Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa
File:                     4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa (raw, json)
Hash identifier:          oKg7GYeLzNrhVzUfA4lOpH1rd12yMs9iPmAarTo/0MU=
Subject key identifier:   05:91:2F:71:59:AD:81:EA:C9:91:CE:C5:9C:48:92:AC:65:4D:CC:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE0319EF2DED7D92F79DD2080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     396541
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9e:f2:de:d7:d9:2f:79:dd:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=13310413-f8f4-47ba-be49-2a17c0377dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:7e:e5:90:70:23:87:d4:e1:9f:df:fc:4d:
                    52:65:87:e4:ae:d4:a1:6c:24:4e:06:96:8d:33:e5:
                    e7:8d:e3:21:c7:9e:83:2f:45:5a:f8:ad:b9:7e:dd:
                    52:c2:47:b1:e9:dd:8a:36:b1:61:32:32:94:71:c6:
                    db:b5:09:54:29:a5:54:94:43:cf:5d:6e:87:9d:dd:
                    be:3e:2d:ed:1c:be:cd:7a:63:7b:2c:c9:03:2c:89:
                    71:0a:16:e0:0d:07:e7:b7:ae:a6:e1:1d:71:5d:3d:
                    45:85:ce:cc:b8:fa:d7:25:c1:3b:af:05:2f:84:c4:
                    e6:79:af:d1:ce:16:fa:e9:b5:1e:ce:ed:50:a1:a0:
                    6c:73:0d:75:e4:26:dd:ad:46:d2:88:de:3e:14:58:
                    f6:eb:91:f9:1b:b8:4a:00:80:05:b3:02:ad:fa:7d:
                    b3:66:d0:24:a9:0e:6c:7d:ea:f3:cb:36:05:d9:36:
                    66:49:e6:67:a2:75:4f:0d:dd:7a:f3:c7:10:6b:e9:
                    92:eb:83:b1:99:6a:c2:cd:0b:55:94:59:2f:ea:3e:
                    72:e1:b9:e4:24:85:5b:9e:04:dd:13:50:48:3e:dd:
                    8c:4e:2f:8e:97:df:e2:8b:f7:6d:fa:cf:dd:4e:89:
                    cd:40:2c:d4:10:53:5c:2a:42:b9:0f:14:78:06:c7:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:2F:71:59:AD:81:EA:C9:91:CE:C5:9C:48:92:AC:65:4D:CC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4beda2e5-bce0-3a4f-a8b2-63bd67d52aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:39:24:b3:44:94:06:12:0f:2a:42:27:cb:91:3d:f5:03:
         c8:5b:53:1e:62:22:c7:b0:4c:6c:4c:34:ea:19:a6:b7:c1:65:
         81:58:fe:19:c8:8d:2e:2a:50:27:ba:ca:a1:df:f7:11:fc:60:
         d3:09:cf:d2:48:10:1d:24:0a:3d:80:01:5f:e5:e4:16:cf:5a:
         8b:90:b6:28:2d:3d:e6:1b:3d:97:03:00:11:39:fa:5d:01:13:
         15:d1:01:7c:d5:e7:48:61:7d:b5:5a:c5:fa:11:27:3f:7b:64:
         d1:c6:60:7a:a8:cb:0f:3d:cb:c6:e6:45:da:68:fd:d2:05:a1:
         02:b1:8c:0e:00:52:d6:05:b3:1a:a1:b6:ec:db:07:cb:a1:98:
         ff:90:bc:eb:3f:d2:b9:a8:81:8f:5f:c4:a2:80:ec:0c:2b:44:
         c4:16:c6:0a:00:9e:59:4a:58:53:ad:93:72:a3:e1:b2:39:e1:
         b1:9b:c0:43:33:d5:ca:6d:6c:f5:97:ff:f2:02:f1:07:ad:82:
         75:ac:2c:36:cb:93:e9:f4:31:43:f8:d4:af:e0:7c:94:33:a2:
         64:4e:be:3e:9e:36:da:71:b9:3e:d7:e1:86:80:7f:2e:fe:17:
         96:1d:c7:1a:ea:c0:bf:26:ff:7a:ab:56:95:58:91:b5:55:83:
         37:3a:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:40 2025 by rpki-client