Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2ac8d26-faef-3311-a229-bebcf861245a.roa
File:                     e2ac8d26-faef-3311-a229-bebcf861245a.roa (raw, json)
Hash identifier:          7D0/Vm5jJEXCOs09EZcueldBbXJNl7gV13gkudOy5AI=
Subject key identifier:   8E:21:DF:E7:39:1D:38:70:A4:98:C0:AA:1B:B4:CA:3A:FB:20:8F:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6C544E0DC0B00DB8E5400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2ac8d26-faef-3311-a229-bebcf861245a.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396587
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:c5:44:e0:dc:0b:00:db:8e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=d3fdebd9-727a-43f2-8df1-687bc18440ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:b9:67:65:16:46:5e:2d:ac:d2:e2:7b:69:
                    f3:1c:3b:f3:22:b8:39:b9:ef:de:2b:51:0b:5b:ab:
                    13:11:de:f1:a6:6e:8f:4d:90:f9:60:28:83:07:95:
                    e0:7e:7e:f6:5e:a4:ac:43:60:6f:e5:29:53:6b:cb:
                    f0:cd:fc:5f:cc:29:ff:7d:ef:55:f3:b8:7f:ad:cb:
                    58:e4:75:4d:23:18:e6:d5:36:9c:cf:04:f6:5a:46:
                    66:42:f6:05:a7:53:92:36:7e:01:f5:57:e1:49:01:
                    8a:47:8d:eb:f4:40:fc:f0:6b:98:38:0c:6e:b3:0d:
                    c5:00:ff:66:35:27:72:20:03:32:9e:e7:3a:0a:8b:
                    86:db:a8:fe:d5:cd:67:a4:96:10:48:6d:9a:89:fb:
                    39:2e:1e:b8:71:2c:96:8f:b8:11:5f:6e:a2:74:33:
                    66:ba:1a:38:8c:97:bb:e8:4a:6a:41:14:8d:a2:c1:
                    82:cc:04:12:d7:e7:bc:b1:52:17:1a:d6:52:14:78:
                    eb:b1:ed:8f:af:96:89:79:47:2e:7c:41:60:92:30:
                    8b:69:32:c9:45:da:c2:d9:3a:72:75:21:68:37:fd:
                    2e:20:5d:4b:f7:33:cf:61:de:0d:9e:02:42:ab:74:
                    30:5f:d6:a8:71:14:48:50:bf:7c:f4:9e:ae:47:85:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:21:DF:E7:39:1D:38:70:A4:98:C0:AA:1B:B4:CA:3A:FB:20:8F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2ac8d26-faef-3311-a229-bebcf861245a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:bc:97:5a:64:43:53:98:d7:e6:d5:a2:87:b2:78:f8:cd:
         2b:e8:73:7b:76:a4:4e:1e:2c:50:e8:6d:5b:35:36:25:44:73:
         0a:e9:4e:f8:31:89:54:74:7e:1e:7b:56:c8:1a:7d:27:e4:bb:
         5e:eb:e3:fc:a7:81:c0:a7:c6:b9:47:36:be:ff:dc:19:3e:3f:
         fd:03:e4:1b:97:b5:02:0c:bf:58:60:6a:98:67:79:ed:39:0f:
         73:91:25:64:0b:f0:6b:59:6a:a2:16:a6:8a:b3:2d:a7:8e:fc:
         9e:e3:66:a6:1b:f0:f4:09:13:2b:cc:f0:65:0c:3a:91:46:70:
         38:a1:fb:6e:d1:8d:dc:e0:3e:25:14:95:6d:a3:55:86:27:83:
         e3:50:1f:09:70:18:e2:91:97:ae:7d:92:11:fd:52:fa:5e:40:
         ae:a4:cc:51:57:a8:54:97:81:a2:2c:4e:1d:c8:0a:7e:5b:c9:
         e5:c3:ba:ce:bd:7f:50:19:92:9c:7c:34:7e:16:be:01:29:8b:
         cb:57:c5:44:73:50:78:1e:f1:da:43:e7:3e:d4:5c:2b:b1:82:
         51:bd:e8:94:90:f5:b9:66:70:4c:3e:81:84:88:2d:66:9a:ad:
         7c:15:66:9c:1e:46:e4:07:4e:e5:4e:b8:2d:f6:52:03:35:c3:
         c5:8b:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:52:22 2025 by rpki-client