Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2047a1b2-13a5-360a-a712-05c206b37123.roa
File:                     2047a1b2-13a5-360a-a712-05c206b37123.roa (raw, json)
Hash identifier:          TMm5Cfd6jn2sw4JW5WuEF3fEsRkpBuEMicj+fxq0aQ4=
Subject key identifier:   5A:BF:49:95:F5:10:27:69:DA:C3:8D:48:72:5F:B5:8C:36:3D:75:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E7733ADCD2493DD85B26880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2047a1b2-13a5-360a-a712-05c206b37123.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396595
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:33:ad:cd:24:93:dd:85:b2:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=79f62c4d-4519-4737-ba79-1bb3ce8a6bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:60:42:92:fa:84:15:a9:58:19:04:b9:48:40:
                    8f:5c:52:70:1b:96:23:c1:6b:4d:f6:67:2a:e0:4d:
                    7c:0e:d9:8a:26:03:ad:a0:46:d9:14:76:91:bb:d8:
                    e9:13:01:e9:86:8f:5c:78:60:29:e6:a1:ea:e8:5f:
                    37:fb:e9:e8:8c:14:b0:6f:83:6d:7d:c8:bd:a2:03:
                    47:99:23:2a:d2:08:41:3e:05:d0:f9:b4:a4:52:7f:
                    71:8e:0e:e6:2c:32:4b:76:67:f4:a1:e9:5f:7b:58:
                    d4:0b:7c:9a:fe:a6:da:dc:20:40:7a:34:97:15:f7:
                    27:34:48:5c:cc:49:d9:66:2d:3c:d7:33:95:35:9b:
                    9f:69:a6:11:fe:f6:27:ca:65:00:27:b7:a0:a9:e8:
                    3e:14:62:d1:37:84:06:30:cf:3e:32:70:0c:05:d6:
                    2c:21:53:b9:af:f6:04:08:fb:a6:5a:3a:60:f1:10:
                    cf:0b:6d:03:9c:9c:e2:7d:bf:e8:af:1e:2c:aa:d0:
                    61:b9:b0:56:e1:d8:85:7d:30:83:c7:3b:0b:74:88:
                    17:d0:39:d1:0b:9e:65:54:bb:05:9d:ed:e6:4c:2d:
                    f8:e4:a5:7e:6f:c3:80:d0:40:81:d5:a8:c0:56:8a:
                    4c:e9:a1:28:f4:17:00:29:cc:da:20:ed:23:e1:86:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BF:49:95:F5:10:27:69:DA:C3:8D:48:72:5F:B5:8C:36:3D:75:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2047a1b2-13a5-360a-a712-05c206b37123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2f:27:40:41:ce:79:c5:36:ed:80:6d:06:36:d9:aa:a4:7b:
         3d:b6:2d:92:09:a2:32:07:18:4e:cf:47:13:d0:69:05:0f:11:
         cd:37:05:86:93:a7:83:c6:a6:66:01:3d:cc:5d:fd:b6:9c:bb:
         50:26:61:5a:c4:3a:a3:9d:46:a8:02:50:3b:90:f6:73:2c:5f:
         1c:4f:61:d1:e4:0c:ef:99:f8:74:1f:17:03:30:bf:b0:4f:be:
         da:c0:c7:8e:00:ae:5c:59:fd:93:b2:e9:f6:59:8a:14:db:d3:
         2d:82:f8:e2:47:39:2d:3a:f9:35:05:59:ca:dd:5a:e5:ef:2f:
         3e:61:f2:f7:7e:3e:4b:7a:81:4e:34:09:ed:48:d6:62:68:ad:
         19:27:6a:76:fa:1b:9d:0e:50:55:54:f6:ae:29:71:a5:7d:be:
         79:6b:ce:8d:c1:90:d6:c5:1d:cf:7a:f1:c8:7d:cc:35:af:8f:
         ee:73:28:fc:a4:eb:19:6c:c8:f8:d5:bd:3e:7a:3b:5d:3c:2c:
         99:79:2c:03:02:ac:6e:59:ff:e5:0f:66:a3:07:e7:02:8c:2f:
         7d:4e:3b:66:e3:84:eb:24:56:f6:af:38:e4:41:a5:8a:b7:62:
         2c:50:33:7b:8b:b9:e0:75:62:ed:41:f8:fc:0e:10:48:6f:05:
         a3:cf:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:04 2025 by rpki-client