Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e22d1b-b11a-30fc-bfc9-83e77253140d.roa
File:                     28e22d1b-b11a-30fc-bfc9-83e77253140d.roa (raw, json)
Hash identifier:          xY/iBGwXUXByWxCbHdialPwbeBUS6gYJzNsK3Af1tJM=
Subject key identifier:   87:E4:D1:69:F7:98:83:73:D2:35:E9:18:3D:CE:AE:21:9C:4B:D5:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B98728CC8A3B11C2BD880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e22d1b-b11a-30fc-bfc9-83e77253140d.roa
Signing time:             Wed 20 Aug 2025 14:37:00 +0000
ROA not before:           Wed 20 Aug 2025 14:37:00 +0000
ROA not after:            Tue 18 Nov 2025 15:37:00 +0000
asID:                     396602
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:98:72:8c:c8:a3:b1:1c:2b:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:00 2025 GMT
            Not After : Nov 18 15:37:00 2025 GMT
        Subject: CN=9ad8399a-80ca-40f5-85c1-00f99b79cb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:92:15:d4:c3:74:72:03:cd:6a:81:ca:29:
                    31:de:fe:ac:d3:e7:a7:fb:4e:89:b7:cd:5e:13:96:
                    bf:95:cb:8d:b2:e3:f6:9e:ba:a6:6e:60:75:7e:06:
                    13:ff:39:99:3f:3a:d7:49:bd:b0:c9:95:10:43:c4:
                    c7:9c:2b:9a:3e:90:13:0f:1f:e2:a2:7a:05:0f:7b:
                    b5:23:cf:41:2f:90:2c:61:84:08:ba:6d:31:ca:0d:
                    7a:ef:78:b8:f7:0d:3f:27:49:78:05:5c:f1:27:12:
                    e2:64:ee:d8:56:fd:70:27:d8:1a:76:80:58:88:44:
                    fe:b4:db:21:0a:13:fc:ea:f8:d1:e4:6b:e7:5e:63:
                    15:80:b4:97:6b:f3:f9:70:43:af:14:e8:fa:6a:29:
                    29:8e:cb:76:1c:b0:da:d0:66:ca:f7:9c:2d:83:79:
                    c5:e9:86:36:27:dc:3b:8b:bc:85:20:06:bd:a8:42:
                    f0:23:a2:52:ad:e8:43:8a:3c:db:92:e7:59:93:90:
                    bc:c0:7a:d9:f2:eb:e6:6c:ce:36:f9:51:df:2d:11:
                    fe:d4:bf:1c:e3:87:9f:d3:44:fa:75:7b:40:8d:70:
                    ff:b0:c7:91:d3:33:d6:ce:98:27:d3:c8:73:64:6a:
                    fd:85:b2:da:a8:12:ba:9b:38:31:9f:5f:86:aa:1c:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:D1:69:F7:98:83:73:D2:35:E9:18:3D:CE:AE:21:9C:4B:D5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e22d1b-b11a-30fc-bfc9-83e77253140d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:05:02:b0:3c:25:48:0a:d2:ad:b2:10:6e:16:e0:60:06:
         3b:47:b9:25:a6:50:c5:65:f5:11:8a:05:e7:e5:37:e3:3b:70:
         f4:e8:1c:2f:f5:1d:e8:b9:62:06:88:68:5b:f8:ba:f8:dd:7c:
         6c:4a:e6:3f:e6:e2:bb:e6:ff:22:5c:3c:10:31:a0:f1:83:4c:
         14:be:f2:82:bd:b0:33:72:4e:3f:0b:6f:24:c6:3b:99:d0:43:
         aa:89:f9:70:32:5c:8c:48:98:d4:21:4c:f6:9d:73:d6:01:ec:
         dc:5b:5b:ae:a0:4e:33:c5:50:4a:12:8d:53:a1:bc:d5:24:9a:
         a6:17:71:e1:a6:6a:fb:33:95:3f:66:c3:06:08:83:5e:15:50:
         ce:c0:b6:3f:a3:09:40:fa:5e:23:42:70:7c:da:7f:da:05:0f:
         9d:d9:0e:91:e7:52:8d:9f:5a:3a:88:d7:c2:5c:ea:41:22:47:
         11:3f:58:16:42:c2:a1:9b:20:ef:53:5a:63:b6:67:27:05:36:
         ab:4c:3b:e7:73:8d:21:91:ad:33:a1:93:ac:ee:80:c9:ba:7d:
         f7:75:fb:0a:ef:8c:5e:5c:6c:cc:b9:45:9c:ba:be:23:ca:4f:
         4d:26:86:61:2a:0c:3d:0b:f4:8b:06:b3:f2:f8:67:d4:06:cb:
         bf:ba:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:51 2025 by rpki-client