Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa
File:                     2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa (raw, json)
Hash identifier:          gPNP4+c1cRfMkr2S/UxER53cKqoKR/WSgwsW1N/Ncks=
Subject key identifier:   8E:CD:AC:4B:A8:C8:D3:E3:85:6E:37:31:0E:E0:50:24:43:E3:E5:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FF76E7F86E3FCDF06C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396584
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ff:76:e7:f8:6e:3f:cd:f0:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=75d84185-e3b1-44e7-ba45-0482c7658ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:d4:1f:be:4a:0a:a9:0b:fc:ff:fa:f9:da:
                    21:12:59:fe:d9:64:91:01:da:c2:2c:c1:51:6f:01:
                    9d:3b:d5:c1:c0:06:93:2e:50:ff:51:f5:5a:4b:a1:
                    b0:a6:b5:5f:d8:84:43:7a:5a:26:b6:07:e2:43:90:
                    dc:3f:7f:32:3b:ed:09:9e:8a:ea:39:37:25:67:88:
                    bc:af:96:dd:79:a9:09:64:62:e5:5c:fd:8a:e1:4b:
                    bf:b2:15:6a:9d:c9:48:db:73:64:92:16:ec:1c:1d:
                    2f:94:46:af:74:b1:04:4e:6b:51:58:37:0b:32:52:
                    a2:20:c4:7a:2b:70:ed:0f:54:4f:d7:b2:65:6f:20:
                    c8:49:9e:64:05:91:09:0c:fa:93:7e:40:2e:24:e8:
                    d1:49:aa:12:2a:f0:24:27:95:16:cf:45:ac:24:15:
                    e9:9e:da:bf:e0:7f:fa:63:4c:b7:a4:eb:57:82:56:
                    8b:09:3b:4f:5b:77:e8:1e:dd:a1:f3:32:56:90:ec:
                    18:8f:51:5d:5b:10:2d:d7:e0:d5:c5:84:41:6c:fd:
                    67:da:b0:4c:15:ea:cb:fb:7b:ac:fe:bc:6d:9a:fe:
                    13:ee:0d:78:5c:78:0b:c4:c5:dc:57:3b:43:76:0d:
                    5d:0c:b4:e2:3e:b9:79:7d:83:8c:e4:cf:b4:84:30:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CD:AC:4B:A8:C8:D3:E3:85:6E:37:31:0E:E0:50:24:43:E3:E5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a5e1e53-2552-322e-a8b1-d2ab5c33a9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:58:cd:04:68:a6:ce:8f:90:13:b4:41:5b:94:fa:06:d7:5b:
         31:c6:ae:71:1d:64:0e:ca:a9:7e:6a:86:c1:3f:da:81:ab:a8:
         21:53:c5:8d:04:9a:a2:3c:0e:68:a9:89:c3:65:96:2f:d9:b1:
         4e:c2:2f:a3:15:41:3f:38:74:aa:52:0c:34:fc:28:73:0b:c9:
         95:2f:65:47:54:f0:27:f9:9c:99:2c:bb:a1:58:3c:f6:91:f6:
         a4:e7:87:a3:76:e7:27:47:46:85:44:68:a1:9e:83:b9:80:26:
         6a:6d:da:90:b9:c9:e8:8e:a5:f2:e5:cf:3e:9d:96:e2:1b:71:
         22:af:1f:0e:a7:35:38:6d:d5:74:ae:50:c0:c6:8e:5e:63:79:
         42:fc:8c:3c:66:ff:b9:2f:88:2d:a1:4c:18:f6:b5:8e:1e:13:
         04:31:31:79:31:40:7f:41:b0:2c:50:a9:b5:56:c4:f2:bf:91:
         e7:46:bc:0f:92:57:2d:b7:42:c2:5b:58:9c:6f:56:c1:24:8c:
         11:33:0b:50:30:26:1c:1d:c8:84:de:60:e5:56:b2:85:a6:68:
         22:17:21:01:a9:5d:15:a8:c0:1d:be:ca:49:b3:ae:ee:7f:ab:
         13:0b:c7:42:90:b7:74:21:56:b5:ba:6b:5d:44:35:9d:81:d5:
         43:c2:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:06 2025 by rpki-client