Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa
File:                     f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa (raw, json)
Hash identifier:          TrV6tOrW35IPzfka3wPhoKWKuvJUxgotwAMsM+iFp6k=
Subject key identifier:   24:EC:20:97:06:D7:25:A8:D7:53:18:2B:9C:A5:4B:5E:04:ED:22:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A617BB38C9626FBB209D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396549
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:17:bb:38:c9:62:6f:bb:20:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=d23d4f4c-05a3-42f9-bfa1-1fe5a8c22b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:d9:9c:9b:b4:cd:61:c7:f7:98:16:25:32:
                    21:f4:bf:05:33:b3:49:7d:dd:52:f3:97:20:53:21:
                    44:55:8f:3e:42:6f:a3:a5:51:94:7d:a3:46:23:55:
                    38:7d:bb:86:86:12:cc:c6:b1:73:9d:48:64:8e:64:
                    97:27:5d:18:39:78:df:d3:fa:54:eb:db:ed:f0:d2:
                    af:b5:10:72:c9:c0:d9:30:10:bd:e0:70:6e:d4:24:
                    0a:fb:fa:c5:82:7f:e7:f4:33:14:b0:6f:85:dc:51:
                    52:7f:37:5b:85:fe:22:da:5a:3d:7f:4e:29:db:d6:
                    1a:02:82:44:97:54:af:d1:ef:a9:a0:12:72:1b:26:
                    22:7f:bf:4c:0a:22:93:57:b0:c0:cb:52:42:e5:6d:
                    a2:6a:2a:b2:5f:ef:51:0e:03:64:fd:e3:af:cd:ce:
                    58:39:03:6d:10:7c:e0:19:da:24:5d:3e:0b:22:19:
                    e6:f8:56:cb:4c:a0:d8:dd:f7:30:34:dc:da:64:ea:
                    ce:e0:cc:27:8b:90:e8:a1:2a:40:4b:1f:77:f8:ce:
                    3b:b8:ba:ab:5e:d8:c0:74:c2:74:26:99:bf:1d:56:
                    00:61:d2:6c:7b:de:75:2a:47:54:71:47:73:b4:51:
                    c7:58:19:f6:f1:0c:f8:b0:78:31:6d:6b:85:89:c6:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:20:97:06:D7:25:A8:D7:53:18:2B:9C:A5:4B:5E:04:ED:22:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:7c:99:c4:e0:30:13:f0:df:a3:2d:2d:93:b7:60:a2:94:
         b6:e6:c6:68:81:ba:7f:4a:6d:10:b7:74:d7:8a:47:4a:71:8e:
         9d:72:b5:52:3f:69:75:80:67:ec:d0:1b:77:ad:d9:39:f7:63:
         b4:c0:12:34:29:12:07:92:f0:b6:33:d6:6c:db:96:60:2a:43:
         73:ab:9f:f6:0a:03:d2:ce:69:a9:4f:4a:47:be:0a:eb:a1:9f:
         b7:46:60:c0:ae:65:1d:70:61:36:e1:3a:47:35:2e:4a:33:62:
         3b:74:99:18:34:c3:2e:b6:ce:57:61:8c:22:f0:42:0c:40:6e:
         3e:7e:ac:37:c1:21:62:ea:88:6a:9f:56:bb:51:a3:d6:d3:bb:
         60:03:ac:76:e5:d5:c6:9b:e9:60:6c:17:af:3e:0e:f6:de:57:
         a3:4a:dd:25:7a:98:4d:2f:11:c9:ab:2a:b7:b8:14:55:d6:19:
         d8:fd:fb:38:fb:b8:f5:f3:7d:4b:5d:52:9e:9e:d6:31:fb:d4:
         31:16:2e:be:01:a5:3f:a1:a6:aa:dc:79:f0:3e:2c:a6:27:1e:
         61:27:e2:92:e8:66:db:24:11:08:b6:9e:85:9b:49:13:e3:2f:
         46:f0:b0:34:75:7b:b0:21:47:19:f4:1d:d7:d3:3a:d6:1c:d9:
         79:8f:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:01:13 2025 by rpki-client