Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3212efda-5e85-3865-8998-1161d89a7b65.roa
File:                     3212efda-5e85-3865-8998-1161d89a7b65.roa (raw, json)
Hash identifier:          Ue545WrbXpPuw2gYRgPlXfTaZ1SlpLDX/eqxUhcWAg8=
Subject key identifier:   C1:75:98:10:62:14:38:D4:85:A0:C5:4F:3D:8A:41:DE:BB:2F:28:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1AB698C66F56E7F146540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3212efda-5e85-3865-8998-1161d89a7b65.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396579
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ab:69:8c:66:f5:6e:7f:14:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=8d06cfd1-cb05-4622-a6ee-5b9047c6a138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3f:f2:35:5f:39:46:1e:70:03:bf:2f:c4:5b:
                    27:03:b9:48:30:55:8f:22:4b:a8:6f:35:05:f7:df:
                    68:e0:93:a2:cd:9b:32:92:c5:ae:b0:4d:02:78:a2:
                    ba:fd:52:33:56:6d:cd:fc:63:22:ed:2b:3d:67:11:
                    84:5f:4d:af:4b:60:d2:17:71:e2:66:51:6d:10:db:
                    15:c7:42:dd:2f:02:aa:27:21:01:2e:f3:11:7d:a4:
                    75:de:cb:e1:98:ac:54:a5:76:18:d4:ba:ba:fd:de:
                    a2:76:94:11:ef:e3:c9:f4:f3:f8:e7:a7:16:a0:76:
                    9d:35:0c:97:98:98:93:34:3c:23:32:2b:37:dc:b6:
                    c4:9a:7a:81:09:a8:06:76:a6:e5:6c:48:e0:05:6a:
                    68:24:16:c8:01:96:8b:15:00:a8:7e:78:1e:07:93:
                    ef:25:46:02:ad:6e:a0:5e:0b:4c:94:2e:ac:04:fb:
                    6a:48:55:8a:8e:f9:6f:d7:85:82:54:79:2d:d8:ae:
                    6f:34:11:e1:76:97:71:b8:01:bc:4d:cc:45:53:d0:
                    65:8f:c9:38:d0:56:e2:c4:7a:ac:14:d9:06:69:47:
                    c2:ca:b3:a8:63:03:0f:c7:89:1f:32:9a:06:83:ef:
                    85:c1:38:ab:b8:79:49:a7:7e:29:3b:c0:6d:5a:a0:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:75:98:10:62:14:38:D4:85:A0:C5:4F:3D:8A:41:DE:BB:2F:28:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3212efda-5e85-3865-8998-1161d89a7b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:e0:c5:a2:f0:ee:f8:cd:68:c1:40:b9:10:ad:b5:26:44:
         22:a6:81:7e:2e:28:1a:34:3e:d0:85:95:c2:05:c0:dd:53:76:
         41:41:34:33:42:83:a2:31:ee:91:c6:2c:9e:19:7e:c7:ab:39:
         f6:70:98:90:8c:52:6b:3b:c6:c7:d3:b8:b7:35:14:79:18:3f:
         1f:84:90:b9:23:24:79:e5:e2:fd:b0:a6:b7:72:17:9b:22:54:
         b8:8f:fa:f0:fd:2a:8a:a9:4e:21:d0:b6:03:2a:e1:ea:d8:28:
         3f:dd:f4:f5:7c:38:6f:bb:15:ea:50:a0:af:cd:41:7c:46:0c:
         0a:54:38:de:86:e6:ad:d4:fa:9b:0e:8a:85:c6:06:c1:89:71:
         3a:12:51:cb:21:76:f5:53:da:8a:89:df:3a:03:ba:00:22:45:
         d5:1b:c4:20:a3:51:d3:63:a8:a6:f6:22:9c:91:ce:c9:1c:56:
         05:c7:16:23:f9:b3:83:8e:6f:3f:cf:97:5a:9d:82:ae:1f:7b:
         0f:70:df:bf:15:2f:28:03:d5:76:bd:03:26:12:c3:c0:f6:4f:
         f7:06:80:d7:ab:7a:37:6f:3e:e1:cd:9b:0a:aa:91:e8:6b:bc:
         de:59:1d:92:8a:18:8f:14:5e:c6:76:63:10:08:70:f0:ec:98:
         b0:34:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:23:10 2025 by rpki-client