Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f469484c-99db-371c-b3c1-4e153cf4311b.roa
File:                     f469484c-99db-371c-b3c1-4e153cf4311b.roa (raw, json)
Hash identifier:          Tcc9Hr0VD+28SSul+Mk8Msyt6num1aGsp0VDdf52+3M=
Subject key identifier:   6E:BB:02:85:C5:50:C6:B3:C3:D8:B2:0F:3B:1A:82:FA:78:95:E4:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BCE65A0E230906D87190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f469484c-99db-371c-b3c1-4e153cf4311b.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     397200
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bc:e6:5a:0e:23:09:06:d8:71:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=578f47f7-8d69-41a1-8c83-673b49ce7b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:90:40:55:5e:cc:d7:6d:18:87:f9:0d:ad:5e:
                    e9:7c:7d:2d:f0:21:cf:0c:7c:43:02:29:f7:7b:de:
                    62:2a:69:a2:f6:a8:ba:e5:ca:db:9e:be:92:4c:6d:
                    da:3e:c6:96:5c:04:94:8c:4f:a3:bf:08:a4:d7:3c:
                    9e:44:7f:bd:9e:d9:48:96:ea:be:02:f7:6a:9a:db:
                    27:86:99:f4:d7:00:27:44:3a:b2:6f:c0:d9:7d:b8:
                    e2:e2:52:a4:7c:1a:81:c6:89:ad:3b:53:09:6b:2c:
                    9a:e0:94:c7:e8:e6:1c:88:f7:9b:60:77:71:63:3b:
                    7d:f0:99:7d:e5:4c:0d:12:3f:27:6f:8a:08:45:07:
                    5f:ed:5e:ef:b1:00:04:df:1c:29:c6:df:84:34:b3:
                    a8:60:d7:9c:38:68:fd:e8:2a:80:01:8f:23:e7:d7:
                    94:76:4b:fc:14:11:53:e7:bd:ac:7c:7c:48:d2:19:
                    2b:4b:b3:a3:95:72:cc:9a:e1:2d:2b:64:b7:62:a3:
                    43:c9:c6:37:a7:8e:88:2c:a7:5b:26:d4:27:8b:d2:
                    d1:9c:5f:af:95:95:4d:31:ea:05:e7:25:bc:c0:15:
                    6f:8e:e3:8b:14:69:45:d1:dc:0f:02:c6:ba:a8:00:
                    51:d3:6a:29:33:48:ec:93:4b:a7:55:06:69:cf:93:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BB:02:85:C5:50:C6:B3:C3:D8:B2:0F:3B:1A:82:FA:78:95:E4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f469484c-99db-371c-b3c1-4e153cf4311b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:87:9b:7f:32:fe:15:c3:08:8a:82:aa:1d:7f:f3:46:db:35:
         f1:2d:e2:11:c1:71:4f:8c:2f:7a:39:92:17:d9:db:b4:80:94:
         90:fc:f6:d6:af:d1:e5:50:13:67:40:19:95:8a:1b:65:6f:16:
         04:d0:b2:6c:b0:31:a5:9e:69:53:db:ac:0b:9d:21:d0:63:5d:
         c0:c3:8a:fb:d6:47:fc:9f:72:dd:49:b4:c9:64:7e:e3:f5:bf:
         00:2e:05:f8:d4:8f:78:cb:8a:c5:02:34:39:dd:c6:dd:ec:f2:
         c1:9e:05:df:59:cf:f1:44:42:10:51:f2:46:5c:9d:4b:f4:38:
         16:d3:c0:47:34:9f:f5:94:a1:e5:3e:77:14:b0:38:78:8c:37:
         1a:99:bc:db:7e:e2:03:ab:a1:d8:2b:8f:52:a9:6a:81:38:b6:
         bc:1b:36:fd:5c:47:58:28:cc:29:67:b7:26:62:71:15:16:8f:
         0f:45:b5:95:de:52:16:5e:af:fd:3d:a6:03:a6:09:10:c8:36:
         af:28:d4:9b:63:fc:9d:a6:dd:c6:0d:17:6a:a6:61:57:c9:e3:
         15:9a:b0:8f:e9:27:dc:a7:ef:05:8c:5a:53:c6:0d:fa:f5:a4:
         39:6c:1f:00:3a:68:96:2e:b6:b8:a7:d7:64:e0:e5:1a:e1:cb:
         e1:2f:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:10:24 2025 by rpki-client