Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
File:                     c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa (raw, json)
Hash identifier:          i70djak7Na9xpNHhB5RgcfAbO1XrAhdsQSoJFgfJfo4=
Subject key identifier:   13:FC:DF:6C:37:6F:79:DC:02:6B:99:E0:CC:C6:DE:EE:FA:E8:AC:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6D138DA6FDFF13F1C9080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396575
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d1:38:da:6f:df:f1:3f:1c:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=afb89fb0-95bf-4dcd-8293-dae1efd1c5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:7d:a3:9a:a3:65:5b:53:ba:a4:86:b0:47:
                    ad:6c:8c:d5:a0:ca:52:26:94:17:04:34:b8:3c:57:
                    ad:41:22:2e:99:ef:0b:ef:51:f5:a5:5f:95:73:06:
                    ef:90:05:41:d3:c3:de:13:43:48:59:0d:88:5a:cf:
                    05:9b:45:c3:7c:c0:48:a8:d9:37:c2:09:71:9a:ae:
                    ca:fd:d8:85:1b:66:9a:92:be:e4:d9:6b:95:26:ef:
                    13:62:bf:ae:e6:21:73:8e:db:55:d8:81:74:39:08:
                    21:d0:0e:b7:ba:65:b0:5b:1a:df:62:9a:9d:39:5b:
                    e5:11:fa:c5:77:33:7f:98:1d:af:27:ac:25:a0:e4:
                    78:cd:75:c3:f1:ed:f7:76:89:fc:e0:ec:41:0a:a7:
                    30:a6:48:dc:0d:10:76:01:3a:4b:56:75:cc:59:29:
                    6f:b8:98:ba:70:23:55:1a:b4:ad:9d:12:17:28:0a:
                    1f:f8:dd:fe:e7:c8:13:bc:e4:77:b7:88:02:38:f6:
                    68:05:23:df:82:07:18:32:32:90:25:6d:c9:75:dd:
                    79:59:ea:73:bf:ff:ff:46:b2:f6:0b:f8:9b:89:f6:
                    ab:bd:a6:6e:bc:dd:84:fc:d7:41:e8:fe:a7:d5:48:
                    a7:d0:49:34:a3:23:86:e1:e5:71:d2:9a:b1:8d:5e:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:DF:6C:37:6F:79:DC:02:6B:99:E0:CC:C6:DE:EE:FA:E8:AC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:68:68:0e:c4:d5:d8:3b:6b:13:85:bf:e6:98:85:0b:d7:
         7b:6b:7a:42:51:f9:8c:39:84:70:af:8c:26:78:92:20:67:6d:
         89:f6:55:61:a4:c9:e6:07:13:81:0b:0b:68:45:3a:fb:4c:13:
         58:8e:64:40:0d:6f:72:e4:94:91:00:3c:48:ec:58:0f:ba:99:
         08:4c:d9:8a:a2:07:1a:55:c2:96:c1:4a:73:04:10:eb:61:02:
         cb:49:17:af:60:aa:a9:e7:7c:b4:11:a1:33:27:9a:7a:24:0e:
         83:0c:31:f5:39:bc:30:d1:00:aa:3f:2c:b0:63:ba:98:fa:0f:
         9d:f9:db:6a:1b:6c:de:3b:9a:b9:e5:49:05:25:e4:a4:be:b2:
         f6:a1:49:8c:17:68:47:94:7b:a6:03:5c:fb:6a:d9:e4:52:66:
         49:bb:4d:29:37:f2:a7:3b:e2:51:56:18:04:a0:52:82:c5:d5:
         63:e9:7b:25:f4:52:2c:f1:ce:28:fb:78:04:03:c2:13:26:c6:
         3b:70:a8:0e:52:77:89:56:6a:7d:09:69:68:46:54:36:fa:0f:
         69:0f:0f:ba:6b:69:a0:06:7f:15:7b:b5:79:24:27:d4:71:63:
         23:27:58:66:58:a3:a4:7d:5e:ab:1a:3b:26:6e:32:5d:6e:68:
         54:75:7f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:41:42 2025 by rpki-client