Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e5213-5133-3be6-a6d8-6e7c19349de3.roa
File:                     e58e5213-5133-3be6-a6d8-6e7c19349de3.roa (raw, json)
Hash identifier:          5OR7GuLW68/W2DooHy1NAFaiu1YSL8E/QpZdKGNm6Xk=
Subject key identifier:   E0:56:B2:E7:0C:C8:CC:24:81:5D:80:57:E7:A8:A4:82:03:71:01:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496EDEF83B6E8E72F17C700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e5213-5133-3be6-a6d8-6e7c19349de3.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     396573
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ed:ef:83:b6:e8:e7:2f:17:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=9b516f43-09f2-4757-aacc-bc87ea5c2ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:2b:d1:3d:90:b2:5f:eb:35:8b:42:2b:89:
                    37:a3:a3:0b:1c:52:23:01:e4:e9:1b:2e:83:d1:ca:
                    6f:17:03:9a:12:4d:0d:31:c3:62:b9:7e:2c:50:87:
                    75:b9:b8:a1:1a:d4:d9:c6:a0:32:36:65:b4:71:2f:
                    f7:d9:1d:6c:ff:f7:16:66:47:5c:52:a8:e0:67:88:
                    23:f6:f2:b7:36:8f:f9:cc:43:e2:e6:fa:83:e8:a2:
                    40:20:1c:30:2c:ca:e4:4e:85:9b:aa:97:90:84:a7:
                    0e:65:16:93:4d:41:ae:71:75:6c:7a:8e:67:78:0c:
                    8d:14:c7:e3:0a:4d:d5:c3:d1:3a:23:d2:b4:75:60:
                    68:a2:dc:3d:ea:3f:57:26:f3:a8:80:d9:e8:ea:22:
                    a7:63:96:fe:31:bf:01:84:41:5c:eb:82:b3:cf:35:
                    dd:09:ea:44:a9:f0:87:3a:5b:e9:46:85:ae:ac:dc:
                    fd:e9:16:83:8a:c2:35:21:02:d6:5b:79:12:ba:13:
                    3e:c4:d4:5e:64:7c:96:cc:52:9b:15:fa:20:7a:fd:
                    c1:25:22:b8:0f:0c:3d:22:76:16:5e:11:07:77:03:
                    b5:6a:92:c5:67:79:ef:25:48:76:ed:13:66:34:e6:
                    3d:3b:db:4a:c6:6c:e3:54:e2:bf:94:dd:f0:94:1c:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:56:B2:E7:0C:C8:CC:24:81:5D:80:57:E7:A8:A4:82:03:71:01:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e5213-5133-3be6-a6d8-6e7c19349de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ca:82:c6:d1:82:d5:bb:f6:d7:4d:18:b7:bd:aa:64:38:a8:
         ad:42:a5:76:9b:5f:4c:b6:e9:32:b4:a1:1a:98:92:40:49:95:
         39:d3:63:27:48:39:25:4e:36:ac:bd:a1:10:2e:86:4d:74:48:
         44:7f:5c:28:8c:e9:9a:cf:b6:d1:5f:fa:f5:66:7d:c0:0e:09:
         83:c3:28:e1:d2:33:a6:8a:24:32:9c:ee:fe:3c:8b:43:c3:05:
         79:72:54:12:e9:1d:1c:ea:03:ae:e6:18:d0:46:fa:9b:e0:7f:
         56:88:26:10:1c:34:40:da:c2:d5:6c:e3:54:06:2d:a2:05:84:
         cc:1a:f5:49:88:52:3f:bd:50:42:0a:2f:50:79:f2:10:56:04:
         82:34:06:65:ae:d0:fc:1e:e1:08:e5:e6:cd:25:0d:5f:36:22:
         83:a0:b6:83:a2:21:90:37:26:4c:58:6c:b8:70:85:74:15:a2:
         fc:9a:f9:11:7f:27:a9:ff:b2:52:3d:ee:dc:a6:e2:7a:00:e2:
         a4:a9:c0:20:ce:60:a5:6b:bb:34:3e:dc:73:38:8d:21:fb:b6:
         9e:4e:a7:08:af:36:57:aa:af:7e:8f:01:c7:3b:ec:7c:e3:ef:
         7f:cd:36:02:82:9c:11:19:b7:b3:c5:ad:cd:61:a5:60:4f:1f:
         72:55:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:42:20 2025 by rpki-client