Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c75c9659-34ff-33eb-80d0-f050e807d9d5.roa
File:                     c75c9659-34ff-33eb-80d0-f050e807d9d5.roa (raw, json)
Hash identifier:          Y9GsIzUISjZJ+pKUfS36kcQuQf2hTqdeiA30VGKDs7w=
Subject key identifier:   07:33:F3:72:31:C4:08:53:82:2D:02:0E:D0:75:16:60:82:40:03:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D0FCAC7685C9A61645C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c75c9659-34ff-33eb-80d0-f050e807d9d5.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     397208
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d0:fc:ac:76:85:c9:a6:16:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=77382031-c908-4fa7-ae59-d0298729536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:43:f4:c8:6f:5e:74:76:ab:54:f1:ec:64:
                    d5:45:4e:ca:02:1e:8c:9a:ae:86:52:b2:eb:4c:72:
                    4a:d5:b7:d3:cc:ba:9d:b2:0d:15:fd:ab:da:8c:f1:
                    e3:ca:c8:cd:e5:64:6f:59:01:2f:a5:e7:f9:b2:b5:
                    a7:81:bd:e8:41:40:83:41:95:93:e6:ff:d7:71:ea:
                    8d:11:ac:28:ef:7e:1f:c5:fa:41:9b:2f:51:46:bf:
                    18:78:92:1e:b1:00:0e:c3:fe:1f:21:c8:84:4c:a3:
                    35:c0:2e:75:50:dd:f8:74:26:9e:e0:d4:f1:77:89:
                    72:06:0c:e7:ea:61:d1:44:90:41:64:51:f2:e5:53:
                    93:f2:40:61:75:f8:20:03:fe:c8:68:61:ed:c4:52:
                    2a:9d:a7:db:be:71:5f:fd:9d:da:9d:7f:f7:84:4a:
                    3d:f5:7a:5d:f8:3d:98:61:9b:e4:31:ab:1d:fe:b5:
                    d3:d8:16:69:18:ca:c0:23:4e:fe:0f:89:80:91:3f:
                    0b:e0:a8:4b:55:83:3f:fc:f9:a2:95:d9:73:a7:bd:
                    90:cc:cf:d7:11:12:f9:1d:11:a5:5c:ef:73:6d:28:
                    81:bf:a0:ea:a3:c5:11:3c:39:a0:13:a8:91:49:e7:
                    90:1c:81:f5:f1:3a:78:1e:e2:c8:6d:4c:b6:c2:b9:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:F3:72:31:C4:08:53:82:2D:02:0E:D0:75:16:60:82:40:03:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c75c9659-34ff-33eb-80d0-f050e807d9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:97:39:03:2f:dc:b6:cd:11:df:5a:dc:27:23:56:98:3e:ec:
         95:9e:18:0b:0c:d8:34:53:22:14:c4:51:4c:bb:69:89:df:77:
         6e:2b:ac:02:09:45:35:bf:f5:c4:7e:e3:db:c0:1b:bb:03:5b:
         a7:7b:2a:79:85:09:44:c3:85:e0:27:27:48:44:aa:56:47:58:
         23:e3:47:f5:a0:65:db:04:e8:e0:b7:42:7d:a5:b6:f0:b4:61:
         b8:0e:56:9f:c9:a4:6f:66:8d:e9:c6:d5:c5:bb:82:c3:6b:44:
         15:5e:47:df:89:9b:73:d0:fa:cf:71:42:3e:18:6c:65:14:35:
         2c:5c:42:21:47:7f:67:c7:4e:9d:56:da:ac:61:19:e8:e9:21:
         13:08:33:8d:b2:59:d0:c0:e0:e5:18:b0:84:8f:10:a5:46:93:
         c5:e5:83:86:aa:b7:ca:07:57:7e:f7:56:85:0a:64:69:82:7f:
         e6:ac:40:cd:cb:b9:94:d9:2d:ff:99:8d:7e:b9:7f:af:cc:c1:
         18:09:18:04:75:c4:d1:57:bf:44:21:d8:4b:eb:07:6f:a1:2c:
         3b:5f:f0:01:28:8e:c2:c5:47:d4:56:b1:f4:97:85:69:8d:34:
         dc:46:1a:17:57:6d:7d:47:b6:8d:ed:1d:94:b9:c4:d8:e6:2a:
         ab:a6:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:13 2025 by rpki-client