Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/024963ef-7ad6-3fa7-9589-2014c5d6e670.roa
File:                     024963ef-7ad6-3fa7-9589-2014c5d6e670.roa (raw, json)
Hash identifier:          /v6klHYW+4pFAQRkKox227QfciVTboR43S3bCEcMops=
Subject key identifier:   19:3C:E1:E3:BC:C5:70:2C:BC:94:60:A1:39:81:C8:A4:E1:55:0C:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E19917EABFC1606ED2E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/024963ef-7ad6-3fa7-9589-2014c5d6e670.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397200
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e1:99:17:ea:bf:c1:60:6e:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9341eabd-0efa-4d18-9e1e-f324dfe5e5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:cc:ce:5b:df:66:66:85:7e:01:bc:11:82:
                    11:42:7b:d5:49:a4:08:b1:cb:1e:e3:17:59:68:d2:
                    46:80:bf:7f:9a:57:fa:d1:18:02:10:69:c2:10:cc:
                    56:15:83:f8:fc:14:0a:d1:0b:1c:2b:2f:e1:8e:1f:
                    0d:8b:cf:14:a7:b1:2b:bd:7b:5a:7b:7b:48:f8:d1:
                    a3:ae:bc:74:2c:a8:cf:21:db:46:51:17:4c:89:9e:
                    f2:e5:26:53:09:50:ea:b8:b9:05:36:43:55:04:55:
                    95:fd:c4:19:86:de:98:15:76:68:d6:7e:ff:75:78:
                    9e:13:47:91:d3:9b:9e:49:26:d3:de:45:d8:47:b9:
                    c2:86:d0:ca:39:29:0b:0b:63:a8:a1:bf:f8:0b:74:
                    73:30:b0:e2:48:76:e4:27:26:89:0c:ba:79:27:93:
                    8f:32:93:5b:2c:e1:48:5f:a6:86:86:5d:a6:82:7f:
                    20:ea:4f:30:44:3f:7b:95:04:1c:43:d4:72:2c:db:
                    06:67:e4:02:d9:5c:8e:5b:b4:7f:da:a8:2f:87:37:
                    46:3c:12:7f:6a:1d:93:0d:07:d9:65:40:14:60:79:
                    e4:40:61:0a:81:91:41:f6:8a:1d:5b:e6:1a:07:55:
                    7a:b7:d3:86:9c:39:c8:3e:2b:fc:e0:4e:b2:9f:20:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3C:E1:E3:BC:C5:70:2C:BC:94:60:A1:39:81:C8:A4:E1:55:0C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/024963ef-7ad6-3fa7-9589-2014c5d6e670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:48:35:da:49:2a:5e:15:19:a4:db:70:a0:01:ca:60:1b:7c:
         59:fd:c5:41:99:0d:c8:a7:e6:2c:47:a2:92:ed:b7:05:73:15:
         fe:e1:d2:3a:a9:85:21:a3:ca:c8:17:d9:fa:77:96:26:81:0e:
         be:39:0d:a3:f6:30:6a:09:c3:fc:c8:7e:d1:63:f1:53:3d:ac:
         23:d9:7a:76:34:33:9a:8d:da:1c:ec:d7:7a:5c:dd:96:69:a9:
         7b:35:e0:6d:6e:f1:92:41:a4:f7:41:27:6b:28:ac:23:58:ef:
         00:2e:79:62:25:8a:5f:42:ba:a5:37:9a:0d:11:05:da:43:7f:
         18:7d:9e:74:31:12:d6:02:7b:11:bd:b0:23:1c:7e:2f:26:d5:
         e2:99:d3:a9:93:e0:a1:6a:5c:70:04:4d:bf:26:56:07:f5:06:
         87:5b:bc:fc:41:eb:83:30:3f:a7:d4:3a:38:46:5e:48:92:d1:
         14:61:d9:bc:63:da:d8:a1:aa:c9:c8:6c:23:73:39:8f:97:93:
         fc:fa:7b:8f:9f:1e:1e:ef:e3:65:db:57:0f:6c:17:08:76:b4:
         0a:a9:f5:b5:c9:c6:2d:6f:24:47:29:d5:09:67:7e:5a:eb:88:
         e0:df:a8:2e:58:e7:34:a2:29:a1:6f:a4:a2:b9:5b:35:15:30:
         94:05:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:04 2025 by rpki-client