Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a947910-940f-3fbf-8f18-9650ceda6005.roa
File:                     4a947910-940f-3fbf-8f18-9650ceda6005.roa (raw, json)
Hash identifier:          O/L37HDgKTx4Fw9upo9vXClZl12WEhzFjV4q+NgkNmo=
Subject key identifier:   30:17:91:79:C6:F4:11:A9:5E:0D:3D:27:0D:57:8E:15:91:8B:09:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F4D72B7FBDA1A6AD43C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a947910-940f-3fbf-8f18-9650ceda6005.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396565
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f4:d7:2b:7f:bd:a1:a6:ad:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=75aca9e5-c34d-4e71-84de-a8c6529b6ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:d2:5e:69:29:3b:55:54:74:d6:1e:e5:b1:
                    c6:2b:d9:16:93:b6:cf:0e:12:df:a8:3f:d5:1b:7e:
                    23:19:d8:3b:df:b5:24:05:cb:fc:a1:9e:cd:c5:42:
                    c3:71:e7:74:e5:10:9d:d6:8e:36:06:fd:ff:ad:46:
                    9c:56:a8:dd:98:cb:dd:52:52:d2:2d:de:42:a2:a7:
                    e9:71:57:4e:50:b0:3e:ce:17:28:8e:53:45:59:3a:
                    22:a3:38:6c:6a:70:61:f8:5d:b2:80:bf:91:22:43:
                    d9:59:3e:6f:4e:a6:68:64:d8:84:58:33:48:93:48:
                    9e:a4:4d:4c:09:ba:dc:35:36:20:aa:bb:a8:5e:7f:
                    83:2a:3c:e1:bb:3e:70:d3:d6:bb:c6:dd:5e:d3:a4:
                    9d:2d:5e:b2:1e:bd:4f:82:1e:9f:dd:1a:b9:21:45:
                    69:a5:e8:b9:2b:41:b8:01:9a:9a:32:b2:0c:80:ff:
                    a0:cd:64:07:d4:28:ba:c7:22:46:3b:56:47:ba:1c:
                    05:af:a6:86:86:07:cd:eb:99:5a:a9:7e:02:2c:f5:
                    cd:ac:8a:5d:7f:69:50:f0:b6:2d:f1:ab:2c:11:cd:
                    1c:8d:d3:9a:ad:a1:a1:83:6d:9d:21:48:14:02:dd:
                    2c:06:e5:51:38:e5:bf:4b:74:62:16:82:78:18:0c:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:91:79:C6:F4:11:A9:5E:0D:3D:27:0D:57:8E:15:91:8B:09:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a947910-940f-3fbf-8f18-9650ceda6005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:71:fd:99:c1:07:82:6b:13:9a:7f:f5:fd:bf:28:b8:6a:3a:
         5f:a8:09:2b:59:88:99:f3:40:8b:58:a6:ba:41:3f:b8:fc:b4:
         91:b5:9f:fe:06:f1:40:e5:ae:a8:07:be:9b:ad:f1:e6:de:2f:
         20:96:5b:96:3c:88:e1:56:8f:a2:e8:b0:ad:bc:9c:eb:e1:8f:
         00:99:db:29:fd:84:d2:cf:55:0e:61:c0:ca:37:63:63:66:1b:
         7b:83:4c:40:c9:e9:5a:7f:a0:72:8f:f1:96:d1:d1:80:a9:9a:
         2d:18:04:a0:26:93:54:3f:ae:81:da:ba:4c:84:26:a7:b1:7e:
         8b:9b:c0:34:47:00:0a:ae:fe:0d:5c:30:54:05:e6:a2:dc:b6:
         e0:b8:05:45:80:90:a5:13:b3:e6:67:82:75:ec:8d:83:3e:25:
         92:95:0d:91:ac:56:0b:0c:12:5d:a4:06:d6:dc:84:72:4a:5b:
         71:0e:ff:c6:39:27:ed:b4:81:73:7c:6d:fa:89:e5:01:42:42:
         92:7f:3d:6c:f6:83:7c:2f:98:eb:07:59:a0:b2:ae:bf:1a:d7:
         67:1f:fe:ea:4c:95:d4:52:0c:aa:5c:64:3e:3f:8b:97:4d:e8:
         4b:5c:cc:16:0a:44:33:68:e2:76:aa:87:c4:21:0e:a1:9f:96:
         37:62:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:00 2025 by rpki-client