Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6d92afe-6029-3f44-bd23-f562d77ffc50.roa
File:                     d6d92afe-6029-3f44-bd23-f562d77ffc50.roa (raw, json)
Hash identifier:          8xOo8Wmb+b+u1BhUqC6ZxX7i0atAFNOssA7AM9r8K5Y=
Subject key identifier:   A2:09:DF:94:A4:A5:B2:36:DC:DA:9F:75:C6:62:BB:89:4B:2A:89:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496E7E712BDBBCB1E9F4580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6d92afe-6029-3f44-bd23-f562d77ffc50.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     396584
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:e7:e7:12:bd:bb:cb:1e:9f:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=24ce2875-4691-4f94-8c81-60886dbf74b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:99:c4:ae:33:32:dc:81:10:de:c9:06:1d:
                    d4:1c:f4:dc:a5:ec:08:98:9c:5f:11:65:2d:20:57:
                    be:44:75:6b:1a:ef:89:ed:a2:b1:58:24:3b:1e:90:
                    9f:4d:f4:53:e0:4d:b8:33:40:be:9b:bb:f8:c5:fe:
                    2e:fd:ab:e8:fb:9c:c0:bb:4b:d3:00:84:28:dd:49:
                    6a:e7:ab:7a:30:e9:ef:cd:60:01:bb:39:1d:45:57:
                    a9:a4:6b:6b:d8:52:b0:e6:f8:87:3e:23:22:dd:65:
                    cd:89:a3:16:46:10:36:d4:1e:6d:d5:92:8c:40:81:
                    6e:ca:f2:fb:3a:c3:2a:72:34:9d:4e:03:51:b7:3d:
                    47:7c:5a:1e:e4:34:54:c5:9b:ef:fc:cc:4d:66:0b:
                    36:52:1c:26:ad:77:3a:d2:21:b6:74:b1:41:66:05:
                    84:21:94:69:33:b5:2b:66:c4:d9:86:7e:ac:7a:59:
                    8a:a7:48:91:9c:bb:e8:93:73:92:ca:70:45:c9:22:
                    f1:5b:b7:97:1d:54:e9:d8:7d:8c:92:70:e9:66:51:
                    aa:2b:29:96:89:35:6b:c3:6a:aa:61:71:8d:a6:91:
                    74:1d:d3:3c:0b:9e:30:98:0b:96:97:83:fd:48:2b:
                    9c:6d:05:08:7a:08:d6:70:ad:44:d0:0b:35:22:be:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:09:DF:94:A4:A5:B2:36:DC:DA:9F:75:C6:62:BB:89:4B:2A:89:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6d92afe-6029-3f44-bd23-f562d77ffc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:23:f9:1a:02:54:b4:2f:c9:04:fb:38:be:c1:db:0e:94:60:
         8c:6e:ed:96:45:45:52:e9:dc:3a:94:16:43:2e:6a:70:1a:e5:
         3a:06:d5:12:c0:f8:74:d7:82:d7:04:18:cf:62:64:ba:0c:3e:
         04:80:5e:96:27:b9:ae:5b:bd:c1:90:ce:69:14:e0:0f:6f:fd:
         5f:c7:be:b7:47:5b:c0:01:60:10:18:48:c7:b3:18:b1:6c:fb:
         b5:83:3f:c2:31:ca:77:48:1b:62:fa:c5:f9:55:5e:ad:96:5c:
         59:cf:c5:00:88:9c:12:4b:5c:40:19:0f:ef:b2:01:d7:4f:c1:
         af:18:ab:35:1c:cf:f0:a7:28:6d:de:d5:1f:ea:e2:47:99:47:
         56:8b:8a:03:ca:a1:e0:10:4d:13:28:67:32:7d:34:c0:96:0b:
         6b:62:b4:15:97:5b:bf:67:fe:27:73:f3:22:e1:2d:8c:5e:67:
         05:99:62:32:f7:ca:ec:76:13:6f:59:52:f4:de:03:1e:05:a8:
         5c:e6:1a:29:72:c4:93:d1:4c:7f:db:72:d0:b8:db:6f:06:a4:
         4f:f2:59:07:52:74:cd:8b:0d:59:2a:e2:04:ab:89:c7:12:49:
         5b:6e:5b:11:96:b0:ef:d0:73:64:3f:a3:9b:ef:8f:52:7b:96:
         e1:dd:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:42:38 2025 by rpki-client