Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb5afa5-719c-3395-8671-000202a7f9ff.roa
File:                     ebb5afa5-719c-3395-8671-000202a7f9ff.roa (raw, json)
Hash identifier:          pZ3lGZhgOj3C2XpR4TGwei740OR9IZco8LwV9fvCSt8=
Subject key identifier:   89:56:13:BC:88:90:9B:B4:95:DC:51:8C:B5:87:2D:84:A4:0A:9B:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFEE6CB593BCE25BC854CC7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb5afa5-719c-3395-8671-000202a7f9ff.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396604
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:cb:59:3b:ce:25:bc:85:4c:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=9eabcc10-b32c-4415-baee-3b7023d1983e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:03:7f:a9:f8:97:93:c4:f2:c3:a4:84:e5:
                    61:d2:4f:f1:40:4e:3e:02:4b:57:3e:b7:5b:c3:15:
                    a0:46:32:53:8d:28:ae:6c:0c:e2:70:35:18:0b:d0:
                    a0:8e:4f:79:75:54:a2:44:e9:b4:22:9c:60:c4:af:
                    10:24:d2:47:b8:ae:d0:1a:9a:f3:ef:4d:c9:ed:9d:
                    c6:66:26:9a:f0:6b:8e:ac:08:61:7c:4d:76:73:51:
                    ed:3e:62:ed:f1:57:96:3e:1a:73:de:c6:71:aa:31:
                    63:9b:90:df:26:09:ce:b5:26:70:b3:34:7c:3c:d1:
                    4f:e3:4e:69:68:58:ee:b9:ea:01:48:1f:d6:6e:e1:
                    b3:34:a4:5f:2b:9c:fb:4a:31:cd:69:9b:f4:c2:da:
                    58:64:ef:ef:56:a4:4c:c0:c3:47:32:6d:6f:06:15:
                    fc:af:b2:1d:6b:ee:c7:32:65:20:47:c6:7a:9d:62:
                    07:ae:f5:a6:57:3f:bc:b0:40:88:dc:6d:ec:e8:be:
                    08:d4:55:4e:f2:20:c7:38:6b:46:9e:f7:08:f5:7c:
                    6c:d9:36:07:61:de:68:d2:bb:4b:1b:e6:8f:1b:8d:
                    c6:21:29:3f:58:c6:91:85:d4:8d:3e:7f:4b:43:48:
                    48:4b:c2:e2:a9:7a:3f:e1:be:12:c9:74:94:32:35:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:56:13:BC:88:90:9B:B4:95:DC:51:8C:B5:87:2D:84:A4:0A:9B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb5afa5-719c-3395-8671-000202a7f9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:97:41:a3:b4:1d:5c:b3:4d:97:fb:5f:5b:ce:19:9c:f9:35:
         48:19:70:f4:9a:be:0d:9c:b1:2c:5c:44:15:fb:70:29:a3:0b:
         0c:3c:56:8b:78:18:c9:cc:1b:3f:22:bd:12:67:0f:b8:10:d3:
         b4:17:fe:cb:e0:49:62:62:70:1e:97:38:af:1d:fd:fe:a2:43:
         31:07:e7:bd:91:52:0f:71:ea:4e:ae:5c:b3:6c:4e:ea:5c:32:
         df:7e:50:6b:d7:32:86:7a:8d:02:1d:04:22:e0:04:07:98:bd:
         88:4d:58:96:a8:70:3d:c1:8c:3f:4c:9a:e9:fc:ee:77:4d:ac:
         ae:91:8b:96:f6:b3:9d:66:12:b1:24:b9:d9:88:23:68:3b:59:
         88:c1:54:d3:f0:9c:3f:f9:d6:b1:46:45:24:45:f7:fe:b5:90:
         e6:24:f1:06:65:46:b4:fa:7d:47:7c:f0:ad:59:7d:01:94:98:
         34:1e:d5:da:8d:50:45:d2:b9:22:2c:91:d2:51:f3:c8:29:4b:
         51:48:25:cb:07:0b:61:9e:30:86:06:d8:6f:c2:29:15:8f:80:
         a5:4f:b5:08:83:3a:ea:80:d4:bb:d4:f9:9c:60:00:a9:29:6b:
         ff:0e:9d:d1:df:a4:38:83:3b:c1:b4:0e:9e:b2:31:42:3e:6d:
         be:54:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:31 2025 by rpki-client