Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/127347bd-187c-31a9-9d40-18e793363208.roa
File:                     127347bd-187c-31a9-9d40-18e793363208.roa (raw, json)
Hash identifier:          UKkCK1hkVfk0IWbjJmA+xkoKhZn4Qm5xO4EtHWMYcUQ=
Subject key identifier:   02:20:21:88:DE:4D:1C:EE:39:AF:CF:B5:7A:FC:2C:92:BD:1B:69:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C4483B83777B854DB040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/127347bd-187c-31a9-9d40-18e793363208.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     36616
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c4:48:3b:83:77:7b:85:4d:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=c9d3015c-7d03-4047-9e51-6bc2f215f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:1e:3a:ab:87:7b:7c:90:5f:ae:60:e2:68:
                    a4:1b:bb:75:65:e5:55:cf:34:70:b7:81:22:30:be:
                    67:6d:6d:1c:f5:4d:6a:f7:31:53:8a:2a:f9:97:b3:
                    ae:30:c8:a9:34:03:df:b7:cf:b4:4f:8c:8f:39:3a:
                    3b:93:82:3b:75:82:e4:d5:15:e6:9c:fa:d7:6f:86:
                    01:ce:4d:68:ed:71:33:af:ef:0e:aa:e1:e3:60:b0:
                    9c:ef:09:c5:9d:87:f7:e0:f3:9d:8e:e9:fe:bc:4e:
                    b4:a8:58:d0:e1:ae:6a:4e:e6:7e:43:39:97:d0:45:
                    a3:99:50:ea:5b:d8:b5:83:da:f6:aa:a9:74:1d:25:
                    01:41:81:57:b0:ec:a5:61:94:d3:65:1a:f0:c3:0c:
                    3f:77:c8:4a:e0:04:ad:70:55:0a:4f:0e:ba:cb:3a:
                    c9:2c:7e:d5:bf:72:8a:3f:cf:bd:3f:1b:11:29:91:
                    14:b2:e4:d8:d4:3a:5b:69:b1:29:eb:1f:53:47:10:
                    99:6d:1c:4e:0f:9c:4f:4f:02:f8:a8:f8:4b:1e:6f:
                    f9:2b:42:88:ae:11:b6:c4:be:88:a0:d5:1e:91:93:
                    ed:bd:0d:57:8d:0f:8e:31:1c:8a:16:ae:64:43:31:
                    89:c0:c7:48:06:74:07:04:8b:e1:2a:e0:a4:15:31:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:21:88:DE:4D:1C:EE:39:AF:CF:B5:7A:FC:2C:92:BD:1B:69:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/127347bd-187c-31a9-9d40-18e793363208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:b5:86:a5:b7:4c:41:22:52:53:c7:20:a2:96:56:ce:98:
         43:28:a4:e4:9d:15:37:ae:ca:34:38:f2:88:17:12:4b:c4:5d:
         c1:91:47:7c:e1:bd:27:0f:53:15:ed:d6:19:80:44:d9:64:8f:
         e3:d0:73:85:ea:d0:8f:d6:27:db:00:0b:ac:f1:11:a1:0d:73:
         55:1e:30:55:c3:c5:80:49:bd:b0:90:55:14:2a:ee:6a:dd:0a:
         97:7f:40:ff:d4:72:41:3a:a4:c4:39:33:89:03:02:8d:68:84:
         68:10:7a:a5:23:fd:93:08:0a:37:57:f2:4b:30:f8:78:0b:81:
         98:b8:df:c0:a3:60:48:40:84:bf:90:b0:ce:99:44:a0:de:3d:
         f0:29:bc:fb:ec:b2:9f:30:7d:b6:ba:c1:42:cd:97:74:d5:91:
         ea:fc:79:9f:6a:7f:30:68:3d:b0:bf:ed:10:f5:14:99:30:d6:
         15:f5:9e:6f:31:63:9a:91:03:e3:37:50:fa:43:26:6a:1c:d4:
         ec:6a:6c:11:e2:3d:31:c7:82:ea:ce:64:a5:fb:c1:bc:5a:d5:
         c4:83:f8:84:05:14:62:d8:e4:47:5f:e7:c0:2a:84:14:ab:56:
         4a:7a:8a:61:d7:7b:03:49:ac:1a:c7:85:97:1f:0d:ab:bb:05:
         55:db:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:46 2025 by rpki-client