Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc9f54f0-e1ee-3093-96f3-7536f6433c96.roa
File:                     fc9f54f0-e1ee-3093-96f3-7536f6433c96.roa (raw, json)
Hash identifier:          h0TE3Z5iACwm44iDvWvJ/V31tiBpuE6qSRgnR/v7YfA=
Subject key identifier:   37:B5:91:55:FF:F0:73:29:59:06:66:37:63:54:1B:D8:91:4D:17:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2496EC3C36397B1BF5594780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc9f54f0-e1ee-3093-96f3-7536f6433c96.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     36626
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:ec:3c:36:39:7b:1b:f5:59:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=ce2f48f5-5632-4eef-955a-f4afa2ce11de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:b5:22:8d:e0:dd:84:ac:ad:e4:9e:e9:89:
                    a0:7a:72:07:5a:11:d1:74:34:a4:db:66:c1:14:b6:
                    aa:60:cc:98:bb:da:e4:1b:4c:59:c3:89:be:ed:93:
                    26:4c:ce:7e:41:aa:d8:88:b6:51:5b:f8:df:18:a5:
                    ff:41:25:4f:87:8a:11:ee:f9:72:e3:c8:33:0a:e4:
                    94:35:98:83:dc:08:43:47:ac:88:b1:bb:a3:bd:67:
                    c8:70:d3:e4:f7:23:cf:f5:18:84:2b:fe:2f:4a:2b:
                    c2:47:c1:94:68:c7:ec:04:9f:6c:51:90:e5:79:d2:
                    d1:3d:bd:e7:69:8b:99:c7:ca:d9:e4:09:1c:d0:40:
                    42:83:a7:3e:a6:18:6d:ab:7d:69:46:21:1c:22:13:
                    c6:f8:bd:ac:1d:b4:c8:f8:9b:51:8b:c1:14:a5:4a:
                    85:4f:e1:a4:00:48:07:a6:86:1c:e3:98:44:10:67:
                    a1:a0:ad:4d:1a:53:bd:35:15:bc:41:ce:b9:79:fd:
                    48:5f:56:41:d8:7f:c9:36:59:ab:b1:10:ee:7e:3d:
                    14:7b:b2:e1:b1:ab:d5:a3:bd:7c:25:11:31:ba:43:
                    94:fa:8f:37:79:dc:5a:12:c8:e0:dc:4d:d8:b5:34:
                    a6:89:27:c0:88:b4:59:39:ca:a0:23:28:24:3f:92:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:91:55:FF:F0:73:29:59:06:66:37:63:54:1B:D8:91:4D:17:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc9f54f0-e1ee-3093-96f3-7536f6433c96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:70:05:19:e4:13:dc:4f:9e:b1:11:d2:fb:e2:e2:8f:f3:7e:
         0b:40:5f:a6:96:d6:e0:89:2f:59:72:03:97:bd:03:66:ea:3a:
         14:2d:2d:59:13:88:be:34:2c:01:cf:49:f6:5f:98:39:3f:5c:
         08:9b:c8:be:b6:fd:12:4c:3d:aa:22:7c:21:db:c6:90:f4:c1:
         98:d6:5c:74:0b:57:d5:0d:ad:bf:18:47:f3:b2:38:04:f3:a6:
         3d:8d:6d:e4:f7:fa:f2:dd:02:67:76:c7:2a:b9:6a:f0:9b:84:
         ab:07:ff:d5:70:39:58:fe:5b:ef:cd:84:3b:7b:d9:42:df:3f:
         e3:c2:61:47:7a:7b:94:20:03:22:36:d1:fc:4c:ed:a4:1a:4b:
         83:c3:4f:1a:6b:ee:bc:e7:65:3f:4a:c8:46:a7:8c:5b:42:94:
         44:9b:8e:da:c4:12:7b:91:ad:57:5d:a2:ad:91:9a:34:25:6a:
         ac:2a:1c:1f:b4:00:b4:ba:05:23:66:33:3a:73:9c:a9:d5:78:
         82:24:34:a3:e5:4c:ec:3a:e1:cb:a7:4b:a1:e6:84:9c:ab:98:
         06:ac:e2:7c:df:a4:af:6e:28:e2:28:33:e1:b7:d5:de:d8:ce:
         61:66:1f:fb:ea:a6:64:32:88:f4:ed:00:fe:84:e4:ce:93:0a:
         2f:54:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:57:16 2025 by rpki-client