Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/136b2983-9339-3056-ae8a-2610069361de.roa
File:                     136b2983-9339-3056-ae8a-2610069361de.roa (raw, json)
Hash identifier:          6zEebP0lqwoxZ5UVtRQ+ld9J1GCqytoPrWywbqNDtDE=
Subject key identifier:   9E:C6:07:69:1B:AD:B5:12:F9:76:93:E9:D3:63:03:42:5C:B4:59:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0746CDFF02A1937A376C2000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/136b2983-9339-3056-ae8a-2610069361de.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     396540
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:cd:ff:02:a1:93:7a:37:6c:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=e7292cc8-9448-45e3-8760-ab26597f0cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b0:74:8d:2b:99:dd:8e:35:ff:f4:c8:de:59:
                    c0:fe:58:ab:8c:47:f3:ce:31:b9:b9:01:4c:fb:c9:
                    05:8a:57:3f:fe:d7:ec:53:1d:6f:b5:6e:1f:ff:df:
                    8f:9d:7e:8a:87:34:44:87:2e:1e:7a:36:4d:a5:68:
                    78:fa:f4:fb:49:2a:6a:9c:62:15:52:ab:ed:15:fa:
                    8b:b8:98:a7:95:6d:a2:ae:35:9f:fc:92:26:3c:95:
                    d3:1f:d6:db:41:71:a0:22:31:13:a5:b0:4a:eb:a0:
                    ae:be:31:f9:70:b7:7f:f1:a3:d3:77:6d:62:7b:57:
                    0d:3a:52:a5:c0:09:03:24:16:7c:6c:a6:d0:8c:05:
                    67:fd:a5:ef:67:df:2e:d2:5d:28:89:76:e2:80:af:
                    86:9b:51:23:1e:93:0d:1e:c2:f1:2b:be:89:e2:df:
                    1e:f9:7b:ff:06:4e:00:64:47:62:f6:b1:31:7b:d3:
                    80:eb:96:5a:d4:12:fa:13:4a:2c:9f:4c:34:ba:f7:
                    10:c0:c8:63:42:e9:77:e1:3d:95:f4:67:01:13:f3:
                    d0:c3:45:7d:24:9b:b8:cb:a0:e3:f0:7d:cd:65:5f:
                    70:04:da:ec:76:8a:55:b0:55:1d:d8:fb:10:14:c4:
                    6e:3a:b9:f4:d5:39:a0:c7:7c:9b:0f:d8:ed:4d:47:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C6:07:69:1B:AD:B5:12:F9:76:93:E9:D3:63:03:42:5C:B4:59:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/136b2983-9339-3056-ae8a-2610069361de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:c9:5e:b9:ca:9c:86:ad:ee:06:9b:f2:d6:4a:06:3d:9c:
         76:a5:4b:1c:b8:23:3d:6c:0c:b7:07:e9:a4:3b:1e:c0:74:11:
         14:a8:e9:07:de:5f:9b:17:cf:19:93:ec:70:63:35:99:02:ee:
         9d:96:84:b0:99:a8:6e:91:c9:28:06:17:3f:bf:37:7f:4e:f6:
         e9:d0:0a:69:03:b3:31:3d:47:c1:44:67:55:4f:ad:c6:b1:d7:
         83:8f:53:2c:a8:55:36:73:d3:59:d2:d2:91:b6:0d:2d:72:d8:
         6b:49:78:b1:11:2d:3c:23:dc:c2:7f:8e:cd:d2:91:87:51:e3:
         c4:6a:22:0c:f1:fd:60:99:58:60:13:06:c0:92:e3:3a:af:b2:
         22:e3:17:73:33:2c:0a:5c:1e:63:ce:ee:0f:37:ab:a5:27:33:
         ef:90:ce:f7:5e:93:6c:c2:8b:9b:9f:24:a8:2c:8c:a8:36:ed:
         05:c9:e4:c2:ad:90:cd:e3:fa:ac:c5:14:a6:af:31:0d:f9:93:
         52:2b:26:14:bf:d7:a9:3f:5b:fc:9a:56:66:12:57:69:93:6f:
         cf:11:f3:03:a3:e1:cb:b5:14:de:1a:32:61:3e:32:09:15:df:
         53:53:95:7c:34:28:97:23:0e:8d:e6:8e:71:99:ef:f6:f1:2f:
         43:c8:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:39 2025 by rpki-client