Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471d9058-f6e8-3b70-98fd-1d24619fc7dc.roa
File:                     471d9058-f6e8-3b70-98fd-1d24619fc7dc.roa (raw, json)
Hash identifier:          ehcK8Z/XrRBAg7LdbNh9TFvBthFbtvoc0HC5haD3DfE=
Subject key identifier:   CF:80:FB:87:ED:CC:3E:81:C8:7D:7D:0C:E5:BC:8E:D7:BA:D1:6A:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61FF6BAB5F25C3BF61A9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471d9058-f6e8-3b70-98fd-1d24619fc7dc.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396588
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ff:6b:ab:5f:25:c3:bf:61:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=7b7a6af4-a4c1-4957-9ddf-9af1f26db0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:56:b0:1d:7e:46:3a:8f:47:f8:9b:11:16:
                    45:03:56:81:b8:7f:a5:51:79:99:8b:b1:23:9d:13:
                    7d:6a:57:59:6b:3f:8e:ae:1d:fa:a8:40:db:be:aa:
                    26:50:1d:ad:99:21:47:83:fd:05:6d:46:d9:25:d0:
                    fc:9b:09:ae:4e:db:86:37:19:9f:8d:97:24:4a:4d:
                    fa:7a:6d:df:13:6a:82:dd:ed:ff:32:23:75:10:32:
                    14:65:f6:56:bb:7d:ac:03:a1:00:98:c8:82:29:28:
                    91:ca:fd:92:55:a8:27:a2:10:af:c7:aa:8f:50:81:
                    3b:a3:03:a5:4a:96:10:d1:47:f8:ae:a8:6a:26:c8:
                    ad:19:63:4c:10:f7:42:38:7f:9b:c9:59:61:bd:f2:
                    55:df:63:ea:73:29:4c:ab:c6:c4:23:a3:23:8d:74:
                    ea:0e:f2:05:72:30:8d:f7:ad:7d:e2:ef:71:93:6e:
                    62:9d:d8:bd:55:54:6d:56:3f:4d:0a:cc:74:72:dd:
                    b8:fa:99:b3:52:5e:95:ee:c7:00:98:9d:3e:af:02:
                    be:4f:c5:a9:eb:c1:3f:40:d4:08:de:1c:c7:cd:bf:
                    63:c0:f7:28:11:3a:6c:6c:93:39:f7:03:18:77:da:
                    00:79:7d:7e:e2:f3:45:de:d5:6b:e8:58:b7:78:89:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:80:FB:87:ED:CC:3E:81:C8:7D:7D:0C:E5:BC:8E:D7:BA:D1:6A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/471d9058-f6e8-3b70-98fd-1d24619fc7dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:87:f6:9a:06:e7:f9:e2:f9:b6:7e:05:6a:c3:3b:82:6b:
         30:1e:fc:6c:41:7f:33:cf:f7:61:ea:c2:51:03:ab:ae:20:ea:
         b2:d8:78:88:1f:73:aa:59:db:45:96:6e:d3:eb:74:55:41:8a:
         d5:6c:ff:1f:2c:35:e0:f6:58:ca:5a:83:36:0a:49:d9:2f:90:
         5b:9e:a8:99:82:63:e0:dd:53:2f:0a:51:1b:4f:c9:47:98:08:
         c4:e2:b4:e8:55:b7:c0:22:65:1b:57:5e:ac:dc:c8:57:0d:2b:
         ba:e8:cb:ef:c4:1f:f6:ea:d6:24:8c:6b:53:28:5b:6e:ea:00:
         38:f5:09:61:02:9a:5e:c5:de:db:62:dd:4d:aa:7b:65:19:0b:
         c3:a7:07:60:d3:29:f2:4a:a9:9d:10:92:9c:60:05:1b:06:90:
         40:4a:66:0f:e2:5a:74:3a:73:e7:ab:f3:a0:ee:88:88:08:b1:
         d1:fe:02:1b:15:56:10:2d:a0:07:f0:e9:4f:85:75:23:34:2e:
         47:79:b3:09:e7:8d:d1:55:15:8b:08:e7:9d:f7:44:8a:ff:ee:
         5d:8f:54:22:e3:52:a6:95:2a:72:2c:69:dc:f5:44:38:56:eb:
         ed:6d:a3:2d:5f:15:c9:df:2a:3a:97:8f:61:4b:65:7a:cc:f9:
         ce:be:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:05 2025 by rpki-client