Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3472ac7b-9a1b-3c5f-a106-27eb826d854f.roa
File:                     3472ac7b-9a1b-3c5f-a106-27eb826d854f.roa (raw, json)
Hash identifier:          bmyD5LzGkvhZg3yqFGQTmwi998hE0FWPEILi2VQgwvg=
Subject key identifier:   C8:B9:F6:E8:3B:34:4F:FE:7B:92:70:99:2C:0E:DF:F5:2A:DF:85:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58DA682F88FB7DC093B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3472ac7b-9a1b-3c5f-a106-27eb826d854f.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     36625
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8d:a6:82:f8:8f:b7:dc:09:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=045fcebe-86e6-4462-95e8-d9b85cc787c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:32:5b:fe:5a:27:a5:99:b3:12:df:f1:cb:
                    53:1b:2d:a1:17:c5:89:08:f1:a4:e5:8c:52:7e:0f:
                    09:7d:d3:c4:db:6f:da:17:db:4b:cc:82:d7:1e:0b:
                    d2:b8:6d:41:b2:d1:5e:ca:2f:0a:c7:ec:df:6f:f8:
                    43:78:be:32:2c:73:a3:f6:09:73:93:78:30:3a:ed:
                    1c:5d:05:01:e3:61:b1:7d:d3:56:28:26:d5:8e:1a:
                    0b:b0:81:29:42:59:3a:f6:78:12:89:f0:9e:99:d2:
                    6d:99:a4:47:9c:e2:67:94:c4:8b:87:53:dc:06:ac:
                    97:e1:2a:e1:e1:7c:b9:cf:64:06:0d:29:77:07:25:
                    ad:0c:c9:29:6b:44:ff:3e:27:cd:f6:3f:57:40:a1:
                    7a:3f:ec:61:20:c0:78:0e:46:82:f3:ae:ef:8a:1d:
                    e3:bc:d2:e7:c1:5f:70:18:c4:a6:14:96:a9:98:a2:
                    36:ab:e5:f7:f4:88:3e:9d:a9:e1:af:c2:bd:8e:74:
                    1a:67:d8:dc:68:51:17:47:ba:7b:75:76:ee:21:56:
                    e6:cf:8d:9e:b9:a7:42:cc:2d:48:1c:1d:b7:36:46:
                    8d:6c:ab:5e:8a:2b:dc:91:9c:10:ec:9c:d8:f5:6f:
                    84:95:18:50:77:cf:8d:cd:4f:ff:21:4c:c4:e7:1f:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:F6:E8:3B:34:4F:FE:7B:92:70:99:2C:0E:DF:F5:2A:DF:85:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3472ac7b-9a1b-3c5f-a106-27eb826d854f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:47:e5:02:4b:fb:da:88:b8:c7:fb:84:24:91:d6:04:bd:
         e7:4d:fb:c8:7e:de:97:c3:71:2d:1c:33:06:d8:59:d1:dc:cb:
         62:ad:a5:72:ae:38:ec:f8:a0:68:e6:82:96:46:08:06:6e:c8:
         5d:a9:2e:d1:56:6e:7b:9b:df:ae:66:ff:ad:28:af:ea:bb:7b:
         99:8f:53:1c:d9:3c:76:0c:46:18:9e:63:95:7f:61:4f:94:6a:
         28:b2:b5:29:bd:f6:4f:15:69:fb:41:0e:dd:78:cd:bb:c7:9a:
         0f:49:48:13:fd:d0:da:1b:be:26:9e:0a:1d:d5:62:8b:b6:6a:
         45:61:87:c5:45:c4:fa:88:e3:d6:00:76:c6:c7:dc:cb:0c:90:
         be:f1:aa:88:96:68:a4:77:66:dd:6d:1d:fb:c8:4f:57:1f:5b:
         f7:e2:63:7b:d8:18:68:7a:68:83:b3:ae:49:31:fc:fd:7c:9d:
         c3:dc:66:e3:e5:e3:47:a6:7c:5d:ab:8e:39:da:95:c7:2d:ba:
         53:01:c2:d9:9a:11:2e:91:c8:54:d7:65:20:33:b4:83:41:80:
         9e:2a:a8:17:03:02:21:47:87:6d:5d:7f:38:5d:39:c8:f4:97:
         ab:75:7c:32:37:e7:04:66:61:d1:d2:0a:b1:5e:88:c7:3f:23:
         32:88:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:53 2025 by rpki-client