Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/193222d9-f2bb-316a-acf6-c3838592e1ac.roa
File:                     193222d9-f2bb-316a-acf6-c3838592e1ac.roa (raw, json)
Hash identifier:          7CxFpzgprU5QLkcz6ZTQa9wUW3zekGm1R+qNPpUXFfQ=
Subject key identifier:   F9:F0:32:5B:06:78:15:6B:3A:6C:2A:2C:65:C5:51:A2:68:FB:9B:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0746D08B23C79A8DB3C75420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/193222d9-f2bb-316a-acf6-c3838592e1ac.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     396595
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d0:8b:23:c7:9a:8d:b3:c7:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=7b609ff1-3c05-4d55-b798-31e6644108a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:85:9c:36:64:6c:5c:eb:2d:73:63:97:d5:
                    95:ed:16:5d:70:82:36:c3:02:d3:eb:49:d7:a3:63:
                    d2:98:d3:01:c2:6c:8e:c3:08:61:41:ce:2a:21:6c:
                    73:7e:4d:d6:35:aa:5b:4f:70:42:ac:02:eb:8d:71:
                    4c:0b:22:8c:bb:0a:ae:49:36:20:00:b2:56:47:1b:
                    eb:33:fe:f0:b5:81:02:64:5a:cd:e5:39:12:b5:5f:
                    b9:fc:7d:bb:0b:6d:d2:8a:d3:10:ed:20:70:07:b3:
                    95:c6:1c:5a:5d:cf:dc:e0:49:9f:2a:11:a2:6e:e5:
                    04:95:88:fe:85:a4:83:3a:44:11:2d:9f:01:58:5d:
                    27:92:eb:22:da:ef:91:9c:56:b5:24:f6:e8:91:47:
                    ff:40:d0:c7:71:c3:80:dd:43:48:d1:b6:be:b4:82:
                    2e:95:24:3c:bd:85:83:d2:72:2b:8a:3f:f0:a0:9e:
                    91:e2:a4:bd:d2:c7:ab:98:d1:e3:4f:ef:2e:a9:5c:
                    b4:d1:5b:cc:95:11:07:17:71:e3:39:c9:4b:ef:9b:
                    50:f0:3c:c8:6a:09:67:96:84:8b:12:16:33:b3:a4:
                    d0:46:d9:a4:ae:8e:00:29:0f:8c:cf:7b:a5:6f:cf:
                    d7:df:d8:f1:ae:ce:2c:06:e4:d6:cc:65:79:ab:b1:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:32:5B:06:78:15:6B:3A:6C:2A:2C:65:C5:51:A2:68:FB:9B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/193222d9-f2bb-316a-acf6-c3838592e1ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:54:26:59:c4:23:5d:24:ba:e3:ce:7c:f6:53:4b:4f:db:42:
         8e:5d:ce:b1:49:d0:2d:c0:71:e9:92:e2:82:b6:45:04:87:87:
         6c:b6:e2:20:2d:71:12:69:be:38:54:ea:fb:74:1a:c7:14:0c:
         c9:ad:34:3e:da:17:17:cf:88:94:50:a8:03:e2:6d:16:4d:09:
         99:4d:00:d4:16:ed:6b:d0:36:99:16:6c:37:74:dd:7d:ef:da:
         e0:33:0e:0e:3e:9e:11:73:01:50:0d:9b:51:e4:06:f8:fe:54:
         5b:69:32:1f:e7:de:0c:24:0f:a9:e3:f0:15:55:1f:61:66:7a:
         73:ce:d3:b7:42:42:d7:a5:b9:3b:95:b5:1c:b1:60:b2:33:9c:
         26:d6:23:17:ca:5d:c6:5e:47:84:e4:91:e9:8f:19:9a:8b:da:
         71:54:13:ef:89:96:94:47:88:ec:e7:8c:18:a1:2a:41:95:62:
         ab:04:43:fa:0c:2d:b4:7d:21:8c:fb:02:45:5c:13:40:cd:1c:
         bc:28:c1:2d:bf:b3:ed:51:20:40:e7:e9:59:f6:af:70:94:4d:
         0e:e0:1d:a7:fa:7c:7c:18:90:6c:cf:bb:30:c9:27:fe:79:2c:
         37:a9:d9:93:09:a0:28:d8:f4:89:46:45:e8:94:a0:57:f7:eb:
         f0:f0:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:45:15 2025 by rpki-client