Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ae8ee0-2c86-3d2c-a7fa-42eb877ca9c2.roa
File:                     34ae8ee0-2c86-3d2c-a7fa-42eb877ca9c2.roa (raw, json)
Hash identifier:          NtJcB33RDQKzew409pLIiHuzaKAKDzE3Vs8kUJ6Ww3Y=
Subject key identifier:   28:A9:5E:CE:3B:6D:31:35:79:BA:00:7C:E1:A8:D4:DA:9C:AA:88:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E773631CEDB83FD84C9EC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ae8ee0-2c86-3d2c-a7fa-42eb877ca9c2.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     397199
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:36:31:ce:db:83:fd:84:c9:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=42fa5f80-95c4-4990-9c8a-c0f62d4fb252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:70:39:05:4b:cc:cb:f5:84:19:c3:67:a8:
                    87:c2:ff:2a:50:93:6c:f4:cc:f0:1a:5a:25:68:be:
                    61:37:d2:88:aa:1b:d2:52:77:aa:9f:de:cf:bd:53:
                    02:ab:7b:a0:5a:71:8b:5c:43:c1:0b:0c:e5:89:da:
                    f8:e2:88:c6:0a:26:b6:3e:c3:ef:4c:d7:65:5d:71:
                    95:14:92:93:db:de:8c:74:35:62:84:9e:9e:be:e3:
                    ba:11:c4:bb:1a:94:c3:67:d6:11:00:8e:b4:aa:27:
                    a3:be:f3:3f:70:ba:d7:83:1f:78:af:3d:8f:de:14:
                    28:97:8b:e2:94:35:ed:d2:a3:0b:26:23:ca:cb:80:
                    68:07:9b:68:3d:fd:aa:17:23:b7:b9:0b:a4:54:7e:
                    32:05:47:52:59:73:21:fb:2f:f1:da:81:9a:2d:94:
                    a9:a5:b9:e7:af:ce:0f:0d:91:c5:2b:40:66:ac:cd:
                    ce:8b:c6:26:e7:54:63:5b:ed:df:e3:09:8c:f3:93:
                    6f:2a:af:18:bd:05:e9:e6:d9:3e:f8:ac:35:7b:7f:
                    12:c8:b3:5b:b1:f0:35:e9:d9:e9:30:eb:70:b6:28:
                    48:4b:a5:ea:9e:b2:54:a8:89:a1:c5:70:fa:ea:77:
                    ee:61:de:8a:6f:3f:62:21:ab:3e:1d:99:85:71:5e:
                    83:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A9:5E:CE:3B:6D:31:35:79:BA:00:7C:E1:A8:D4:DA:9C:AA:88:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ae8ee0-2c86-3d2c-a7fa-42eb877ca9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:03:b9:c2:3b:03:ca:1c:69:ac:ec:dd:34:49:4d:89:8a:
         16:fb:bf:62:57:ea:51:ee:8b:17:52:c0:1a:09:cc:a1:12:77:
         fa:4c:a8:9a:f6:28:88:76:62:f9:52:29:b2:a7:b7:c4:a6:8f:
         7b:6d:56:9f:9c:20:37:bc:50:2e:58:e6:ae:a3:d6:45:bc:6c:
         cc:20:90:c8:47:7b:f6:aa:5d:20:aa:cb:a3:68:be:98:93:fe:
         6a:b9:0f:0a:65:5a:8b:9e:76:29:46:41:52:0c:fd:58:00:10:
         17:0e:e5:dc:90:f7:78:7a:c8:45:65:11:38:9e:2d:ae:2a:74:
         0c:73:0a:26:39:6e:b6:51:29:d2:ae:ad:d1:c8:33:66:24:0e:
         36:17:0b:21:1d:c6:46:fe:dd:81:0c:f4:bf:71:ef:bb:a0:2c:
         f5:47:0f:51:55:8c:45:74:f3:c8:c2:0d:dd:6d:c7:0a:4c:13:
         46:4c:16:1a:23:99:10:3e:e1:96:b9:25:00:d5:04:51:36:7d:
         d7:e4:5c:f7:f3:8e:88:cf:e1:9f:13:94:04:06:04:eb:80:3d:
         31:e4:ec:ca:c4:70:86:0d:6f:cd:fb:b2:3a:e5:5b:9f:63:e1:
         94:1d:75:12:24:7f:d2:da:d7:70:7e:b3:1f:0e:e0:e4:59:18:
         4c:ef:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:01 2025 by rpki-client