Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa
File:                     dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa (raw, json)
Hash identifier:          YClTbkNh6ZnjpxE0LK+vCy13/d1RcyhjkA9QP/Y8eIg=
Subject key identifier:   E2:F2:1F:27:6C:D7:B3:C2:68:49:05:21:ED:A8:F3:4E:05:93:55:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6CC8788D6E3C7DB14CF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:cc:87:88:d6:e3:c7:db:14:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=ccbb54c0-5aaf-4518-98e9-896feb71964e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:3d:78:28:b9:dd:5d:2a:92:51:25:6b:3c:
                    75:66:76:c4:15:45:af:e3:7d:e9:20:a8:7d:db:26:
                    ee:f1:2d:8f:8c:8e:90:32:01:2b:94:b6:1a:29:97:
                    83:cf:48:4d:6f:5a:bf:82:bc:9b:e3:3e:13:3e:c0:
                    e2:a9:30:81:1c:7b:dc:54:c3:57:b7:63:a0:a5:bd:
                    77:53:33:8e:83:9c:9b:7f:bb:5e:c2:48:c9:70:e4:
                    9f:c1:c5:42:8f:04:84:46:c7:dc:94:1a:f6:08:d5:
                    95:07:8c:91:fe:91:92:bf:d7:14:a8:9e:8f:43:ab:
                    16:c5:e2:7b:f9:74:3b:d9:c6:b4:6c:f0:67:1d:e4:
                    f1:f1:d4:b2:8a:10:2c:02:b2:45:77:1e:39:ef:68:
                    1e:d4:eb:ef:b9:1d:bd:05:8c:a6:62:7d:34:0c:ee:
                    50:fd:a3:cc:4a:ab:88:19:1c:e8:8a:20:2a:15:b2:
                    d4:cf:29:e7:b8:da:c5:53:a7:d7:7b:da:91:fa:46:
                    76:68:41:7a:0b:bd:c4:15:30:2f:39:8d:be:b6:f2:
                    2e:89:b9:5e:c1:53:8d:74:5c:41:c8:cb:7a:91:db:
                    39:f4:45:8f:c4:8f:df:63:90:47:14:19:ed:33:96:
                    f0:76:9b:49:f4:cb:2c:da:17:e0:de:fe:6f:f1:ef:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F2:1F:27:6C:D7:B3:C2:68:49:05:21:ED:A8:F3:4E:05:93:55:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:4a:71:29:69:53:bd:53:1f:27:c2:13:1b:16:ba:7d:63:
         d2:94:9e:87:64:57:e3:ce:1b:cd:51:ca:58:88:05:5f:e3:6d:
         e3:92:2d:e9:c7:25:06:30:dc:dd:7b:4a:41:93:69:14:2c:8d:
         27:00:df:a4:30:93:d2:d7:c4:2e:94:ee:08:1b:72:e1:42:2d:
         e6:fc:21:b6:ce:f4:91:d6:12:bd:ff:a9:da:8b:5d:29:07:64:
         c0:25:6d:e9:d3:49:15:4b:b3:78:18:bf:97:b0:8b:b7:fa:7b:
         3a:0a:0d:6d:9c:b7:12:f2:ba:70:d7:25:8b:28:d4:bf:3f:02:
         24:ff:b8:37:10:f3:72:27:cc:d5:65:cf:a5:f7:ad:2d:e4:af:
         d5:0b:92:4c:75:91:14:95:8d:07:db:ef:72:cc:d4:eb:aa:c8:
         97:42:06:ec:c7:e4:31:ce:b9:76:07:da:9f:a1:d8:9a:6c:3e:
         30:f9:d2:bd:19:98:d7:88:ad:eb:b4:dc:cf:db:80:ed:72:dd:
         a1:89:1d:a1:fe:bb:0e:63:01:70:33:ad:e0:8c:bf:be:33:03:
         09:82:47:64:2d:b5:91:4e:ca:d1:46:af:e1:64:f3:09:90:08:
         fe:60:16:19:79:86:14:a6:ab:68:fe:64:70:6e:30:db:4d:a9:
         d9:ee:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:03 2025 by rpki-client