Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa
File:                     fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa (raw, json)
Hash identifier:          rrhHegtqTmoSqR1OA7tdcmtlvDh2BwrGspjiGZWny5k=
Subject key identifier:   9B:D9:EC:66:E4:45:E2:7D:6C:2B:97:BD:F9:F9:6D:18:13:B6:70:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB61E44BB4A8B259E83C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     21313
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:61:e4:4b:b4:a8:b2:59:e8:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=a0ef665b-86db-424c-a585-5bd61a6943d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:7e:f3:9d:6e:95:42:87:65:7b:b6:c7:21:
                    1d:66:8b:10:6b:8a:06:4d:4d:d4:20:c5:75:aa:e6:
                    29:cf:37:c4:d5:3c:59:ef:b7:d1:d6:4d:ae:d8:11:
                    5a:0c:08:67:02:c6:99:b7:c4:e1:05:eb:93:01:98:
                    fb:44:92:8f:ff:4c:3e:2d:ec:1b:17:de:e3:0a:57:
                    03:3c:ab:a6:26:2b:95:93:57:cb:76:2d:f1:15:d4:
                    f1:df:35:9b:65:4d:18:80:e0:c5:ca:c7:da:c8:e7:
                    2e:72:d6:64:b3:b9:78:8d:58:4a:c1:fd:ee:1b:13:
                    0a:3e:35:37:a0:8c:b1:fb:8c:3b:52:a6:2f:02:4b:
                    7b:32:1d:e9:19:2d:c8:fd:f2:7f:b0:0d:17:87:aa:
                    04:ba:2e:98:09:12:d0:1d:b9:ac:91:2f:cc:9b:81:
                    f1:6e:b2:45:f8:36:94:0d:03:c9:7c:af:33:29:ea:
                    9d:e7:77:4b:a8:cc:d7:6c:23:c6:fc:f9:b3:ab:22:
                    06:69:96:30:83:46:12:b6:f8:66:15:e6:06:ad:bc:
                    0a:95:ea:fb:53:f4:0b:9f:3d:d8:d5:32:34:c4:15:
                    94:cd:ef:2a:42:d8:8b:33:13:fe:3e:00:fa:e4:66:
                    c2:5a:e4:d4:8d:9d:6c:3a:44:fe:34:0d:63:68:0d:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D9:EC:66:E4:45:E2:7D:6C:2B:97:BD:F9:F9:6D:18:13:B6:70:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0be743-41a5-30b5-ab4c-22b1b0c329db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:51:e4:ad:75:46:e7:09:d7:50:0b:7f:b4:46:a3:c1:c6:85:
         98:77:c6:3f:2e:e0:e5:4c:7c:85:dd:ae:e5:5e:c2:ab:91:03:
         87:0a:12:91:49:03:cf:d7:98:16:d2:05:6e:c6:72:af:e4:b1:
         d3:f1:cf:50:6a:e1:43:7f:6e:5d:97:9e:35:6c:3e:5d:ce:d9:
         8f:72:02:d6:67:14:07:f3:47:71:be:3c:a3:7f:a9:0d:95:4b:
         86:67:f0:43:b5:c4:4d:4e:e0:81:28:6c:71:8e:18:30:d8:5f:
         40:d4:b6:3e:e8:e7:67:6f:42:93:7a:02:07:91:0b:5d:f0:37:
         b6:b0:7f:f5:7a:4f:be:64:09:33:f3:b9:e2:30:e4:85:3a:36:
         b9:c3:e5:2d:ef:0a:a1:10:19:44:8f:e3:01:f1:7d:1a:f0:a8:
         a6:57:83:fb:c7:d4:52:28:81:b8:6e:48:3f:46:6d:9b:04:94:
         91:1b:a4:05:7a:7f:97:d3:22:c1:9c:21:3d:9d:7d:85:17:06:
         38:87:76:15:a5:c8:43:3b:80:b5:22:4c:73:ff:66:46:c9:9b:
         13:d4:31:ff:a2:80:f9:a0:a1:4b:25:40:06:35:53:93:13:3e:
         87:cf:b5:ea:b9:ad:aa:a2:be:25:1a:71:35:57:1f:39:53:13:
         d3:ad:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:35 2025 by rpki-client