Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
File:                     0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa (raw, json)
Hash identifier:          1EmjRQ0mGkponRtEVGl3DOdPBp1CVEtiNVMnS+JAjBs=
Subject key identifier:   83:70:F8:E3:29:C9:EE:28:6B:D8:3A:CE:F7:9D:C0:72:C2:0F:A0:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A62024079FDD5A39CD34780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396561
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:02:40:79:fd:d5:a3:9c:d3:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=153dea30-e8fd-4e07-877e-9bbe9b2eb2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:91:e8:a9:7f:5f:27:48:ba:1e:d1:03:74:
                    65:09:71:ef:bb:ac:61:62:21:77:cc:77:7f:e5:9b:
                    49:9c:bb:41:c1:62:fa:31:58:3e:98:d9:28:17:f5:
                    4c:cb:49:6d:74:69:fb:66:58:4b:e2:cb:5c:2f:c2:
                    e7:ef:ae:7a:79:91:dd:a5:2d:cb:84:03:7c:ed:53:
                    ba:10:50:c6:40:18:e1:46:5d:d1:24:41:2c:a9:8a:
                    08:09:8c:eb:f4:75:b1:81:51:c7:4f:75:7c:34:e6:
                    95:92:cf:0d:07:35:e7:4a:1b:f3:34:e7:8a:c5:65:
                    8d:79:63:7c:b4:10:c5:15:65:8a:db:0d:96:87:78:
                    dd:ff:f8:fb:05:d6:9f:f0:39:5b:1f:1e:ec:6b:49:
                    d4:93:d8:8e:fd:da:fa:cb:65:9c:8d:c4:f0:1d:fe:
                    c5:06:c3:d8:f1:d7:0c:ad:cd:0e:97:74:2c:df:90:
                    fc:c6:03:00:bf:4d:17:ef:40:9b:e7:d6:5f:95:86:
                    86:18:58:e8:14:f5:d7:95:44:2a:6b:59:97:76:4d:
                    de:05:d7:c7:ec:d9:9e:e6:1b:87:f2:93:b9:80:4a:
                    fc:5d:a3:ed:ca:72:45:f0:15:9a:a7:01:9e:55:d6:
                    18:a8:f9:92:5e:23:ae:75:88:86:31:7e:db:d7:8f:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:F8:E3:29:C9:EE:28:6B:D8:3A:CE:F7:9D:C0:72:C2:0F:A0:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0535005d-a978-37f1-9d0b-dd74b61ddc3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cc:c0:de:10:6b:9b:e9:09:2c:07:04:ec:6f:d2:71:81:77:
         3a:37:12:de:6e:f7:85:6d:da:ae:47:da:dc:b3:b5:53:3b:7f:
         8c:02:92:da:f9:18:9c:e8:93:54:66:56:88:03:c7:f6:64:37:
         cf:67:60:16:6b:52:0a:af:a1:d5:51:01:26:87:59:91:1d:a5:
         0c:1e:df:f2:76:af:3b:35:6f:00:47:d3:cd:52:bd:71:7f:a3:
         54:a1:fa:0f:3d:03:5f:5e:87:3a:7f:b3:85:6d:6b:0b:f6:b9:
         ed:7b:56:38:6b:7b:08:d2:ac:04:07:16:83:b4:6b:68:b9:30:
         6f:a7:51:ae:0e:74:ab:d1:5b:e5:cd:64:12:d8:a4:97:de:0e:
         00:1d:00:d6:b3:df:df:d5:02:36:2c:d3:27:de:72:98:bc:75:
         f5:9d:73:4a:aa:f1:a9:3b:bf:f0:2a:df:45:f4:ed:57:76:7a:
         5b:85:2a:b9:1f:d4:66:71:11:35:02:db:76:92:94:8c:4d:ab:
         a0:d0:a9:cd:11:01:c4:a8:41:b2:c4:29:cd:20:bb:4c:76:4c:
         7b:df:80:65:bb:9e:06:9f:a9:5c:80:48:7c:a7:9b:b0:a9:65:
         f5:58:b5:12:be:12:6f:bc:a8:19:d3:f1:30:85:43:15:56:a2:
         32:c9:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:11 2025 by rpki-client