Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/891b9445-4fda-38a8-9fcc-79054137b412.roa
File:                     891b9445-4fda-38a8-9fcc-79054137b412.roa (raw, json)
Hash identifier:          3tnU8Ec+BlkTg18fonCYs72GBOVrhO+A9f141GWwJCc=
Subject key identifier:   8F:D6:3D:9E:8E:49:8A:DB:5B:A8:9A:18:C7:C3:CA:E8:5C:5C:1F:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0746D0CE594F0FB370B506D4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/891b9445-4fda-38a8-9fcc-79054137b412.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     36621
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d0:ce:59:4f:0f:b3:70:b5:06:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=cd7a71f2-44f7-4678-bbf2-22110ccc677d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:c4:f4:6d:e8:af:45:98:2d:4e:3d:d2:15:
                    e0:5f:71:97:3c:07:81:51:a2:43:d0:e0:73:39:fe:
                    25:4f:53:df:9a:e0:ff:24:88:c7:d9:43:2a:dc:d8:
                    d6:0b:61:b7:14:30:87:ae:73:ea:7f:fe:36:0f:9b:
                    ae:fd:01:84:6c:db:42:03:8b:11:59:b8:07:90:08:
                    3d:35:b2:27:c7:38:b5:2b:c8:02:1e:3c:5f:f8:81:
                    13:e6:08:34:5b:ea:63:11:4d:84:39:27:bd:2e:a1:
                    b0:dd:46:8a:b7:43:6e:ff:88:e7:b4:08:29:e2:2e:
                    55:02:4d:3b:6e:dd:8e:39:12:6f:d1:a6:ca:3b:b0:
                    fe:6c:3c:f5:38:60:15:6a:ce:45:cf:49:f5:5b:55:
                    c9:ae:54:e5:49:fb:5f:68:de:d0:c9:5c:47:a7:48:
                    23:2b:d0:f0:2a:85:b2:dc:80:fb:4e:8d:79:b9:f9:
                    20:c6:aa:bf:b3:9e:d7:2d:97:a6:13:6b:7e:3d:49:
                    be:ac:26:e0:75:c6:5f:e4:27:53:19:f4:5e:5b:9c:
                    8e:f6:64:49:af:08:3b:ad:1e:97:04:a8:8c:1e:ef:
                    ef:83:06:b9:50:53:04:82:8e:d6:9d:fc:85:93:83:
                    9d:fe:3c:ba:e0:9f:a7:4f:38:16:2d:06:0c:25:22:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D6:3D:9E:8E:49:8A:DB:5B:A8:9A:18:C7:C3:CA:E8:5C:5C:1F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/891b9445-4fda-38a8-9fcc-79054137b412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:50:fc:81:4e:1d:ac:c6:8c:ee:93:31:54:45:50:e5:37:8a:
         07:db:af:d5:68:10:6f:4d:26:11:90:ba:89:69:29:a4:07:41:
         2e:cb:ef:aa:b0:48:bb:b3:44:50:b5:eb:7d:3c:50:89:6a:6f:
         b5:ab:3b:58:99:d5:a7:75:f4:dd:ef:c7:f8:32:16:c7:1f:eb:
         b3:10:f8:ee:52:6f:85:51:94:fd:f9:47:ae:9e:cb:d5:fe:c8:
         a7:61:3d:f6:64:40:ef:ee:b0:e9:b8:7c:b2:90:ad:a7:17:42:
         27:93:e5:9c:3e:4c:0a:5b:26:d6:50:79:e5:f8:fe:3b:0b:dc:
         6e:73:f0:cb:e3:23:93:7e:82:2a:84:f0:18:f7:ab:a7:d3:df:
         a5:26:e5:1d:f4:1b:95:be:31:4d:7c:a9:b2:d9:91:cc:cc:76:
         2e:9c:d0:1f:72:fe:57:e5:5e:d2:52:ab:a4:1f:92:92:4e:5f:
         e4:64:0d:f2:19:1b:85:1e:01:25:90:7d:6b:7a:de:04:ae:70:
         9e:36:7d:d8:ca:5a:95:4d:88:9e:2c:cf:f4:d9:34:9e:cd:ce:
         41:8f:f6:9b:f4:f9:ed:42:f0:2a:61:63:4a:da:d8:06:11:29:
         9f:c5:09:69:7f:51:e6:bf:e7:cf:0e:d5:05:76:67:33:00:c5:
         12:f8:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:45:20 2025 by rpki-client