Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/359ac437-b50d-3226-8723-72cee966a6d5.roa
File:                     359ac437-b50d-3226-8723-72cee966a6d5.roa (raw, json)
Hash identifier:          5xU/ks38dUInYnAySi3GW0vpAM1rgDSoPa+z9Om9KpU=
Subject key identifier:   02:B1:68:F9:1E:90:D8:0A:6F:CE:9D:2A:3A:4F:E5:9D:64:43:D1:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496EB6D1644FB08FEA7B040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/359ac437-b50d-3226-8723-72cee966a6d5.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     396575
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:eb:6d:16:44:fb:08:fe:a7:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=107d54d1-4a79-41cc-8272-0040cc637542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:dc:f0:28:d3:46:1f:4b:2b:64:2b:aa:04:
                    6e:53:92:07:e4:3e:a3:94:09:3d:cf:95:89:9a:c7:
                    77:f3:cb:a8:7e:92:83:89:48:e8:d2:32:bd:ff:23:
                    5a:6a:a0:26:e6:65:f0:5c:6d:89:ad:fa:f0:90:dc:
                    c8:75:e8:ad:ee:e5:d2:9b:1d:90:69:97:97:b6:78:
                    42:6a:a4:9b:07:41:f4:77:d4:71:fb:c1:ac:cc:09:
                    92:81:96:f7:39:0d:fb:fb:e2:04:d0:99:ee:59:7b:
                    aa:86:27:c7:27:a9:73:96:81:3d:4a:d8:08:f6:5e:
                    66:a7:29:46:52:a5:7d:6c:4f:64:ad:46:63:32:c9:
                    e4:28:bf:bb:df:2e:74:72:7d:6d:dc:c9:83:e3:de:
                    62:4b:1b:79:8c:c5:d3:6f:aa:23:9e:00:b7:80:94:
                    8d:9e:82:dd:2f:ec:9b:7f:86:4e:57:81:d7:7c:44:
                    f9:ec:4c:27:3f:3c:b9:f6:72:b2:55:91:d1:76:16:
                    3f:d4:69:2b:bb:3b:5c:1f:3c:da:bc:b4:d0:94:c0:
                    26:fe:7a:7a:3f:2c:a5:58:4d:ef:1a:73:78:c2:e2:
                    11:de:a4:93:72:ea:0f:5d:44:52:b3:03:8e:f5:06:
                    0d:c1:a9:32:91:b2:e3:59:e5:19:19:db:22:30:01:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B1:68:F9:1E:90:D8:0A:6F:CE:9D:2A:3A:4F:E5:9D:64:43:D1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/359ac437-b50d-3226-8723-72cee966a6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:35:01:2e:0b:3e:7d:9b:bf:b0:f0:b1:e7:e7:c9:9e:f2:0c:
         ad:ef:d2:8a:03:e7:59:63:1a:6f:18:4c:6f:9e:df:02:69:0c:
         4d:75:8d:c5:4f:51:51:02:9d:5f:c2:87:45:88:48:af:49:9d:
         55:3e:4b:f4:87:c9:b2:fb:5d:ec:f9:46:f7:7c:c8:26:c7:ae:
         91:5b:91:e7:f2:05:a2:b1:bd:65:ce:13:62:cc:8c:e8:ba:0a:
         38:e6:c0:bd:68:97:23:7b:88:be:bd:98:df:0b:c0:43:28:c0:
         b7:07:0f:5d:c0:b8:d9:6d:fa:87:3a:dc:9c:d7:c7:1b:7b:46:
         d3:a2:99:68:2e:c7:7a:bd:b1:3b:55:b5:20:13:9e:16:92:27:
         37:45:0e:d8:30:0a:f7:70:4b:00:3f:33:e4:f8:64:13:10:84:
         80:81:a8:62:35:42:cb:b2:ad:73:6b:6d:2f:42:7b:ae:44:97:
         5e:ea:56:51:50:66:de:68:fc:c3:dc:49:f7:03:b8:93:8c:8a:
         2d:09:b0:90:96:af:7b:c8:36:6a:f5:dd:d8:79:50:e0:ad:20:
         71:c4:51:84:14:4f:4e:61:58:d0:ab:11:66:10:a8:5b:5a:7a:
         13:d4:36:69:95:fd:21:f8:29:1e:30:a2:32:3e:eb:fe:ca:42:
         ae:8b:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:51:56 2025 by rpki-client