Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12ce964f-747e-3bbb-b430-eb64712665dc.roa
File:                     12ce964f-747e-3bbb-b430-eb64712665dc.roa (raw, json)
Hash identifier:          el6sBa1DXNEMVvlyVbQ4hRG7TUa9E7xrG+FcsRATt6E=
Subject key identifier:   94:C1:76:AF:31:4F:01:06:4E:03:3D:3E:EF:F3:9F:F6:41:AE:F0:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C42506BAA29451251B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12ce964f-747e-3bbb-b430-eb64712665dc.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     36621
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c4:25:06:ba:a2:94:51:25:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=42dea7fd-f42e-4f68-a46f-8a1ba9f399ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:15:d2:08:95:35:82:0c:72:a7:2b:10:77:
                    b5:c6:7b:1a:07:62:38:18:0c:e4:e7:56:2f:29:51:
                    c3:cd:e3:1e:e6:b1:c3:a8:e8:8b:70:44:44:7e:0d:
                    db:df:ce:6e:a4:b4:09:86:6c:c3:c6:fb:e4:b7:5e:
                    35:5a:56:2a:c5:5f:b7:59:23:0d:c6:e1:71:31:01:
                    68:ab:36:6f:bf:28:63:e6:1f:b8:36:35:a4:bb:41:
                    7d:77:aa:2b:71:ab:27:27:76:8f:f3:2b:77:29:66:
                    39:e2:71:f7:d1:24:43:78:c1:65:af:7e:68:fc:d5:
                    9f:43:38:55:6a:6a:e7:cc:89:37:61:ab:f8:01:85:
                    35:dd:8a:80:db:6d:61:7f:06:f1:f7:ba:e7:6d:fe:
                    6c:1d:06:42:b4:79:bc:71:20:f8:a9:0a:f5:13:a4:
                    40:67:1b:17:5d:67:0c:dd:23:1a:59:b8:d7:de:ea:
                    2d:a5:c9:e0:70:9b:9f:a9:c7:e7:8b:f4:f3:e8:3c:
                    72:50:51:a9:3b:3c:37:1a:e0:e1:17:7a:5e:69:83:
                    67:0a:44:9b:75:d7:d1:fa:b3:af:4c:6a:52:3d:1e:
                    38:18:22:f4:91:b7:fb:fc:73:db:4e:71:3e:cb:fa:
                    09:e4:de:6f:2f:87:1b:bf:e2:2d:23:52:c1:e9:74:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C1:76:AF:31:4F:01:06:4E:03:3D:3E:EF:F3:9F:F6:41:AE:F0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12ce964f-747e-3bbb-b430-eb64712665dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fb:e8:91:59:39:69:4e:31:36:57:e7:df:3c:25:08:85:15:
         c7:f9:85:88:0e:bc:19:5f:1d:5b:00:96:31:71:cb:b6:95:7f:
         0b:70:8a:a3:1f:af:cd:d8:29:65:ec:07:da:d7:86:b6:5e:45:
         28:ae:33:43:90:67:e5:31:d4:e3:cb:2c:25:09:78:d6:69:87:
         b9:7d:bf:ae:01:f8:38:63:89:c1:77:5d:29:26:5b:2f:d7:0f:
         41:33:a0:b1:18:4a:10:cd:27:06:a9:d7:40:9b:1f:11:80:6c:
         64:79:f0:b6:1f:2f:e6:d1:6d:63:56:08:aa:ae:c1:43:99:c5:
         ab:b0:d4:79:89:e5:27:7a:27:5f:90:86:6e:0a:34:1c:03:43:
         30:e7:51:16:d4:1c:05:28:0c:9d:e6:b2:0b:d8:4e:78:50:31:
         3e:1c:76:29:42:8c:88:9d:7a:53:b5:70:2a:ce:10:78:a1:04:
         a7:f8:60:02:a0:02:61:0d:71:6b:3d:03:55:16:a6:61:e9:ab:
         fa:4f:50:a9:c3:96:76:9b:20:de:fa:0e:d3:97:07:cd:4d:fe:
         94:ae:69:a1:c4:22:8d:1d:03:b2:9c:dc:d8:84:f5:2d:bb:57:
         a5:1b:02:7b:ef:d9:24:dc:21:ac:9c:c8:83:b6:c6:9a:b1:42:
         4e:47:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:56 2025 by rpki-client