Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa
File:                     04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa (raw, json)
Hash identifier:          lCl0/5rvdwEYYMNWQmi3g4HNYcSPnrxD5sSH7sV1jAQ=
Subject key identifier:   BD:90:E2:C1:CF:4A:66:29:7F:41:CC:2B:DA:C9:64:5C:03:ED:51:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A6200AE3D748BEDC73CD300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     20431
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:00:ae:3d:74:8b:ed:c7:3c:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=76a856ca-1c8e-412e-a565-8f592970446d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:04:f7:14:ed:2d:c9:2d:dd:82:b9:06:1e:
                    87:32:e0:1a:85:9d:be:00:05:3e:4a:6e:d4:e2:35:
                    48:03:33:44:a9:44:25:8e:29:df:8f:0f:be:1b:4f:
                    34:7e:ef:5a:16:aa:60:5a:e2:9a:0d:92:21:4b:51:
                    86:c5:78:a2:b1:6b:68:8a:b4:17:39:26:59:ae:73:
                    1f:0f:51:06:47:64:07:e0:50:df:80:f1:91:44:9a:
                    a4:3f:d0:b8:82:36:5d:35:8b:60:de:ca:90:e6:0f:
                    49:be:aa:ed:05:23:8c:cc:b0:aa:87:8b:a0:8b:69:
                    f3:33:63:89:5e:68:bb:57:4f:c4:66:3c:53:31:42:
                    78:05:c9:09:b5:34:f7:60:4c:05:d2:18:f6:9e:7d:
                    c8:7d:ea:72:ac:ec:00:66:a6:be:44:55:a5:5a:67:
                    3e:57:57:50:64:c9:0e:03:f9:c6:53:78:51:6e:89:
                    9c:30:07:b4:d2:7f:b5:41:98:a3:35:51:38:36:bb:
                    c9:9d:5c:98:13:aa:7e:a9:a4:42:32:07:b4:3e:f4:
                    36:92:0e:7d:b8:e7:31:06:50:a1:c6:fd:2f:11:c9:
                    54:20:f5:61:1d:92:51:86:b7:86:02:4d:dd:7e:d9:
                    8d:98:c8:d5:92:e9:2e:6f:19:e4:90:49:3e:80:93:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:E2:C1:CF:4A:66:29:7F:41:CC:2B:DA:C9:64:5C:03:ED:51:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04262a55-bfd7-32dd-9781-3ab51f8bd1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:2c:3c:cd:0d:e2:62:d3:c8:3b:4a:d8:ea:e5:ed:be:88:
         71:10:21:2c:89:8a:18:20:4d:ad:ac:69:27:42:14:06:7b:46:
         c0:cc:1c:7f:09:de:cd:38:2f:c5:77:bf:c4:0c:68:9a:86:b7:
         2d:8f:7d:69:38:cf:28:fc:81:4a:9a:53:82:dc:2b:e7:7e:95:
         b6:28:04:da:b5:31:2a:93:25:72:27:86:b5:a0:25:48:54:4d:
         d8:3b:19:10:f8:e1:1d:98:b9:2a:95:f0:09:c8:ae:35:60:d5:
         0b:6b:6a:7d:fd:a2:15:cb:7f:f3:c6:50:36:aa:a5:40:4e:2b:
         bb:d0:8a:da:3c:92:5c:1f:cd:78:11:21:63:c1:b0:69:ef:07:
         ec:37:4e:f5:2a:af:a6:88:06:85:c5:49:8c:54:64:20:72:6c:
         55:49:87:cc:50:4b:a7:8e:8a:14:79:ee:6c:24:e0:72:a1:eb:
         81:3f:fb:25:6e:c0:73:2f:3e:c7:f1:c5:68:78:5d:14:f4:45:
         24:58:32:e9:d4:d6:f8:dd:3b:70:0d:3a:99:88:03:cc:3d:62:
         6b:20:2e:27:4f:31:5d:0c:6e:59:bf:e1:b4:da:81:e2:4a:39:
         de:10:40:20:c7:1c:6a:d1:b0:d0:41:cb:83:e3:81:1d:99:bd:
         9a:20:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:39 2025 by rpki-client