Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa
File:                     a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa (raw, json)
Hash identifier:          TLHwZn5NUsdmL2IMF2IQxop0ro9/nVJql0QoibyY6tU=
Subject key identifier:   76:18:AF:3A:2E:5D:61:65:2B:32:DD:3A:96:33:A9:76:EF:0C:A9:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D124C679EBC48C65D7E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396602
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d1:24:c6:79:eb:c4:8c:65:d7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=7d9dd42d-5c59-4fce-a8f0-13d4466b6cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:15:87:98:a5:28:d5:a2:18:e7:b1:c5:63:
                    f2:70:bb:99:d6:5e:8b:4a:84:be:04:c7:1a:d3:74:
                    19:65:b8:c4:aa:56:ca:c6:98:12:ab:aa:1b:db:d9:
                    bb:3a:da:38:b6:8b:39:56:9f:2c:13:10:2b:df:0a:
                    cc:db:4c:5c:1e:90:32:d3:25:7a:dd:c4:6b:60:83:
                    70:b5:94:f7:3e:be:8f:f7:e2:6a:d1:5f:2a:b2:66:
                    17:58:31:5c:f8:2f:26:f8:fc:6f:4e:84:73:e8:5b:
                    56:14:68:56:74:08:e8:43:29:83:02:8e:99:d4:ee:
                    15:a5:39:d8:66:0a:8e:79:08:ae:5b:35:35:c1:44:
                    8f:0c:b8:92:58:b6:4b:d5:6b:06:89:83:38:93:0c:
                    19:f7:e0:35:d6:dc:be:10:7f:15:44:5e:2a:25:a3:
                    f5:c9:7a:8b:90:5d:94:d3:7a:7c:d7:44:01:6f:e5:
                    5f:9a:f8:84:b1:90:d9:3c:be:de:a6:39:37:5d:18:
                    46:62:0f:ca:84:03:03:86:f1:03:f3:81:a2:23:34:
                    53:24:07:10:4f:e2:42:8d:85:7b:87:46:96:d6:c1:
                    7b:c9:91:4b:71:75:36:2a:92:78:f1:9f:52:ef:a4:
                    96:ca:42:7f:e7:6c:ee:fe:73:f3:77:00:33:73:73:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:AF:3A:2E:5D:61:65:2B:32:DD:3A:96:33:A9:76:EF:0C:A9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:3e:07:ef:c0:b7:ca:e7:84:b2:33:b6:bf:87:4d:e1:fe:
         54:ce:f5:27:55:16:c4:a4:7e:52:98:82:73:a5:04:fa:22:66:
         3b:ee:7e:d4:53:67:69:0c:af:12:7d:11:bc:61:2e:6c:98:45:
         3e:6c:83:a3:88:59:b2:d8:33:70:3c:30:41:82:fa:c8:30:ba:
         1e:2c:5b:87:26:5e:78:53:24:76:b7:46:4c:10:06:94:28:fd:
         80:64:fb:6e:f0:a0:da:55:fa:2f:b4:94:8a:73:b6:b8:4e:60:
         e0:91:b5:cb:aa:73:7d:e8:3b:72:d9:ba:41:35:2d:08:a9:e4:
         98:84:4e:03:ed:77:2d:aa:30:79:fa:3d:cf:d7:a6:84:4e:ab:
         78:2d:ec:10:90:97:34:c6:2f:80:85:c2:ca:c1:97:6f:63:0c:
         8d:f3:7d:f2:b1:c6:40:7a:e4:3e:70:e4:57:a9:b0:d7:df:87:
         8f:21:49:f6:9e:7f:9e:3e:51:e4:de:9b:97:0a:7e:cd:1a:4e:
         94:d0:e3:de:a3:6e:8a:54:01:f9:11:04:f1:9d:e7:cd:2a:91:
         b6:dc:e2:2d:47:c6:1d:d1:22:5e:95:35:9d:54:81:7e:26:8a:
         19:b6:c9:2e:81:a8:28:73:3b:22:54:5d:72:2c:71:cf:c0:40:
         13:71:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:53:20 2025 by rpki-client