Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
File:                     4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa (raw, json)
Hash identifier:          /10/hVHMibvXDSglKJ2EFiMffo9uq3XjbSdtpL1Wwxc=
Subject key identifier:   8B:94:17:57:84:CD:78:6B:36:A7:45:76:F9:B4:C8:4F:B4:F6:8D:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C86BCD804CC05178A5E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396573
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:86:bc:d8:04:cc:05:17:8a:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=b76402b7-638b-4cef-9673-8b7607900d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:64:d9:e5:8b:7e:cb:82:94:4d:0a:fd:78:
                    61:47:78:60:87:a8:1a:27:62:2c:58:7b:d7:bb:23:
                    75:a2:3b:93:81:9a:0e:1e:7b:e4:24:08:2c:be:77:
                    d7:21:1e:b5:b2:d5:03:f1:73:fb:44:ab:6e:d4:c8:
                    4c:d7:cd:e8:37:b5:17:66:14:c1:7c:2e:41:f9:3e:
                    5c:2d:3f:94:48:90:46:46:12:34:97:86:02:c0:c1:
                    ab:03:d4:e2:a8:b6:97:16:b2:5f:7b:4a:a2:d9:9b:
                    d0:08:f3:19:e5:26:d1:a7:03:aa:91:e4:cf:30:e5:
                    46:99:7e:d5:3b:fc:18:12:5c:be:30:75:2d:c6:f7:
                    ce:66:2a:90:21:fc:0c:91:15:7f:9c:38:14:bd:b4:
                    cd:c7:ce:f8:06:84:ee:9f:65:71:62:a2:8f:d5:32:
                    1b:51:03:b4:2d:e9:0a:d8:da:19:01:19:91:79:83:
                    0a:5b:3c:b9:d3:25:15:7c:0a:7e:11:6d:c9:88:40:
                    b3:87:3b:41:ce:ef:c7:d3:d3:87:af:75:79:13:13:
                    af:60:4e:92:52:03:d9:ce:51:2f:01:93:8f:60:79:
                    ce:8d:25:01:d5:43:af:6d:19:15:13:17:80:43:4e:
                    56:f2:67:01:6f:2d:89:1b:05:e3:02:e6:f4:a3:bd:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:17:57:84:CD:78:6B:36:A7:45:76:F9:B4:C8:4F:B4:F6:8D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:94:a0:3c:2c:dc:5d:99:65:09:7a:3f:92:cb:30:a6:bf:
         06:41:04:b3:59:71:28:f5:98:b7:3e:84:c9:6a:62:79:08:d9:
         47:e8:e6:b7:4d:d9:df:cd:a2:2a:16:b5:dd:4f:cd:8f:68:25:
         a0:0d:c4:93:8a:49:90:e3:8a:37:9d:79:e3:f8:f4:ac:70:98:
         c0:89:59:ec:40:93:00:a6:3f:f6:38:7a:17:a5:44:07:50:6b:
         fe:59:2d:cf:fa:96:37:f2:b1:21:f7:e3:44:90:57:ad:4c:e6:
         f5:16:15:6e:d3:cf:3c:f8:06:cf:46:a7:05:25:a6:05:33:90:
         af:37:fe:b6:a6:99:65:29:aa:87:bb:3b:b5:0b:91:ff:ae:2c:
         7b:ea:b1:15:59:00:ea:d7:3b:0e:ef:01:51:c3:ed:d7:48:e1:
         4f:c8:94:c8:4d:9c:45:0d:5f:0b:1b:fd:6d:d7:1d:0b:10:ed:
         36:7c:11:8c:ca:ea:b1:c2:a8:df:e0:35:b4:fb:bf:dc:49:fe:
         9f:ff:5d:31:c2:4e:ca:55:8f:56:23:c3:f9:ab:47:bd:09:00:
         94:69:6c:83:82:df:79:9b:da:03:ae:9d:2a:ea:09:65:a5:9d:
         56:16:26:8c:64:0f:ed:97:06:47:ef:e3:1f:26:ee:e2:0a:d5:
         b9:3d:e2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:24 2025 by rpki-client