Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36bf3d65-db56-3929-be4d-8bcfbac78e15.roa
File:                     36bf3d65-db56-3929-be4d-8bcfbac78e15.roa (raw, json)
Hash identifier:          nK0vILqlvxQmEK+2l/gpLwoIN6V5IuP8zabrAaRgEX8=
Subject key identifier:   5C:07:F2:56:D2:13:51:53:9A:60:15:73:A3:42:07:7A:0B:45:50:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B15F991EB45487654A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36bf3d65-db56-3929-be4d-8bcfbac78e15.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396827
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b1:5f:99:1e:b4:54:87:65:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=bbd0f458-79b7-4953-bdb4-5611d88462e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:42:21:2a:c9:30:2c:26:af:c2:7e:67:b3:
                    90:cf:53:2b:db:7e:f7:bd:74:24:5b:5a:ac:79:0e:
                    6a:5f:88:77:4b:5c:21:80:69:ac:41:30:64:d6:f6:
                    d4:4c:c4:79:b1:45:1a:12:a3:1c:9c:71:68:d1:10:
                    32:1c:7c:35:aa:0c:49:fc:47:a4:f5:7d:97:73:52:
                    38:30:4e:2c:c2:b9:22:47:19:98:dc:c5:78:05:6e:
                    3c:4e:d4:51:eb:d5:a5:83:6e:3e:32:cf:97:10:e2:
                    9f:43:26:ab:be:64:28:a4:5a:2c:12:f8:b9:96:7e:
                    1a:b5:2b:f4:a0:a9:7e:41:34:c7:5f:9e:d8:0f:e1:
                    99:af:00:c5:b2:bd:ef:d4:30:a6:63:d1:9d:be:e0:
                    2b:ff:1b:ac:5b:72:a4:39:67:85:a9:87:68:87:43:
                    05:4d:cb:79:78:26:42:9f:7d:18:bd:19:35:75:b9:
                    31:af:f7:de:6e:58:e9:eb:92:ff:b0:c2:89:72:08:
                    14:2d:92:84:a5:6e:d9:79:6b:ee:5a:ed:bd:85:e6:
                    f0:33:7b:be:c4:fa:f4:42:57:ec:96:3f:0b:db:77:
                    05:f4:89:39:9d:0c:eb:12:1d:07:26:a6:a2:67:2c:
                    13:e8:f8:32:c3:dc:51:29:74:34:d2:92:24:d4:25:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:F2:56:D2:13:51:53:9A:60:15:73:A3:42:07:7A:0B:45:50:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36bf3d65-db56-3929-be4d-8bcfbac78e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:62:57:80:b3:23:95:ed:41:66:30:1b:fb:d3:74:f2:ca:ad:
         dd:5a:cc:2c:99:36:5f:79:b8:db:3f:cb:71:29:71:68:fb:e4:
         11:9b:67:4f:95:d8:bc:e9:90:b1:6e:ae:60:fc:2e:e8:7f:4f:
         78:08:b7:bb:f2:47:13:e6:2a:63:1f:4f:9b:79:fc:4a:60:cc:
         c1:7c:82:76:20:8f:26:fa:ad:7d:1a:56:ec:a0:67:5e:d3:10:
         e1:c5:dd:a9:bd:e8:20:2a:0c:99:99:90:e2:e1:37:b2:7c:f8:
         fa:d8:f9:95:c8:0f:ca:42:52:67:ec:f0:95:61:f7:c6:d2:9e:
         74:60:81:42:de:05:08:84:ee:90:b7:d7:85:19:f6:92:92:c0:
         89:f6:43:e1:17:67:04:98:46:a1:f8:1f:58:e3:f4:66:23:2d:
         2f:63:fd:11:da:72:a3:b5:3a:2a:df:f3:ef:52:66:6c:37:ef:
         2c:a3:79:b0:69:95:c6:66:0f:ca:4e:b3:aa:c4:ee:f8:4b:2d:
         40:b6:0e:2f:74:ab:ca:95:ea:0e:92:64:0a:3e:c8:36:67:26:
         cb:ec:e3:b9:8b:92:ea:76:09:84:68:4b:18:0b:bb:09:5b:40:
         aa:e2:24:10:5f:e5:21:c7:20:6d:6e:28:57:db:18:06:8b:cb:
         7a:95:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:23 2025 by rpki-client