Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa
File:                     2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa (raw, json)
Hash identifier:          /vv5x4jjBjW1Cz/pUQy9G6N6S9U4JmzuBPKb9m2JJ1A=
Subject key identifier:   77:C5:AC:6C:4E:75:F5:1F:5B:10:85:D0:D4:D7:5E:10:54:62:53:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434CA51ACCA40601EC958AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     10515
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a5:1a:cc:a4:06:01:ec:95:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d4d05c84-67a4-481c-8d06-d6f993d541e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:2b:3d:f9:0a:cf:81:78:53:33:94:42:95:
                    3f:d8:98:ba:a2:9d:b5:e3:0d:10:6c:76:11:c4:1b:
                    3d:96:f5:b6:a2:ed:2e:89:6a:cd:e3:8a:23:ae:1b:
                    2a:30:21:9e:70:1b:a7:d8:3f:df:32:81:e9:4b:6c:
                    2c:c1:31:1e:2e:55:72:a6:1b:0d:6a:fb:b2:49:3c:
                    b8:df:f3:9b:c6:bc:70:8f:8b:40:91:8d:65:a4:75:
                    d0:f5:98:ce:d3:29:2d:c2:69:85:9c:27:64:a4:a9:
                    fa:2a:de:69:bd:92:63:18:9f:a8:26:ea:3f:7b:87:
                    c2:f3:4e:ff:cc:2f:8f:16:ba:18:11:b2:96:51:e6:
                    3b:e0:81:45:c3:29:ca:22:1e:c1:7e:34:f3:18:0e:
                    ba:ed:79:bc:dc:31:b3:b1:ee:94:17:d4:25:57:60:
                    b5:76:77:59:3c:0d:6c:3c:dd:23:ce:65:41:ea:57:
                    de:ce:8f:41:0c:cd:db:e2:4a:40:8c:45:de:1e:e2:
                    39:fb:75:17:07:66:46:7d:5a:27:10:80:db:3f:a1:
                    85:5f:13:61:24:22:81:b2:e2:2e:bf:23:20:35:97:
                    7c:37:25:1c:26:81:3d:59:c8:8f:75:c2:76:c8:f1:
                    83:21:e1:a5:9f:62:14:e7:87:9e:1f:41:17:75:18:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C5:AC:6C:4E:75:F5:1F:5B:10:85:D0:D4:D7:5E:10:54:62:53:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b6ad837-0528-3328-8844-e3a0e0b4bd9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:23:cf:0e:59:02:b3:43:7d:b5:dd:6f:f0:08:e2:fc:27:f7:
         3a:62:0a:f0:73:2d:5c:03:ac:e1:39:93:ed:33:96:37:38:dc:
         ca:f1:c3:cc:89:6c:29:78:18:91:30:81:85:33:5a:e5:47:a7:
         62:7a:41:04:67:72:6e:9b:4d:95:4f:ae:ce:8d:ec:79:b2:ee:
         0f:e9:c4:2d:ac:af:bb:fb:7b:58:cf:8a:cd:e3:7d:e0:f0:4e:
         43:a1:86:4f:86:16:24:79:24:5e:70:24:ac:27:e9:f9:46:01:
         48:9e:22:d9:c0:75:69:aa:2f:66:fa:df:33:83:69:98:6c:f3:
         df:18:02:79:80:20:34:a2:e5:c6:03:d8:d2:fd:d7:73:42:d5:
         29:78:e3:84:ff:6c:ea:3a:fe:43:7a:55:34:48:fa:95:00:ef:
         fc:ea:c9:44:c7:f6:0f:e6:d7:ae:be:35:6b:7d:00:55:04:02:
         4f:d2:3f:a5:66:7a:c9:0c:9d:97:c8:76:4f:c4:50:3b:94:95:
         71:03:d9:5e:5e:da:55:0f:84:86:92:3a:ea:d9:54:93:56:51:
         be:cb:ec:fb:65:4e:84:ec:10:38:7a:27:7b:4c:0c:f7:8c:4e:
         1a:62:1c:67:30:ba:61:09:15:7e:7e:d4:7b:40:59:f6:2c:b8:
         6b:f0:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:50 2025 by rpki-client