Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a4660a3-de8b-39fb-a1e6-64deee3e7b10.roa
File:                     3a4660a3-de8b-39fb-a1e6-64deee3e7b10.roa (raw, json)
Hash identifier:          V2KjAXxLuG3lguLp7u9aNzvC/lxZN1ANdA9XAD1PtUQ=
Subject key identifier:   E2:2B:11:B3:E8:5B:69:47:D0:32:C4:C6:14:6F:CE:8C:8D:3B:94:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DA726826826D124CE5A8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a4660a3-de8b-39fb-a1e6-64deee3e7b10.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396541
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:da:72:68:26:82:6d:12:4c:e5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b9be53b4-155b-4feb-8c53-245ee25b104b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:d9:23:a4:8d:f9:8b:9d:1a:1f:9e:ef:78:
                    c9:2e:01:36:d6:d4:83:79:f1:b7:dd:55:65:ef:b9:
                    ca:13:f7:2c:f2:f8:f7:1c:6c:98:83:c6:0d:d9:42:
                    af:5b:ef:35:3d:25:ff:f2:46:36:e2:63:3e:64:b8:
                    3f:94:5d:59:d0:ea:9d:a6:2f:c5:8f:64:4b:89:1b:
                    2b:83:7d:bc:e6:fe:88:fc:db:6f:14:de:ed:f3:a9:
                    64:0a:ab:b9:a6:77:4b:3d:23:4c:5c:bc:1c:af:43:
                    70:df:59:47:70:41:19:f9:5b:a7:bf:b8:32:1b:3e:
                    96:43:88:d6:fe:ee:45:28:35:c0:64:5c:b3:22:97:
                    5d:2d:3b:b3:dd:cf:31:3c:49:16:c1:bd:c6:0b:d6:
                    19:cd:2a:01:1a:a1:a4:3c:3f:14:ef:44:8b:16:24:
                    3d:ec:de:4f:71:57:a7:4c:ce:cd:98:5a:c1:41:4f:
                    47:7d:3e:5b:b6:3a:00:e9:39:d4:35:93:28:fc:4e:
                    db:ce:71:b2:d3:6b:03:28:02:0c:34:a5:0b:0d:fa:
                    99:0c:a4:39:36:b1:7e:3c:71:12:ce:80:eb:02:83:
                    6d:2f:18:c9:fb:5d:75:e5:a5:c2:fe:f5:05:3b:c9:
                    bd:60:46:b1:c4:7a:98:89:76:93:e9:d6:11:f7:13:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2B:11:B3:E8:5B:69:47:D0:32:C4:C6:14:6F:CE:8C:8D:3B:94:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a4660a3-de8b-39fb-a1e6-64deee3e7b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:91:b4:1d:52:7f:13:b9:ae:3f:cc:67:91:7b:94:bf:a0:
         4b:91:41:90:fb:02:9e:be:84:f0:20:95:63:9f:49:e7:8c:e4:
         82:a4:26:52:a6:dc:cf:4d:62:03:b5:6b:81:9d:e0:49:75:7b:
         6e:95:2c:47:66:0f:63:e4:bf:41:c4:08:eb:a2:a3:96:c3:9a:
         dd:77:4d:22:ee:a6:e6:c3:01:4e:ae:0e:da:57:90:1e:b0:a0:
         13:0e:06:3a:f1:8b:39:ac:d8:b4:5e:bf:a4:77:ae:ff:08:f0:
         a9:9f:41:aa:3c:45:f6:23:99:bb:81:0e:ad:1c:f9:83:36:97:
         58:c1:fb:66:10:d2:8b:27:45:64:73:46:72:b8:66:86:a2:ac:
         ca:27:02:03:ed:3a:ed:31:7c:74:a1:51:c5:3d:00:40:8b:da:
         e8:5a:39:57:97:2f:e6:92:02:27:db:40:5b:a3:87:45:d6:8b:
         74:da:b1:78:b6:c4:5f:1b:14:99:4c:87:33:75:59:1c:80:31:
         8e:c1:a4:cc:86:9e:94:85:81:44:6e:bd:ce:36:f6:cd:11:a1:
         12:90:e3:24:80:92:28:10:67:b5:97:a0:8c:98:ab:b5:33:2c:
         e7:07:db:97:3b:06:bf:ac:59:9b:39:ea:91:a7:57:2d:5c:09:
         5d:a6:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:46:16 2025 by rpki-client