Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa
File:                     fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa (raw, json)
Hash identifier:          OWL8cjzLaak1AjjHQPAMYBBi6MC/67qg66v4fn0w+5c=
Subject key identifier:   6E:8D:CB:82:84:F5:52:2F:93:79:95:FD:45:45:82:92:BE:55:F9:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290CDE8C467054D21ACE380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396614
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cd:e8:c4:67:05:4d:21:ac:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=c4d9e511-13ab-49a6-b438-85d892241d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:83:c0:c6:02:4f:0a:77:d3:bf:a4:cc:03:
                    d8:17:d5:04:03:ce:98:c2:cf:d2:6d:f3:f8:08:43:
                    ff:31:d4:29:e7:3e:19:9e:e3:54:78:9b:2c:f6:ca:
                    a0:ba:63:bc:48:e1:f2:0f:30:92:ab:94:08:83:96:
                    68:23:19:de:aa:87:d4:1b:7d:27:a2:b2:e0:08:47:
                    f2:e7:ea:3a:dc:cb:6c:76:df:1a:d6:7e:b4:ba:05:
                    6e:f6:84:1d:d6:e0:95:62:69:53:ed:d4:1b:d9:c6:
                    83:6c:1d:62:f0:e6:b4:78:37:0a:e8:d3:e5:a0:56:
                    24:3e:ba:20:53:b8:cb:c3:5e:0b:0a:55:5a:bf:a7:
                    c6:cb:a4:cf:15:e8:9a:5a:d3:ca:20:fe:c9:aa:59:
                    37:96:fa:60:52:34:95:1f:19:4c:b5:d4:4a:8f:e5:
                    15:2f:b9:61:b1:48:ca:49:05:e5:21:25:69:d2:8b:
                    cd:17:79:f7:93:be:6c:54:75:21:ca:ca:83:b3:ff:
                    f2:4c:37:c4:eb:aa:09:18:07:f6:1f:3f:e1:0d:3d:
                    26:86:b9:08:5b:93:6d:1f:96:40:26:47:9f:81:3f:
                    f3:2e:21:47:96:97:d8:30:80:1c:c0:56:d1:af:3c:
                    e1:15:b5:94:e5:47:60:e0:69:73:73:02:4a:44:80:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:CB:82:84:F5:52:2F:93:79:95:FD:45:45:82:92:BE:55:F9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:bd:9d:e4:6b:7a:53:a9:f9:14:c2:79:2d:22:42:a6:07:
         7e:8b:93:6c:d6:20:30:1d:44:3c:6b:fa:7a:ed:f7:47:8d:cb:
         11:61:c5:db:8f:a7:92:d5:1c:27:ba:54:dc:3d:bc:b9:3f:be:
         6e:04:24:79:d0:4e:e3:1d:0b:e8:95:0f:96:56:06:07:ec:64:
         7f:36:e0:eb:85:04:4e:01:63:5e:db:d3:9d:93:6e:d7:54:94:
         f9:cd:79:65:29:c3:9c:ea:c0:e8:9f:3e:18:3b:20:15:60:01:
         61:79:26:ab:79:89:18:6d:aa:c0:d9:14:b0:e8:8f:84:59:58:
         f0:07:bb:b1:d3:eb:5d:36:de:c0:2d:f6:91:5f:7e:f6:e6:06:
         23:ff:d6:43:4d:43:cc:23:e2:5b:b8:9d:2b:de:92:54:0b:06:
         56:b1:12:e7:9a:52:e2:97:14:48:72:0d:d9:97:5a:4d:5d:58:
         cc:c7:23:a3:e3:cc:07:ad:10:7b:e6:5d:af:c5:64:83:eb:15:
         e8:bf:3c:55:53:f8:36:40:95:ef:98:a6:2e:1b:64:5b:ab:f4:
         eb:d0:ba:4e:ea:44:44:c1:d4:f5:03:c2:fe:7f:f1:e3:d5:20:
         09:87:99:e4:a9:11:b5:c5:9e:fc:53:dd:ae:24:0c:9a:b6:14:
         81:98:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:22 2025 by rpki-client