Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e987634-6d81-33e8-9d47-45b6021f99b5.roa
File:                     3e987634-6d81-33e8-9d47-45b6021f99b5.roa (raw, json)
Hash identifier:          hNkCzpFs14fN6nXpx2exfTwBWaXj/777vUsnYF/nZv8=
Subject key identifier:   C9:2C:26:F0:36:F5:00:10:F8:4A:77:67:6E:ED:96:27:E2:4E:84:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0C238CBD02C16C37BB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e987634-6d81-33e8-9d47-45b6021f99b5.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     397193
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0c:23:8c:bd:02:c1:6c:37:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=f2d363cd-c384-4a44-a11f-040fad980cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:fe:8e:c7:4b:2c:cd:41:6d:dc:94:da:64:
                    d2:23:52:84:53:4e:67:f3:25:bb:c3:85:af:c6:81:
                    6c:14:be:57:f3:82:ad:b6:dc:08:44:c0:b6:63:9e:
                    d5:93:8b:dd:e9:c6:14:31:77:16:74:4b:78:04:45:
                    1c:b6:48:ce:ea:c3:60:a6:f3:91:67:b6:55:b2:3d:
                    7b:59:31:43:28:a5:f8:96:4e:04:d6:b3:58:46:9f:
                    b2:af:80:48:95:6c:0d:3d:30:42:fd:fc:34:0c:b5:
                    e4:58:42:09:b0:bb:4e:c5:22:dd:5d:ea:d4:fb:51:
                    60:d6:ed:64:43:9c:36:c1:61:ba:4d:0f:0e:48:65:
                    81:3b:dd:9c:0b:34:2a:36:86:22:54:a4:fb:96:38:
                    f5:de:df:13:5b:52:17:eb:39:13:21:28:92:ad:1e:
                    68:03:b6:18:05:73:72:7f:0c:90:b3:62:6b:2f:fd:
                    7d:86:aa:98:ca:fb:f0:36:55:18:78:49:c9:ab:b5:
                    27:b2:43:5e:1e:86:66:24:97:46:69:df:ba:50:26:
                    16:b4:5b:6c:90:be:d3:b0:95:3e:29:ea:f4:b4:01:
                    0e:63:f8:b9:12:f1:d5:66:4c:a7:41:d8:c8:be:eb:
                    ab:cd:74:1e:d9:5f:2c:97:52:72:48:15:3d:41:e2:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:26:F0:36:F5:00:10:F8:4A:77:67:6E:ED:96:27:E2:4E:84:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e987634-6d81-33e8-9d47-45b6021f99b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9e:b2:57:e6:f2:72:da:76:17:de:4e:88:6f:ce:b3:90:49:
         e5:8f:44:fe:d3:92:0b:5e:60:b0:d1:d3:09:6e:33:b4:39:35:
         f7:db:4d:d8:62:67:91:ea:6e:f7:67:75:39:30:37:5f:72:50:
         ee:5c:93:f7:0c:66:b4:59:d6:36:87:f6:3c:7c:a6:c7:ea:c8:
         a0:db:b8:73:8e:67:5f:6f:fd:58:1a:46:e4:32:67:1c:f2:19:
         92:2a:14:8a:da:b9:db:b8:27:36:55:25:1e:e6:40:96:03:29:
         1f:57:e6:b7:f4:1c:e6:06:1d:6b:e4:c8:e4:fa:ad:2d:80:b3:
         42:1d:e1:f6:7f:65:79:84:a4:8f:b0:41:f8:4b:57:b4:aa:a5:
         ef:da:38:cc:33:05:bd:bb:63:db:87:28:98:97:db:24:66:61:
         a8:35:f5:c4:18:fd:b6:a8:6f:ce:6f:5d:e7:f0:03:86:c1:10:
         a9:03:56:d3:0f:cd:96:76:87:b6:7d:5e:1b:7b:e6:4f:a1:5b:
         d4:01:f3:8e:2e:83:ea:cb:67:63:ee:b3:a5:de:fa:4e:c8:4e:
         7b:e4:6d:96:fd:b0:f1:2c:71:c6:81:35:6f:31:67:7b:a4:5e:
         ae:4c:b5:99:98:05:71:bb:ff:e6:90:7a:75:b3:48:88:1b:34:
         0f:0d:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:17:36 2025 by rpki-client