Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/074290a6-31d2-3247-88e5-e694b00a5912.roa
File:                     074290a6-31d2-3247-88e5-e694b00a5912.roa (raw, json)
Hash identifier:          5GlakYJWLXRWf2CgFXr/bXnxgCoPscS1IeKlWCUBsns=
Subject key identifier:   E1:85:2F:DA:04:B9:7E:25:C4:03:96:7C:0D:E4:B8:98:CC:EA:95:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B89FFC28B4996B0E3AE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/074290a6-31d2-3247-88e5-e694b00a5912.roa
Signing time:             Wed 20 Aug 2025 14:36:53 +0000
ROA not before:           Wed 20 Aug 2025 14:36:53 +0000
ROA not after:            Tue 18 Nov 2025 15:36:53 +0000
asID:                     397209
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:89:ff:c2:8b:49:96:b0:e3:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:53 2025 GMT
            Not After : Nov 18 15:36:53 2025 GMT
        Subject: CN=d70c2cc6-14cb-44cf-bdba-afcb4c99f5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:aa:e4:17:f9:41:c4:49:b6:cf:0e:83:ef:
                    2c:b0:6f:be:af:26:45:0b:93:0a:03:e9:97:5a:87:
                    a9:8b:d1:4c:66:9a:79:49:70:43:97:b8:12:11:98:
                    be:6a:e3:db:00:c4:84:d4:b3:fe:f6:26:09:ff:c9:
                    ac:d7:03:04:de:89:cb:02:58:0e:07:52:83:de:a3:
                    3a:6e:21:22:9b:54:67:f1:a7:51:65:9b:c9:86:e8:
                    60:07:d7:e0:91:58:82:5c:2b:93:8f:2e:88:63:4c:
                    93:e5:8e:fd:de:15:c2:c6:2f:9f:75:b4:89:ac:55:
                    6d:4f:54:99:d4:7f:b6:c0:83:82:e3:ea:9f:0d:dd:
                    47:41:7b:a0:0e:42:ce:b1:ad:f9:1d:8f:9f:da:0d:
                    ba:1c:de:69:27:5f:eb:9c:5c:3f:30:3a:c8:36:b4:
                    84:02:70:d2:20:54:70:2b:06:bd:a2:45:7f:2f:29:
                    17:b9:d6:0b:75:cd:ed:b6:80:3c:3f:a4:1c:89:c0:
                    bd:f8:26:b7:17:b6:bf:59:f3:c7:de:c4:15:b5:28:
                    ef:c5:89:19:59:f0:15:82:09:19:6e:41:db:81:fe:
                    22:35:64:a3:ed:fe:39:e1:a8:42:64:37:41:12:b5:
                    41:8f:73:87:6e:28:21:27:d2:dc:f9:3f:9c:20:85:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:85:2F:DA:04:B9:7E:25:C4:03:96:7C:0D:E4:B8:98:CC:EA:95:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/074290a6-31d2-3247-88e5-e694b00a5912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:38:34:9b:f8:04:11:96:8e:ac:3e:0a:d5:72:38:4f:d7:b3:
         23:af:9f:47:d3:2c:13:72:97:bb:f9:11:54:77:31:79:06:6a:
         ff:54:68:5a:d7:c0:b7:c3:de:60:37:64:01:f4:54:63:9b:56:
         1b:d5:0e:f3:25:ae:6b:a0:bb:ee:1d:5f:b2:77:4e:01:4d:e4:
         5a:e9:56:86:64:73:5b:a4:b4:0d:9f:2c:fb:51:d5:1a:8c:ca:
         3a:57:e7:b8:7d:72:89:3a:e4:b5:b3:5e:12:c6:66:0f:a8:85:
         26:3f:a2:97:1f:98:6b:4c:98:6e:17:26:15:68:4d:9c:ce:5c:
         29:1b:65:d1:0e:b1:4a:f9:93:41:7e:00:05:51:59:c5:68:d0:
         54:63:f7:24:78:93:36:f5:4c:a9:4c:79:ae:e9:da:a5:6d:fe:
         db:ef:fc:9e:3d:8b:c8:d3:5c:ad:c2:7f:8c:af:48:89:3a:aa:
         4b:08:8d:90:da:d8:7e:29:a4:a1:b6:b5:73:82:dd:d5:97:e4:
         e8:d2:50:2f:42:2f:10:01:f2:40:81:66:c9:0b:07:da:1e:ff:
         e3:1d:5b:50:b4:b5:36:8e:03:b7:67:76:63:ef:84:3b:87:34:
         b6:6c:40:7f:33:04:50:d0:04:54:57:a3:81:41:51:25:5d:5c:
         24:4a:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:35 2025 by rpki-client