Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbe9ec13-9550-301b-9dbd-2a0140706444.roa
File:                     dbe9ec13-9550-301b-9dbd-2a0140706444.roa (raw, json)
Hash identifier:          7LN5xzmLqhVHCst3qC8/42z702HWMvEoljbgqKQhOKw=
Subject key identifier:   EE:0F:15:DB:11:F7:4F:FC:BF:35:E1:39:4A:FD:44:73:79:61:B8:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C61B8366016C5D8F39A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbe9ec13-9550-301b-9dbd-2a0140706444.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     397204
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c6:1b:83:66:01:6c:5d:8f:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=e93b26d1-6dc9-4b3a-bbf5-8680a1f1334b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:e8:61:a6:70:3e:c3:0b:8c:50:4a:31:c7:
                    b1:40:e6:e2:dc:1b:27:1e:5f:52:ed:d2:b9:ed:88:
                    4e:7a:f5:30:05:38:e4:31:63:d9:48:b6:0a:6b:a7:
                    d5:70:91:e9:3d:c1:09:3b:64:a2:3b:e7:7c:66:f0:
                    a4:00:c0:f7:fa:6e:0c:a9:cc:54:6c:f3:90:c9:0f:
                    a1:0f:dd:f0:44:d5:42:c5:7f:47:07:06:e1:f5:20:
                    ae:8f:dc:38:0a:42:af:9a:f7:fc:5c:16:e0:b5:e0:
                    99:f9:f6:bc:4e:f4:57:0d:bf:2b:97:4c:6f:a5:bb:
                    9b:9b:8a:2b:5d:12:12:6c:41:74:2e:54:c2:4c:12:
                    a2:39:c1:e6:ea:18:77:66:ef:49:84:65:42:1b:dd:
                    e4:1e:6b:fb:98:cf:f1:42:31:eb:0d:bb:e3:5a:f3:
                    f4:1e:63:53:ab:64:88:a8:27:27:1c:b2:9a:82:42:
                    14:96:f3:38:77:59:01:99:64:e5:cd:56:21:4f:8c:
                    d2:9e:f5:10:bc:e9:04:c3:31:24:c7:8c:25:01:49:
                    9c:4d:45:e3:fe:66:43:4f:41:03:2c:6d:ce:0b:30:
                    ac:c4:0e:27:49:b6:d4:22:80:48:a8:c5:fc:37:a0:
                    e4:60:21:f3:8a:d1:1e:bd:5f:88:eb:54:f9:95:b3:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0F:15:DB:11:F7:4F:FC:BF:35:E1:39:4A:FD:44:73:79:61:B8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbe9ec13-9550-301b-9dbd-2a0140706444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:17:f2:6d:74:86:b8:88:6f:47:96:3b:29:9a:9d:bb:32:03:
         02:fe:6d:75:c3:f0:fe:67:d8:fa:da:6c:94:04:3f:90:2f:21:
         1f:e2:4e:f6:d5:8c:49:37:2a:c6:32:88:b7:4f:46:27:33:a3:
         2f:12:a3:30:b8:0b:98:a8:46:0d:26:cc:b8:ff:c9:50:3a:00:
         8b:33:2f:36:a3:00:8c:0e:8e:93:ae:f1:f3:19:48:db:6f:f1:
         ea:7a:ef:2e:87:71:34:3a:91:36:48:e0:ad:0b:fa:2f:1d:ec:
         8a:dc:9d:10:21:90:e4:ec:35:ad:77:5f:f5:df:d3:65:fd:67:
         0a:3e:c1:29:4a:ec:c0:2c:a6:3c:7b:c2:26:3e:de:c5:d3:92:
         19:24:e1:9c:36:19:4e:57:89:c2:ef:78:c8:02:72:1d:da:87:
         fc:ff:e0:f5:88:82:bb:ea:ad:ea:58:04:f8:9b:b2:c1:28:83:
         16:8d:30:42:d1:43:b0:37:1e:b1:7d:6c:47:2d:93:bb:cf:c5:
         cd:28:af:50:0b:ee:bd:7a:2f:36:08:23:55:51:bb:a9:52:5c:
         d4:20:35:6f:03:36:fd:0c:a0:da:83:81:ae:e9:0d:79:ff:74:
         4a:8b:26:ac:64:1a:99:4e:9d:ad:c5:b0:59:ee:e6:cf:37:be:
         31:b5:40:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:48:32 2025 by rpki-client