Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc8f7de-74c3-355a-a25e-d31d153b573b.roa
File:                     1bc8f7de-74c3-355a-a25e-d31d153b573b.roa (raw, json)
Hash identifier:          3pn7GVLDZiFXJf1ZcUsMKryIBBbXrgnk1K7+MszU1F0=
Subject key identifier:   46:85:9D:49:6F:0C:82:89:04:3A:0A:FC:73:B4:36:31:56:3E:BC:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496F06EA4B27C0C4057EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc8f7de-74c3-355a-a25e-d31d153b573b.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     36632
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:f0:6e:a4:b2:7c:0c:40:57:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=879b612d-62f3-4452-a2cd-38086a284dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:30:78:b8:9e:1f:63:bc:b0:c9:f2:df:e7:
                    d0:4b:c5:4c:f0:d4:d2:69:a3:dd:d8:c9:e7:c0:96:
                    7f:25:44:ca:88:7f:4d:5a:3e:9c:ab:ec:e9:c1:99:
                    17:e4:8a:2e:db:e8:31:17:9c:89:7a:cb:fe:8b:df:
                    c9:4f:81:46:76:30:2f:b4:1e:29:6d:6c:eb:9d:27:
                    f9:5c:fc:a3:d0:99:d9:1a:77:64:e9:f4:39:e5:4b:
                    c4:70:b9:80:3c:a5:18:56:87:c8:f9:72:f3:00:a4:
                    1e:30:b6:74:e5:74:50:c3:d2:c1:2d:ec:21:18:0a:
                    9a:88:d6:16:39:52:d8:20:69:af:d2:9c:e6:31:d3:
                    25:ac:c8:65:a6:57:dc:52:85:05:de:b6:e4:0f:24:
                    0f:f1:95:b6:67:52:6c:90:8d:70:62:ae:15:09:52:
                    b2:c4:62:41:41:53:08:75:5d:f1:e8:4b:fd:ed:d0:
                    36:b6:16:65:47:3f:df:44:5a:f5:68:47:d3:63:79:
                    8b:01:d2:95:9f:e0:e7:5d:9b:b3:a8:c1:07:64:f3:
                    97:68:7b:59:de:6f:46:da:d9:ed:c4:de:f6:b4:0a:
                    ad:47:3e:7d:b8:3a:1d:d8:fa:27:ed:66:f1:90:0c:
                    f4:9d:d1:95:a4:86:34:e1:83:a7:b2:77:57:c3:c6:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:85:9D:49:6F:0C:82:89:04:3A:0A:FC:73:B4:36:31:56:3E:BC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc8f7de-74c3-355a-a25e-d31d153b573b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:98:1e:49:40:0d:67:91:f2:0f:a4:62:dd:b3:57:0d:f4:46:
         e4:35:46:ce:2c:7f:ff:ce:8e:be:6a:50:99:3d:c7:6e:e0:05:
         35:0d:97:08:50:cd:44:fa:a7:35:d6:ec:b4:4f:cf:25:8f:0f:
         01:c0:39:9a:7c:e5:0b:b8:24:86:bc:43:23:47:61:bc:b7:5e:
         b2:47:fc:86:06:a7:62:2d:0b:e2:9a:be:d2:54:5e:19:ec:23:
         6b:77:54:95:4f:30:75:40:1f:d5:87:5f:58:db:ba:84:0e:d5:
         0e:23:2f:95:52:9c:7b:46:6b:24:43:dc:f5:81:03:d3:ed:8a:
         e0:a2:6a:ab:bf:0f:0e:9b:8b:e0:3d:5f:cf:dc:18:c1:53:65:
         d4:41:8e:12:94:75:70:e4:21:f2:da:ec:a6:0e:aa:6a:65:a3:
         2b:08:94:1f:ac:26:af:bd:5d:77:24:75:bd:5c:1d:37:7f:f4:
         fc:70:5f:99:6e:26:6a:3b:95:0d:93:e1:00:91:3b:7b:bd:2b:
         83:9b:07:4f:a5:ba:b9:06:43:18:42:1a:bd:5f:b6:0a:00:3b:
         0d:fe:6c:9b:be:1a:2f:66:ab:1a:b3:31:4d:5c:87:3e:c0:55:
         50:a0:a1:69:40:e1:be:cf:a6:90:9e:5f:33:23:69:3a:6f:b3:
         15:19:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:41 2025 by rpki-client