Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dd5a998-59b2-353b-9d57-cb719b85b06e.roa
File:                     6dd5a998-59b2-353b-9d57-cb719b85b06e.roa (raw, json)
Hash identifier:          kAMLVasQl8MSgOQ55jvK0uj9CAJe3v760LEy3vqhq6c=
Subject key identifier:   38:FB:63:52:00:CD:DB:10:75:FD:30:F4:26:A6:AB:7D:40:BB:EA:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C8084D1736F1AEB78200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dd5a998-59b2-353b-9d57-cb719b85b06e.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     397198
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c8:08:4d:17:36:f1:ae:b7:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=1264f50d-0ae1-4869-a08e-0a621227f243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:75:39:7d:c4:22:74:bf:34:b9:a3:06:4c:
                    41:65:69:65:50:b8:9f:14:9b:c0:1b:9e:3c:b4:8c:
                    c0:4e:3d:04:0b:64:a2:5a:12:cd:69:1f:6a:53:55:
                    21:54:91:36:c4:79:77:18:18:b5:e4:52:e0:05:e8:
                    1d:2c:f6:ab:16:7d:32:81:b6:f7:18:9f:66:e7:72:
                    15:28:74:c8:0d:cf:e2:72:6d:9b:3d:8d:fb:a4:a6:
                    28:c6:a7:0b:13:a7:4b:85:cc:2a:da:ba:9f:8c:8c:
                    9e:42:9b:3e:99:2d:90:f2:c3:d0:3e:0a:48:c1:1b:
                    ef:10:90:fe:af:79:fa:1b:9a:84:68:f6:a8:47:e6:
                    b0:6a:3f:58:f9:c2:10:74:59:77:b3:bb:7a:f0:39:
                    81:90:72:fe:06:ed:6d:38:6b:4f:4e:63:48:0b:8b:
                    d9:1e:29:9d:28:2d:27:d2:74:38:9e:8f:42:e9:ac:
                    ae:7e:66:02:23:44:21:8a:94:48:11:55:61:e7:3e:
                    bd:8d:8d:f1:bd:e6:7e:12:71:5d:76:4c:c9:78:7d:
                    ab:9c:5e:6e:b6:8b:83:fc:c2:6a:cd:9c:7f:71:23:
                    00:70:c1:14:8f:45:89:86:86:7c:18:fd:78:16:8e:
                    82:67:53:54:0c:14:30:f7:32:5c:7d:19:ac:96:c7:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:63:52:00:CD:DB:10:75:FD:30:F4:26:A6:AB:7D:40:BB:EA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dd5a998-59b2-353b-9d57-cb719b85b06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a3:d5:32:44:97:0b:61:ea:a6:85:10:02:4e:ca:a6:82:98:
         20:6c:0e:10:3e:0a:ba:83:cd:fd:b2:86:da:ce:90:3a:96:47:
         6f:59:a8:93:8e:cd:85:1b:9e:7f:be:d2:6d:f9:32:be:42:f6:
         3d:41:81:73:64:72:7e:55:fe:98:ed:33:5a:6d:f6:a7:a4:30:
         d6:08:c2:78:8b:44:e6:b1:d5:f4:fd:ab:03:55:e9:c4:cd:d6:
         0e:84:86:30:5e:93:ec:f5:9c:2f:cb:39:51:ee:48:c8:9d:fd:
         01:49:5d:23:51:ee:cf:bc:dd:55:37:d0:a0:bf:31:7e:d9:1f:
         7b:9c:d6:a5:4e:e4:f7:9e:fb:32:bf:01:40:9f:36:2d:66:76:
         29:c5:03:e6:2f:a3:8f:24:1f:ce:c1:e5:dd:0f:b8:02:c6:17:
         2a:34:8e:22:dc:d0:3f:6a:aa:ce:86:27:b8:54:80:a5:b3:81:
         6c:15:8d:d8:3b:cf:db:ff:ff:e9:74:9d:51:e8:a2:3a:c6:e0:
         b5:b2:87:d1:8b:4d:d0:40:b9:5d:b1:15:a3:b0:63:a3:67:79:
         4b:18:f9:02:2f:00:13:53:ff:05:33:18:e9:c7:c8:ed:ef:bd:
         7f:79:0c:54:29:ca:24:26:cc:30:af:70:20:7f:d2:f2:f8:93:
         83:52:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:44:06 2025 by rpki-client