Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc69ddbe-12c9-3614-867a-415787f8d7ff.roa
File:                     fc69ddbe-12c9-3614-867a-415787f8d7ff.roa (raw, json)
Hash identifier:          CJztYhakO/31j5id9WrobxhEY3/KCRH0y+0YLTCc5ew=
Subject key identifier:   43:51:8F:8B:90:AF:4C:76:BA:0C:11:D1:B1:3F:84:52:65:92:0D:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B13D6CC9C2A296C962BEA5700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc69ddbe-12c9-3614-867a-415787f8d7ff.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396576
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:cc:9c:2a:29:6c:96:2b:ea:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=85241d30-49f6-4df0-aa72-8b4a96f00813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:f4:c7:f6:63:c1:e2:c5:58:d0:f9:ae:4c:
                    89:2b:14:26:27:20:98:91:e1:19:55:1c:4a:d1:62:
                    9c:5b:8c:a2:0c:3e:6f:8e:b1:c8:93:78:98:dd:b6:
                    9b:5f:64:6b:c4:ac:6b:cf:e8:4d:30:67:d4:16:97:
                    62:31:73:77:d4:7d:19:91:9e:d8:8f:22:a2:6e:74:
                    a8:14:b5:bd:1e:a8:fd:a2:69:5d:5a:df:1a:4d:b4:
                    1d:86:1c:dd:db:f3:95:78:32:11:17:76:69:d5:53:
                    99:24:96:52:f0:00:4d:e9:6f:93:42:17:4a:33:db:
                    46:31:f7:02:ec:e5:51:f7:e1:75:fa:d5:f1:94:a2:
                    42:82:75:89:9b:40:8f:ee:15:7c:57:73:1f:d4:a7:
                    22:ce:08:af:00:86:9f:a6:1c:d6:4d:89:06:ab:2b:
                    61:fc:a2:36:13:c6:55:32:f9:9f:c3:b1:b7:f6:27:
                    a2:23:f9:8f:3a:6e:e3:3f:7f:23:eb:50:82:f7:13:
                    77:1e:21:cd:57:12:12:9d:f9:61:97:35:e3:11:c5:
                    6c:8f:88:7b:b5:70:92:04:ff:fa:14:db:8a:9b:6b:
                    f6:5b:5d:a4:01:c8:ac:9c:ee:af:5e:b4:fc:43:df:
                    38:92:be:2d:fd:93:e9:31:5a:b6:89:d5:e0:a2:b5:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:8F:8B:90:AF:4C:76:BA:0C:11:D1:B1:3F:84:52:65:92:0D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc69ddbe-12c9-3614-867a-415787f8d7ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:99:0f:d8:fe:6b:2f:93:8e:16:7e:61:a5:55:4a:81:45:
         84:be:45:2c:68:76:44:a7:2d:57:a3:d7:11:90:b0:e5:17:31:
         dc:f2:31:c9:e0:1c:98:3b:31:cf:01:65:cb:6c:f6:d5:d3:f0:
         40:9c:4c:81:9d:8c:a1:02:11:8f:71:98:08:dd:46:5c:ce:a6:
         b1:6d:b6:4d:a3:d8:03:fd:2c:02:81:63:15:d8:f7:29:f8:30:
         29:34:84:3d:eb:18:91:a6:c9:1a:58:46:22:06:62:6c:5a:69:
         d0:4a:ee:99:a7:cd:f8:49:0e:81:ac:1c:59:21:a9:80:a2:1b:
         1c:6d:ac:f0:15:bc:e4:d2:0e:0b:34:bf:80:58:46:63:e0:28:
         11:f6:f0:aa:a3:fc:57:d8:cf:10:aa:42:cd:9e:33:9d:16:11:
         92:0c:52:3b:bf:6c:ab:b0:56:a2:83:7b:0e:ac:d8:c8:47:92:
         c0:a2:3d:5a:8b:87:fb:17:46:9a:5d:57:79:b7:07:53:52:be:
         2a:36:b3:6c:15:61:86:2f:ab:fc:d7:e5:ae:e1:cd:de:43:74:
         e3:af:ae:5d:15:03:ea:1d:35:4a:81:a6:4d:3f:04:1a:23:c7:
         a7:d0:1d:25:2b:2f:08:da:a4:fa:52:be:fc:3b:8c:57:f8:a7:
         02:7c:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:17 2025 by rpki-client