Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a4ede94-bcc4-3b3f-944a-1955e57d8ac0.roa
File:                     2a4ede94-bcc4-3b3f-944a-1955e57d8ac0.roa (raw, json)
Hash identifier:          xA31+SnE5ESu3BG04tX99olg1so68sPyDTU0EuHiBqw=
Subject key identifier:   3E:BC:6E:37:A0:0F:38:5F:A5:D6:7E:16:8E:C5:ED:70:79:81:2E:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DE0D16458F0F50DA9600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a4ede94-bcc4-3b3f-944a-1955e57d8ac0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396586
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:de:0d:16:45:8f:0f:50:da:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=015431c4-7838-44a6-b2d0-9f2ae3a43f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:38:65:30:30:9c:fc:dd:80:56:5c:be:81:
                    bd:0d:77:33:17:36:52:56:31:e9:32:bd:21:b6:8b:
                    80:af:b6:f3:fb:03:f2:fc:35:04:14:b5:a2:88:39:
                    62:c2:54:6e:e4:29:04:66:8e:c1:98:cf:8f:e1:99:
                    65:2e:bb:d5:29:82:c0:e6:26:7f:4e:be:42:87:58:
                    03:a0:f0:3e:af:7a:9e:23:47:e9:03:4e:e6:c8:30:
                    c1:59:78:cd:4c:bd:83:de:c2:3c:06:83:72:b7:d2:
                    98:a9:c7:ea:f1:17:60:fe:ef:d6:9d:b5:5d:06:66:
                    78:aa:42:96:da:97:0b:39:03:90:b1:5a:22:1d:96:
                    54:39:3d:60:e1:67:27:98:2e:4b:90:38:8f:5d:4a:
                    be:0e:e2:17:4a:1f:a9:65:c6:6c:92:36:af:e5:28:
                    a2:a1:77:c6:cb:8b:58:69:49:cc:ef:db:f0:cb:76:
                    3c:30:e4:21:06:8f:ad:14:6f:5e:6a:d5:60:7d:70:
                    db:c8:7f:52:1f:67:a9:57:84:3a:29:a4:05:4f:68:
                    c2:4c:08:8e:6f:74:ca:2a:aa:fd:b1:a5:d6:64:43:
                    c7:20:b8:65:ae:fb:b5:d4:72:32:fd:85:62:c2:eb:
                    b3:0d:b9:8a:7c:f8:92:92:1d:d4:6c:3c:f5:08:5d:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BC:6E:37:A0:0F:38:5F:A5:D6:7E:16:8E:C5:ED:70:79:81:2E:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a4ede94-bcc4-3b3f-944a-1955e57d8ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:bf:6c:d6:81:f1:ed:c8:3a:94:cd:09:4c:47:70:1f:61:
         49:ce:c1:24:f0:f5:28:c0:6b:35:0d:79:b6:ac:43:10:a6:f5:
         f3:d7:dc:f7:39:14:5b:8d:f1:f5:e7:a8:1a:ce:a0:5f:ac:4f:
         c6:62:4a:cf:d3:5d:aa:aa:75:ff:96:74:cc:b6:8e:46:c6:78:
         b1:e2:61:fb:85:cb:10:69:11:3a:36:55:a0:d8:57:6f:5c:67:
         01:78:c4:47:ae:c2:ec:84:2d:e4:3d:a5:f4:be:fe:c3:87:74:
         20:aa:31:5b:7c:6a:4b:eb:12:68:41:c8:13:b2:60:ce:38:58:
         78:95:c7:87:64:b5:7a:e9:84:a1:b7:a4:2c:c9:a5:bb:7f:ff:
         98:fb:76:45:a6:51:e8:67:2b:cb:5e:6d:a7:13:8d:82:62:72:
         f7:7e:fa:92:21:6f:19:4a:54:c4:ea:0b:94:90:58:06:e1:c8:
         d0:4b:8b:86:43:0d:9e:cb:65:47:85:5e:4d:e4:65:a7:4c:d9:
         8c:40:6f:56:a3:7c:10:e2:4d:79:fa:39:8e:b9:2f:14:77:a1:
         7e:03:49:48:2f:7f:c6:ba:fe:5d:2e:66:1c:77:15:38:6b:4f:
         c2:24:df:a4:d9:7c:ab:4c:e5:ba:ad:36:29:87:29:1f:ab:38:
         d6:76:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:07:38 2025 by rpki-client