Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ba408b-25b1-38ca-939f-ebcb71636cee.roa
File:                     20ba408b-25b1-38ca-939f-ebcb71636cee.roa (raw, json)
Hash identifier:          nCFBolHQVL+EOwWQn1Idn2k3wwBQAst12Svfhp0PNng=
Subject key identifier:   97:95:B2:3F:63:1C:19:A1:39:7D:D1:95:CA:C9:A2:84:7D:6F:94:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6CB6A9AC7F097804B6180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ba408b-25b1-38ca-939f-ebcb71636cee.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396603
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:cb:6a:9a:c7:f0:97:80:4b:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=83b47ef2-935f-4bcf-b48a-4ba022ebaf52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:a8:3c:29:74:e3:4a:b6:70:3b:4f:21:ed:
                    55:90:fd:f2:4f:a4:58:60:1c:03:2a:f8:47:21:57:
                    b4:30:6c:9d:6a:98:64:44:36:ad:c7:18:f4:d1:5e:
                    bb:42:49:cb:59:d8:1f:03:74:31:41:1f:67:2a:84:
                    ac:fa:f1:32:1d:61:17:b1:71:d5:e1:b6:71:2e:62:
                    44:7a:63:6c:c5:6d:df:f8:a9:bd:8d:45:a0:98:da:
                    62:3a:10:04:7c:66:06:17:08:4f:88:88:6f:27:20:
                    05:96:02:6d:ba:20:3f:0e:76:ad:ee:e8:30:1c:3f:
                    b0:d4:35:da:ab:f4:c5:35:75:b5:d4:40:cb:50:8b:
                    70:7e:78:9d:cc:17:86:b0:53:5d:c4:dc:af:8c:82:
                    49:92:55:ca:3f:a9:b6:b2:02:d7:57:83:1f:d8:65:
                    39:5c:a1:3d:12:27:c9:07:f7:46:ba:44:fc:90:77:
                    c7:42:34:03:e4:2b:d8:42:82:ef:26:8c:e8:14:f0:
                    bb:9e:ac:ea:57:09:e0:46:4b:c6:f7:60:f4:24:a3:
                    45:f3:1f:16:a2:25:5b:ef:63:2c:3a:eb:ff:96:dd:
                    3a:77:82:cd:68:a9:49:de:d7:14:2b:8b:48:1b:16:
                    7a:ae:2f:b5:06:88:af:9c:19:14:c2:6e:87:08:a4:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:95:B2:3F:63:1C:19:A1:39:7D:D1:95:CA:C9:A2:84:7D:6F:94:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ba408b-25b1-38ca-939f-ebcb71636cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:fe:f4:2a:b9:54:df:e7:97:c9:af:a7:b4:02:9e:ec:87:
         70:47:9f:d5:a8:bc:f0:d1:4d:7f:21:0b:ac:ea:76:73:ef:dd:
         75:38:84:c2:0c:ad:f6:fe:71:81:ac:5e:5c:81:d1:75:0c:4c:
         a6:05:9c:6a:36:11:ed:21:bc:71:36:97:5d:4c:b8:5b:0f:36:
         56:b3:3a:1a:25:3b:18:6a:c6:63:fd:4a:1b:9a:b5:3f:e1:a9:
         1a:b0:98:3c:60:c9:8d:fd:a3:45:f4:47:48:2d:70:62:f9:03:
         e1:98:c5:29:d8:ab:96:83:98:ec:60:30:8d:db:8b:ca:30:a2:
         36:05:6b:5a:f4:1e:71:ca:41:97:fc:b5:9b:9e:bf:53:0e:92:
         2a:68:2a:5d:75:a2:7b:0d:34:9b:27:49:0b:48:30:a9:16:ac:
         2f:8f:ef:1f:61:03:dc:43:25:dc:05:e4:66:c9:2a:c4:dd:bd:
         db:86:07:6d:95:ed:e7:d1:15:40:16:cb:9f:8e:72:b7:5c:da:
         18:06:c3:e9:37:25:0d:b0:35:c0:77:69:f2:0a:d3:2d:24:ac:
         0d:fd:be:51:1f:1e:e8:40:0c:da:e4:3e:b7:3b:70:48:b4:89:
         8a:8e:e1:b5:43:79:65:1a:51:da:5d:e2:18:36:af:3c:29:78:
         7e:6d:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:45 2025 by rpki-client