Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fa06e6-3b1e-31af-bce2-0428570f260e.roa
File:                     24fa06e6-3b1e-31af-bce2-0428570f260e.roa (raw, json)
Hash identifier:          QES1w1v20+IkvGa6S637B0mNsbqhAdFdmVQ1mftLciU=
Subject key identifier:   02:F9:85:71:8D:C8:D0:38:35:76:EF:81:CC:D8:33:F2:12:8B:8D:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0746CDEF4BCB36C029CABC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fa06e6-3b1e-31af-bce2-0428570f260e.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     396560
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:cd:ef:4b:cb:36:c0:29:ca:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=45056d2e-8ee3-4228-b705-f92eb40a13ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:42:f0:1d:a1:dc:2a:38:76:81:b5:9f:49:
                    09:37:84:c8:df:82:db:17:71:a7:c9:9a:5d:b0:99:
                    dc:b4:53:27:33:d8:e3:42:24:96:69:f0:d7:a3:bc:
                    da:60:3b:ce:9e:e2:5d:c2:d0:30:fe:12:48:fa:45:
                    6d:6e:bf:cb:10:f7:df:87:21:e5:64:01:76:f7:83:
                    28:36:31:03:7a:87:57:8f:2a:16:13:8f:cf:fd:05:
                    0a:b1:91:03:90:d8:4e:b5:db:9d:4e:c2:e8:19:ba:
                    e1:66:d3:e5:f7:a4:46:7b:bc:c6:bb:40:a3:52:bd:
                    f3:8f:f4:35:3b:f6:18:ea:1f:fe:a0:a7:39:1f:fa:
                    ce:4e:8d:3a:f7:0d:40:25:64:b4:10:41:4a:04:ab:
                    4e:84:07:29:07:9f:2c:35:76:1d:d9:db:d9:bc:45:
                    25:e2:6a:71:9b:97:26:1b:1f:fb:0e:64:c3:1a:9a:
                    4b:48:2f:fe:ef:fa:2d:46:37:99:d2:90:3b:68:20:
                    39:d8:44:84:7a:76:78:01:45:4b:cc:6e:c1:c0:5c:
                    ff:54:2f:40:e3:5d:69:8c:6f:f6:d2:e4:77:d8:e9:
                    94:3f:7c:88:97:06:e0:54:10:16:86:10:cb:ff:be:
                    dd:fb:42:cd:d5:a8:04:e3:e8:9d:9e:f9:03:77:6e:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:85:71:8D:C8:D0:38:35:76:EF:81:CC:D8:33:F2:12:8B:8D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24fa06e6-3b1e-31af-bce2-0428570f260e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:92:96:c8:52:fb:a9:34:f8:10:11:1a:69:72:ac:de:0f:58:
         03:b3:e4:71:b7:3e:15:0a:ee:a3:e4:93:41:6e:ea:7f:ba:c9:
         ef:43:37:0d:70:4c:33:7a:a3:d8:1c:73:ff:b0:1c:db:d6:59:
         03:6a:1c:23:56:9c:22:08:8d:ec:e8:05:eb:91:ea:08:41:36:
         e2:cb:99:90:24:d4:af:62:92:e3:aa:11:7e:25:ab:08:36:8b:
         c2:0b:92:ac:3c:07:6c:98:a2:fd:0c:1b:d2:75:a4:0c:1d:73:
         6b:a4:4e:22:8b:15:e9:97:5f:5e:bb:88:3c:9c:e4:0c:78:ee:
         4d:55:e8:61:ce:20:18:95:5a:0d:b8:07:ef:a0:1a:d2:14:c5:
         ef:90:63:9b:6d:34:b3:c1:fb:81:bd:29:a6:fb:c6:aa:1f:9a:
         16:79:bf:70:d4:01:ed:7f:dc:6f:f1:d2:fa:35:e4:35:4d:67:
         cd:f7:99:4c:5c:e2:1e:bf:cc:3e:1b:da:62:2e:ec:57:0c:4c:
         68:4b:0f:c7:ca:f7:5e:56:82:0d:59:ad:73:56:7d:c7:1b:f9:
         26:92:c4:b8:cf:ad:dc:d8:9c:f6:3b:3d:9e:7c:34:4a:c1:fd:
         74:32:a3:19:f9:13:0f:e3:32:03:39:96:1d:37:00:f0:d6:60:
         d2:97:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:44:13 2025 by rpki-client