f7:78:20:11:46:99:cc:28:eb:7a:a1:56:1c:2d:19:
                    cf:c0:2e:e2:44:f8:62:0e:d3:f5:d3:08:ab:95:93:
                    21:4d:1d:78:85:bd:d7:73:c6:18:06:59:79:fc:2a:
                    2f:40:a3:24:6a:43:b4:7e:7c:08:df:94:ea:69:6d:
                    0e:3e:74:38:4e:cb:4c:97:01:12:f1:1a:bb:2e:bf:
                    0b:2d:8c:28:69:65:15:9b:57:0e:04:5c:97:cf:cf:
                    9e:e0:bf:5b:53:54:86:dd:b1:dc:26:f5:0d:62:ee:
                    b5:33:15:e3:9b:8b:43:96:53:8d:9a:cd:ec:2d:39:
                    da:8d:d4:05:e7:fa:e4:3e:bc:08:7b:e7:bd:52:d2:
                    8d:4d:98:a4:2d:83:50:ce:14:22:37:7f:be:b5:ba:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F7:22:9D:AA:B9:17:1F:AC:60:AC:38:6B:73:DF:70:67:18:01:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb06f1c2-45ee-32e7-ae26-b542dd94929e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:80:8c:d1:77:e6:38:c3:7a:4d:57:b3:05:ec:5e:81:6f:92:
         65:52:b2:44:98:46:fe:2a:4e:14:5d:e8:6d:f4:96:61:f1:5b:
         d0:7d:da:b9:40:34:fb:75:5d:b3:80:7c:fa:63:8a:be:fe:5c:
         00:5b:17:cb:4f:1b:01:c2:95:b4:e6:e1:f8:37:3b:10:16:99:
         d2:30:b1:a7:30:7d:08:42:da:cf:1a:55:46:08:06:2d:77:e3:
         1f:9d:9d:0c:eb:03:bd:47:f3:ec:b2:ea:d8:9c:bd:d7:92:42:
         1f:ed:b4:38:93:d0:43:08:b2:ec:a3:51:2c:2b:c3:c3:ce:d5:
         b6:7a:4e:37:5a:02:6f:9c:91:c6:6d:a6:2c:d6:41:02:60:b1:
         5e:42:f4:26:e2:0c:1e:74:b9:50:3f:1f:ee:9f:73:9c:47:38:
         3a:55:73:43:f5:10:36:98:f7:09:e7:1b:e1:b9:d2:c5:05:6d:
         c2:4e:49:45:9d:f8:f1:1e:b3:25:9c:2a:33:3f:cf:8c:3f:70:
         a3:64:33:be:6d:3d:1a:66:0c:9e:ff:47:8c:db:b4:2c:c9:67:
         8a:56:7f:25:49:9f:a7:28:65:24:8a:54:84:54:27:e7:ca:82:
         c2:6a:bb:72:26:03:3c:c7:da:e2:fd:7e:00:2a:b2:80:2e:08:
         c9:5e:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:02 2025 by rpki-client