Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48572d02-66d1-357b-aa93-fb1877b65bea.roa
File:                     48572d02-66d1-357b-aa93-fb1877b65bea.roa (raw, json)
Hash identifier:          gcoR40FDsc41OPYw04NlAd0l+24Yzh9+VrCbZf4nDxk=
Subject key identifier:   C0:54:D9:37:41:7E:54:DC:88:20:ED:FD:DB:55:4E:55:E7:18:3F:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E773521AFD2D2C744205800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48572d02-66d1-357b-aa93-fb1877b65bea.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396551
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:35:21:af:d2:d2:c7:44:20:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=de00286d-bfe7-4480-8948-c0c1282cae59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:0a:93:e7:f1:18:64:9c:25:0e:21:d1:72:
                    6d:31:5b:e7:b8:e2:5f:4b:29:9c:e6:77:54:8c:14:
                    9c:4a:3e:87:8f:d6:6d:28:b8:0e:b5:4d:aa:54:24:
                    ca:38:d5:ca:25:96:05:06:cb:6a:76:a8:37:4a:34:
                    7e:75:fa:7d:56:82:a4:51:40:20:2a:90:6c:1c:09:
                    fe:21:4c:da:c3:87:62:75:17:3e:9e:db:68:f9:c4:
                    95:c4:65:2e:fe:98:4a:2a:87:d6:92:c2:69:6a:32:
                    47:2f:6c:0a:4a:dc:d4:3f:e9:fa:4b:6b:bd:c5:ae:
                    eb:82:40:41:91:39:21:ea:dd:00:73:4e:08:14:4f:
                    45:91:e0:e5:87:ed:0b:cd:8a:51:f5:7a:f0:02:dd:
                    9f:05:df:e4:81:03:41:dc:16:91:c3:89:ce:c5:f1:
                    22:7f:d7:51:fa:d4:cb:c6:ad:93:26:95:8d:dd:a9:
                    0f:b3:32:0e:96:a2:c4:10:29:99:40:82:52:a1:4e:
                    72:24:2c:2f:5d:72:cc:2e:42:16:67:02:14:d1:81:
                    50:02:53:97:74:dd:75:40:3d:42:03:a5:d5:45:44:
                    af:0b:1e:dd:90:6d:1b:d6:d9:7a:48:65:ae:79:9c:
                    cd:5e:56:12:3b:7b:8e:c4:a7:37:91:15:7f:98:de:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:54:D9:37:41:7E:54:DC:88:20:ED:FD:DB:55:4E:55:E7:18:3F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48572d02-66d1-357b-aa93-fb1877b65bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:7d:e3:9a:cc:06:3a:81:18:ce:42:0c:bb:66:b9:eb:57:
         d0:5e:c8:b0:4f:b7:bb:61:a6:5e:77:36:37:d8:e1:f7:81:5e:
         8c:77:60:16:2e:17:5d:2d:66:3a:dd:6d:35:53:32:f9:93:60:
         47:06:cc:ec:fe:bd:dd:52:48:9c:d4:dd:f5:9a:80:86:cd:e3:
         c8:e2:7b:d1:f2:7e:af:03:ce:24:e8:54:3c:0e:a6:74:38:77:
         bf:66:91:24:15:22:33:8c:dc:fe:2c:3a:93:99:93:5b:06:32:
         58:c1:ca:7d:2e:c5:34:9f:fc:63:41:55:bf:61:59:31:92:7d:
         2a:9f:e3:f8:b5:76:9d:51:31:ea:df:ae:44:ca:ec:4b:35:56:
         cc:4e:3c:be:1b:23:72:9c:33:53:43:37:ac:05:ae:e0:04:67:
         d8:18:83:38:b2:0c:e5:60:56:e4:24:c6:8c:e8:81:c3:ce:13:
         31:70:60:8a:4e:b0:7e:d6:db:72:92:69:e7:dc:b9:69:af:c1:
         60:6c:f2:b2:73:04:0f:8f:aa:f1:43:f5:5e:8d:ab:fd:36:91:
         92:17:25:b2:18:8a:b0:c7:ea:8a:5b:f8:22:38:e2:81:87:cf:
         1c:14:a4:88:c9:88:71:a6:c7:6a:9a:47:88:bd:a6:d3:fc:19:
         24:95:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:24:07 2025 by rpki-client