Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99138138-0849-359b-9736-a8f84dafd543.roa
File:                     99138138-0849-359b-9736-a8f84dafd543.roa (raw, json)
Hash identifier:          2kS01MXzVTqV6LhhbBWFMHWI69fTE4oVRGKE6xPoyHk=
Subject key identifier:   31:93:04:C8:E5:BE:71:F7:EC:B5:70:AE:48:89:87:C5:27:86:1F:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C7B55F249495426DA800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99138138-0849-359b-9736-a8f84dafd543.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396541
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c7:b5:5f:24:94:95:42:6d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=57beb061-0070-4216-8457-1a142fffa803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:ce:14:2e:93:63:42:41:0a:fe:d1:ac:09:
                    bb:fc:cb:86:88:f5:d5:87:7d:b0:41:3c:68:e5:0b:
                    da:53:e6:59:d2:5b:9d:36:ab:06:a1:16:aa:c5:c4:
                    da:5a:96:2e:3e:d9:f4:20:ae:65:7f:be:2b:8c:d9:
                    8c:50:de:f4:fa:e8:50:b9:7e:9f:09:6c:2f:35:2a:
                    ee:83:b5:90:c2:b1:56:b8:86:73:52:78:c2:8d:5c:
                    ad:46:be:11:a0:5b:62:64:46:ce:03:c1:7f:11:db:
                    b8:8f:e9:de:fd:b5:57:2c:35:ce:a5:33:89:b2:e2:
                    98:a4:66:32:f5:0b:d2:c6:92:b5:7f:5e:98:6c:be:
                    e5:2e:e9:a4:fb:2c:d9:33:1a:b2:67:de:8d:61:8c:
                    b6:e0:e5:3d:49:d9:7e:58:f4:82:56:db:d9:a8:9d:
                    1a:c3:b2:ab:48:eb:4f:95:88:81:c0:bc:c2:48:bc:
                    14:58:0f:98:cb:8c:3f:86:24:df:a8:0f:23:fe:0d:
                    8a:91:b4:83:f3:ee:9a:ea:59:f0:e8:95:b5:7c:35:
                    fc:b0:55:22:21:2e:ff:af:e2:1f:19:9c:de:e8:a0:
                    00:0a:b7:a4:0d:db:23:98:b6:52:61:7d:f9:e4:a9:
                    47:98:df:16:63:81:f0:2c:e3:73:79:cb:b3:b9:c3:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:93:04:C8:E5:BE:71:F7:EC:B5:70:AE:48:89:87:C5:27:86:1F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99138138-0849-359b-9736-a8f84dafd543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:01:bd:07:a7:71:4c:57:71:c9:1a:4e:b5:1c:f9:be:ef:
         38:47:50:63:04:8b:b4:0e:3c:84:b8:d4:2a:6b:6e:e8:aa:ec:
         33:c4:af:d6:62:22:5f:7b:88:07:ca:31:80:51:69:8b:c6:29:
         ea:db:d5:82:ce:32:96:97:cb:bf:39:a5:9e:3e:e1:cd:0f:9b:
         18:ce:74:62:a0:77:87:20:e7:52:42:2b:8d:e0:9f:31:9a:5c:
         e1:0b:16:f1:a6:12:37:94:91:5f:45:92:68:f4:75:a8:7b:34:
         b0:4b:4b:a8:6f:b7:45:1a:71:5d:fb:b3:9d:1c:0b:cd:37:17:
         ba:b2:7f:a0:6f:db:bf:c3:da:b4:95:05:c8:49:ee:0a:28:46:
         ca:c8:f8:fd:10:1a:f5:04:54:a6:81:34:e1:6f:58:92:07:33:
         4b:e2:93:84:3f:6a:67:e9:26:bf:16:12:b6:af:21:3d:cc:8b:
         a3:26:57:d2:b6:46:14:e5:f5:ae:a8:bb:0a:af:24:1f:f9:c7:
         ed:11:4f:b8:2b:51:64:e7:e5:89:cd:ee:9f:df:d2:f2:fc:0d:
         4a:72:55:ce:a0:6a:13:9a:9b:4c:df:5f:45:6b:d9:9a:f5:ac:
         62:98:14:ec:1f:53:3d:0b:fc:c3:cf:12:17:ee:27:60:20:21:
         dc:3a:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:45:21 2025 by rpki-client