Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa
File:                     1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa (raw, json)
Hash identifier:          uRc9oqQ+ox5ZByEG5TxuMeamJXOF2vrF39JybM22ptc=
Subject key identifier:   AE:A3:5B:93:AE:36:3F:0A:25:53:81:97:65:63:FA:9D:F2:30:CA:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D2D4782C31BED726E51C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396564
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d2:d4:78:2c:31:be:d7:26:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8bf49573-daad-4692-87bf-cb11205347a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:ca:99:42:0c:cb:30:1d:5d:98:7f:85:c7:
                    2f:e8:b7:f8:1e:b6:78:1c:f4:a7:e1:fa:73:44:6b:
                    dc:40:0d:91:ae:6c:d3:fa:be:b5:3c:52:98:a5:6f:
                    8b:fa:2d:4b:fd:3f:3f:6f:89:c1:78:b6:3d:fe:fe:
                    c6:ce:91:6a:fe:e4:ec:69:93:da:43:2f:3e:9c:60:
                    1d:4b:9f:b4:28:d2:69:db:2b:f5:21:d3:41:18:0f:
                    05:9c:df:cc:8c:83:e9:52:6c:27:a5:f4:91:18:7c:
                    ce:92:af:29:3d:93:7d:ee:f5:67:b1:63:70:49:99:
                    b1:32:e6:0b:14:24:9a:b6:95:ac:9f:aa:17:09:74:
                    8f:2d:83:0f:1d:6c:44:6d:b8:42:ab:ab:14:e2:d4:
                    52:6e:2e:7a:a8:e8:bd:87:e3:ab:5a:67:46:3e:35:
                    55:54:30:b9:92:3b:89:78:ec:2f:aa:52:f0:62:1a:
                    d3:9e:40:42:19:89:1c:9e:86:d5:e6:ce:cc:74:70:
                    56:4a:98:55:36:81:13:b7:cb:98:9b:24:3c:69:50:
                    33:85:37:9e:7b:25:e9:c8:c4:55:90:b3:62:ca:00:
                    f2:a5:2c:29:4f:d4:c7:27:8a:ee:49:72:64:b1:ba:
                    cf:9e:dd:a5:13:7b:a7:cc:83:cf:ec:af:aa:f8:ab:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:5B:93:AE:36:3F:0A:25:53:81:97:65:63:FA:9D:F2:30:CA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c3ce45a-70cd-3dc5-b37d-e3d111cf7e87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:49:17:2f:2f:55:83:a8:46:fb:a9:15:81:88:5f:54:b6:
         3e:c6:51:9c:b0:f2:a8:52:32:29:7e:f0:0d:87:99:09:c7:a0:
         32:da:41:b1:9e:5e:b3:4e:83:13:4d:28:25:97:d8:01:bc:0b:
         51:3e:74:20:30:21:f2:ac:32:f6:d3:0d:18:f5:ad:34:6a:a8:
         21:8c:bc:64:c5:e6:16:f8:36:93:46:b3:e1:71:57:53:3f:8b:
         f8:f7:ac:9d:a8:b3:f5:19:8f:da:a3:81:6e:c0:f9:a5:f9:f8:
         6b:67:3e:26:15:5e:94:9a:f2:de:ab:cc:8c:a2:6f:39:0b:24:
         7e:78:c3:26:5b:cd:5b:13:35:81:b6:bd:18:8a:34:72:08:16:
         0a:35:f7:0e:ae:8c:54:02:c5:fb:4b:ad:85:83:af:c5:e0:a5:
         1b:81:e4:68:4e:e2:98:06:b8:24:4a:f6:1c:f6:6d:20:3b:cb:
         be:43:6b:01:89:95:d3:50:a1:11:87:ad:c8:d5:17:c2:0d:a0:
         fa:88:e8:df:5c:81:c3:28:c6:57:d8:ff:56:fe:9f:b9:d8:2f:
         f4:03:e2:39:d2:60:f6:ee:ac:a3:a9:e0:2e:fe:fc:9f:74:f7:
         93:6f:9b:e4:46:99:2f:df:95:b1:ef:a0:36:59:f4:10:96:59:
         e9:64:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:55 2025 by rpki-client