Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41f64d60-b34e-348d-a14e-e4a7dd65920a.roa
File:                     41f64d60-b34e-348d-a14e-e4a7dd65920a.roa (raw, json)
Hash identifier:          P3CJKpKS822KXBjrDhfhV4iyjdbH7nGrYlbggxkEFes=
Subject key identifier:   BE:CB:06:47:F4:A0:50:72:E6:44:F6:28:0A:CC:7E:9F:54:E8:49:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D73E7C4BC55A51F3434E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41f64d60-b34e-348d-a14e-e4a7dd65920a.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396587
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:3e:7c:4b:c5:5a:51:f3:43:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=d245a5f8-6180-4911-b8a9-48580d804285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:49:c2:d0:66:fa:22:51:a9:4d:ed:75:4e:
                    d1:3e:90:71:0e:df:37:d4:f3:32:28:1b:c5:96:a8:
                    7c:37:81:56:92:71:d7:7e:e9:c7:0e:eb:33:50:6b:
                    4e:e8:0f:15:d7:dd:18:9a:28:d1:28:57:a1:ac:ea:
                    70:7a:4d:6e:94:a7:69:71:64:73:31:6a:8d:41:8a:
                    44:dc:cb:37:2c:7a:4d:22:54:7d:21:f6:1f:3d:34:
                    42:ed:d9:aa:bd:97:ff:18:61:64:78:62:62:57:73:
                    bb:ba:87:5a:2d:6a:b2:69:c2:80:db:5b:4d:73:b9:
                    9e:da:0b:5c:03:d0:fa:33:e1:49:26:a4:78:8b:86:
                    64:40:24:cd:42:e2:45:06:92:31:48:c1:96:ce:c5:
                    a3:82:b8:04:39:73:23:af:72:9f:5f:38:ed:e4:6b:
                    8d:a1:08:cd:57:91:60:b4:13:07:3a:bd:0d:72:ca:
                    7e:e9:28:7a:0b:2e:1d:8c:c2:b6:49:20:02:01:a3:
                    8d:e2:18:90:db:e4:44:b4:54:5c:73:ac:4f:0e:26:
                    07:f7:80:ef:60:00:01:08:26:3c:48:05:53:f1:7f:
                    fe:5a:2c:9b:84:b8:6f:ed:7b:09:0d:b8:43:fd:82:
                    cf:77:50:e3:5e:c1:97:36:33:84:39:68:75:eb:d6:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:06:47:F4:A0:50:72:E6:44:F6:28:0A:CC:7E:9F:54:E8:49:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41f64d60-b34e-348d-a14e-e4a7dd65920a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0f:ae:cd:39:e9:ac:6f:ec:ce:04:38:82:90:54:df:87:a2:
         86:09:4e:5b:fc:e9:ca:ea:d1:c1:4c:e1:bf:5f:c1:bc:da:89:
         90:11:6c:4d:f0:e2:08:83:e4:01:d8:48:fe:94:87:4e:4e:a1:
         61:84:22:77:08:be:4a:46:b4:07:16:1a:d2:84:7e:ef:b6:c9:
         8f:4b:5d:39:02:a2:2f:87:5c:db:aa:00:ae:ab:71:f7:58:57:
         e6:21:96:17:dc:56:02:3e:06:af:00:41:b7:f7:d0:d6:ee:f2:
         ff:bd:42:d7:6d:f2:9e:6d:7e:1c:2b:ef:cf:ae:23:ba:b9:ad:
         72:a4:2f:fe:2b:fa:75:14:e8:84:e9:c3:b9:f0:d0:8c:3a:c2:
         e6:80:96:14:a3:04:ce:4b:22:e7:5b:d7:39:b9:ab:fd:33:53:
         98:87:67:24:9a:be:3d:90:6c:3f:d6:bb:c1:55:70:d5:ff:d2:
         47:13:c0:07:f2:6d:38:5b:41:33:59:27:b6:9c:e5:34:3b:50:
         35:d2:d5:81:8c:42:a5:e2:67:e9:5d:19:c9:5b:07:af:4b:07:
         df:ec:8c:e1:73:93:d1:fe:4c:19:7d:86:37:93:aa:61:6e:da:
         d0:3f:ff:24:c8:87:bc:58:2f:c7:d9:3d:e1:db:ed:d0:62:21:
         0b:0d:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:37 2025 by rpki-client