Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0add173a-bc4d-34e9-977d-8b665ca8186f.roa
File:                     0add173a-bc4d-34e9-977d-8b665ca8186f.roa (raw, json)
Hash identifier:          lYFxaS44W2HH+BXEqMQ+izdkDW9uB6cT6cKh5EvJM/I=
Subject key identifier:   E9:55:FC:A3:80:C6:C0:69:66:5A:7D:70:96:44:6E:5D:2D:FD:2A:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE1970089334F0FE2CAC30240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0add173a-bc4d-34e9-977d-8b665ca8186f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396542
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:00:89:33:4f:0f:e2:ca:c3:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=aa247410-e92a-4572-a5bc-1ca9737ddd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:dd:32:6d:0d:f9:ae:72:7d:3c:35:42:7f:
                    ea:67:a2:81:c4:0e:c8:81:bb:fe:ef:89:38:2a:ba:
                    b8:5b:9d:6e:83:bd:58:14:65:5c:16:2c:dd:5d:c1:
                    37:46:5f:62:bb:34:07:da:ff:05:73:6f:be:37:0d:
                    43:5a:52:4b:0b:cc:43:b9:d0:0c:9a:b5:48:71:e9:
                    09:1b:28:f1:e6:8e:56:a2:28:2f:03:82:38:80:1e:
                    d6:c8:ce:02:2e:bc:94:85:49:09:45:d0:48:93:ca:
                    24:0b:47:d7:7c:de:56:47:05:c1:bc:89:17:94:9b:
                    eb:a2:1b:b7:43:d1:2b:da:e6:43:3e:f3:32:35:aa:
                    24:a2:16:af:93:8c:f0:2a:fb:86:c0:36:43:b6:3c:
                    c6:32:91:74:55:b0:82:4b:00:33:8c:b8:6b:90:0a:
                    d1:2a:cd:da:1b:52:a0:78:e6:66:78:47:0a:4c:d3:
                    c6:df:75:cd:b1:74:e8:aa:0a:bb:a5:b5:89:f1:91:
                    cf:9e:6c:b3:b9:d2:ff:a4:5b:00:51:22:4b:2f:0c:
                    c8:b4:03:41:7a:d8:1f:30:3d:9d:ea:8e:7c:e8:21:
                    9d:09:cf:5f:ec:24:f0:09:d8:ba:f4:eb:c5:18:7e:
                    65:5c:64:da:f3:bc:bf:3b:8a:d5:1b:8e:12:cf:f3:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:FC:A3:80:C6:C0:69:66:5A:7D:70:96:44:6E:5D:2D:FD:2A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0add173a-bc4d-34e9-977d-8b665ca8186f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:86:cf:9f:b0:35:6b:ab:4b:0e:28:80:4e:70:63:bf:27:
         33:87:60:f5:4d:ec:df:7f:21:cc:0f:84:8c:45:78:08:2a:9b:
         3f:61:c4:9c:28:89:8f:6a:98:15:de:8f:02:c8:a1:5f:1d:44:
         a9:13:95:19:a7:bc:f0:9f:be:76:88:f3:7f:48:41:57:e6:a1:
         fc:15:8b:be:23:9b:d9:82:41:df:b6:aa:c7:96:5f:96:23:29:
         6d:dc:32:fa:6a:37:63:0c:ea:c0:ab:0b:0f:95:55:76:1b:b4:
         73:0b:86:3b:75:42:3d:d4:dd:a2:60:59:eb:9f:7b:2e:b6:12:
         d0:10:00:0a:40:34:6b:ee:36:d5:3d:19:82:32:18:8b:0c:34:
         06:f5:62:22:22:60:47:1f:f1:d9:f6:a3:f0:1f:ca:f3:84:c8:
         20:f9:a9:03:ad:50:0e:6c:0c:65:22:93:c8:b1:0c:b9:35:6c:
         2f:5f:af:e5:1b:f1:06:fa:c6:da:7b:12:22:27:a7:9c:80:d6:
         20:93:8a:61:b5:f7:96:3d:d2:09:72:38:df:6a:23:6b:7c:a5:
         1d:c4:8c:fe:59:87:06:a6:b3:f5:8e:a0:b6:38:84:2b:0d:f7:
         cb:53:d0:a8:c9:46:d4:d7:ed:0d:6b:b0:76:d3:35:52:c5:60:
         0e:0d:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:48 2025 by rpki-client