Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c95e744-7288-3449-a51e-354b00212dd3.roa
File:                     3c95e744-7288-3449-a51e-354b00212dd3.roa (raw, json)
Hash identifier:          nT6VUTvyl5EItmuNsvkuu27SAK6k0B89xr3Mvo0xmIs=
Subject key identifier:   3B:0D:F7:64:B6:7B:95:07:CE:DF:45:97:80:FA:4C:F9:EA:0C:8C:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F0E0E4047F581CE75080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c95e744-7288-3449-a51e-354b00212dd3.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36619
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f0:e0:e4:04:7f:58:1c:e7:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9a60dc1e-396a-446f-9b89-efbd3f9191f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:e8:ed:9d:af:70:7a:9e:1a:34:ea:3f:7f:
                    f7:b7:ad:38:2b:13:56:93:e7:87:0c:74:12:9a:47:
                    95:a5:6e:c3:51:ce:42:2a:da:c6:be:76:5e:9c:1f:
                    eb:58:65:c6:a1:ac:ae:15:c8:c7:24:3e:05:ab:66:
                    56:e2:86:db:30:e0:33:79:c9:5c:63:cf:85:cd:23:
                    e5:90:ee:dd:a9:7f:00:bd:1c:ae:77:ab:74:04:72:
                    d6:2a:a1:22:8a:21:2c:aa:dd:f4:ce:a7:6e:1e:5b:
                    6b:a8:75:31:1a:10:d8:6d:4c:b9:55:1f:16:70:0f:
                    e6:95:e4:2f:8b:d1:78:a2:19:09:67:73:22:7c:ce:
                    dc:70:4c:e9:13:19:dd:0a:37:6e:74:f6:11:a0:5f:
                    45:33:69:de:4f:ea:90:16:f3:a4:19:da:9f:cc:f3:
                    15:a0:1a:08:f4:b1:dc:7b:5e:7b:7b:40:65:bf:0f:
                    00:88:83:80:db:a2:40:97:36:54:90:22:f3:a4:47:
                    5f:1e:d4:1f:f8:25:53:bd:0e:09:6c:c1:1b:30:cb:
                    70:cc:7b:ca:41:0e:c3:75:9a:7a:60:ef:d1:de:45:
                    c9:6d:9f:f1:c8:00:00:28:dd:fb:95:22:d6:40:58:
                    e9:eb:0d:3a:7a:81:71:2f:6a:67:60:22:23:01:02:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0D:F7:64:B6:7B:95:07:CE:DF:45:97:80:FA:4C:F9:EA:0C:8C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c95e744-7288-3449-a51e-354b00212dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:5d:98:37:70:96:90:cd:c8:89:4c:c3:55:7b:90:6d:03:
         12:5a:d9:f7:e8:20:52:c9:49:03:41:62:ac:d2:b8:14:38:51:
         f2:82:5b:2b:6d:a8:09:96:42:f1:7e:a1:84:17:32:43:9b:10:
         c0:3d:71:32:17:4e:7e:2e:68:98:fb:77:90:6c:11:9b:20:42:
         13:a2:20:77:63:e7:e7:34:39:fc:bb:09:da:3b:0e:a5:cd:16:
         fa:2d:3f:96:52:53:f5:d0:22:94:da:12:b4:ec:18:ec:5d:7d:
         db:87:d8:d6:a4:0c:60:08:cd:89:6a:ab:83:bf:46:61:c8:6d:
         d0:b3:cf:11:57:09:72:7e:52:71:04:e9:9d:c5:b8:14:10:f2:
         bd:d1:e2:0d:90:88:26:bc:59:3b:85:50:91:0a:47:dd:00:af:
         7d:ea:c5:c8:68:3b:12:f7:6c:59:0d:f6:46:10:f2:07:e2:39:
         1c:55:29:82:0b:7b:6a:5f:c6:e9:d5:55:dc:ca:be:f5:d0:2d:
         e6:5b:22:fc:93:30:98:1a:b9:35:1e:4a:01:e6:21:3c:4c:3e:
         bd:a2:cf:be:9e:96:67:4b:da:bc:ce:11:20:08:24:4b:ad:5d:
         e1:b9:d4:07:ad:77:98:a1:02:47:ca:da:f2:e9:4a:1c:55:f5:
         15:2c:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:36 2025 by rpki-client