Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
File:                     0f45d07f-7df4-315d-9785-ca26ab59efe3.roa (raw, json)
Hash identifier:          VurIAABH2oyeEE1R0SHyucqE3YKOdp6tHOClf8e2QHM=
Subject key identifier:   C0:E0:E5:BD:AF:9C:3C:2F:63:40:0D:0F:C9:54:0F:BD:34:49:2F:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A5380B037AEB1F60DFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     396586
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a5:38:0b:03:7a:eb:1f:60:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=b1ceaa60-5d64-47b9-8799-38f69d6ea462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:4f:34:08:85:1f:c5:30:fe:29:75:9b:96:
                    35:26:10:7b:85:cd:11:c6:0e:f5:87:38:77:57:d2:
                    ed:1c:a7:be:f3:2c:b4:f2:b9:f0:74:f9:c5:8b:a1:
                    74:e2:92:c1:39:38:2f:9c:07:2c:6a:1a:e3:30:b2:
                    1a:3f:c7:24:1e:7f:38:1f:5c:79:85:6f:a7:ce:16:
                    3b:8c:d5:25:1e:5d:6e:43:a6:bf:3e:55:0b:b2:3d:
                    20:c9:14:ed:d1:42:6b:72:0e:b7:de:80:da:39:93:
                    c4:87:7a:fb:82:9c:25:76:56:9a:03:d2:19:61:28:
                    74:73:0d:68:80:d5:d8:b9:a2:7b:76:bd:9b:04:9c:
                    62:ac:d8:07:30:bc:73:97:ad:30:9b:62:b6:55:18:
                    98:c1:37:ab:ca:ce:8f:e8:d6:ec:78:ab:7a:4b:5f:
                    6e:c1:23:ec:2b:07:fa:0e:a3:8a:36:c2:f7:b6:e7:
                    e4:35:74:4f:18:25:25:cd:88:d1:fa:b2:d0:50:bc:
                    0a:24:91:0c:b5:56:e3:b8:d7:40:77:11:7f:0a:30:
                    08:79:8b:56:92:c3:d1:c6:4b:22:5c:b0:4a:f2:66:
                    49:79:f4:f5:f8:96:4d:c5:24:e8:c7:71:91:4a:c9:
                    71:5e:ec:76:d8:fc:f8:9b:8d:4f:e7:08:64:f1:01:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:E5:BD:AF:9C:3C:2F:63:40:0D:0F:C9:54:0F:BD:34:49:2F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:54:f5:54:d7:ae:4e:d3:ab:65:a9:b4:f0:93:28:b3:eb:
         f1:29:0d:44:09:12:0a:ef:32:18:ec:67:b4:3e:9a:ed:04:af:
         38:67:2c:66:02:eb:ec:3e:52:bf:e9:59:32:b5:9f:ee:bc:0c:
         02:f8:5f:55:cb:13:17:76:01:c2:c7:d0:47:40:d6:7d:99:10:
         9f:77:e3:03:2f:08:61:3a:2e:dc:8e:83:e4:9d:f7:ee:79:f3:
         cc:1e:51:76:f9:d1:f3:de:0f:1b:7f:85:7f:13:8d:08:cc:72:
         b3:9a:cc:76:96:73:3f:dd:89:c6:8b:eb:bc:a1:aa:e2:fb:4b:
         ac:1a:f6:9e:54:30:3d:aa:5b:16:c9:08:1e:f4:38:67:85:d3:
         61:e0:fa:c1:16:e0:b0:61:49:77:1b:bb:21:e2:11:b2:96:8d:
         68:d8:43:53:17:15:31:0c:7f:f9:7a:32:6b:17:ce:55:79:a0:
         8c:57:5f:b7:e5:61:0e:25:eb:85:d0:15:00:e2:ab:18:3e:2e:
         4a:c0:b1:0f:bf:e7:9c:16:a2:1c:77:48:49:64:47:3a:e2:ea:
         27:60:8e:d5:0c:32:c0:f6:51:4f:f2:78:c4:7a:40:65:c8:42:
         ea:3c:9c:c8:09:27:c3:37:53:de:68:cd:9e:0e:48:90:07:67:
         9f:8a:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:25 2025 by rpki-client