Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e645f68-18dc-3904-a81c-afc914c9c5b4.roa
File:                     4e645f68-18dc-3904-a81c-afc914c9c5b4.roa (raw, json)
Hash identifier:          0KTSUQ0YBDLc2Q1kurfJQv5r1OngNMHhJ24nBDWKD68=
Subject key identifier:   B8:7F:99:02:D0:41:2E:33:DB:1D:F1:A4:CA:F1:3F:13:79:4D:6B:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A12DBE9C1A359629BA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e645f68-18dc-3904-a81c-afc914c9c5b4.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     22547
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a1:2d:be:9c:1a:35:96:29:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=2d8321d8-d9a2-4e69-9d5a-cc1cc480c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:e8:ff:98:d1:52:43:7c:4f:06:7e:e1:f6:
                    4a:13:f1:a9:2e:4f:a7:03:9a:71:e4:0e:43:02:60:
                    6a:d5:ff:96:d0:d4:ec:72:80:77:35:c9:5e:05:d7:
                    c5:24:61:98:f9:87:95:f0:7c:ed:d7:3b:cf:00:b7:
                    08:2f:34:b7:53:41:45:df:ac:45:98:22:08:5e:68:
                    1e:d9:37:4d:5a:47:81:d8:2a:6f:53:96:52:e8:d9:
                    07:f5:20:fb:ce:82:b7:0b:36:a0:e2:93:dd:fc:2d:
                    54:f5:2a:6c:8e:f3:f1:14:96:43:ed:e8:11:8c:31:
                    f6:26:db:f8:4d:ea:da:73:df:fb:17:2a:1d:c2:53:
                    2f:69:6e:0a:22:1a:42:bd:68:ac:6f:84:30:3d:86:
                    9f:51:97:ad:71:e9:6f:fd:8c:f0:4e:48:db:8e:71:
                    cd:1d:a2:cd:82:df:05:76:ab:36:77:f3:18:68:33:
                    98:29:a1:af:a4:04:05:61:e8:b0:2c:80:1e:bb:e6:
                    47:2c:77:2f:49:a8:0f:f2:83:26:fa:40:ef:8c:03:
                    2e:6a:96:bb:e4:34:03:6c:c2:67:c1:4b:ed:09:b5:
                    00:9e:0d:f7:5b:b9:7b:7f:fb:93:be:de:6c:26:02:
                    da:e1:06:89:72:bd:cc:38:c7:55:84:74:d0:31:6f:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7F:99:02:D0:41:2E:33:DB:1D:F1:A4:CA:F1:3F:13:79:4D:6B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e645f68-18dc-3904-a81c-afc914c9c5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c1:8e:22:d9:62:03:cf:94:14:d6:ad:8f:2b:c6:49:6f:56:
         ae:5c:5c:d3:66:c2:3f:3e:25:e3:2a:c1:c8:25:dd:6c:cd:23:
         fe:7b:23:46:73:a6:62:a4:76:73:d6:05:0a:ad:3d:4e:0a:9c:
         3e:11:2f:40:d8:6f:c9:f3:fb:e4:b7:c1:8f:80:74:f4:29:0f:
         b5:51:20:85:50:67:80:9e:62:a8:3e:59:fd:6c:6e:a0:d0:5f:
         5a:06:30:e8:7b:c8:b1:a9:22:6e:8f:f2:0c:6e:1e:96:0c:da:
         67:da:86:2f:c4:da:ba:fc:d1:d7:42:6c:11:64:a8:e7:f5:d6:
         af:bd:7a:25:90:39:ba:31:d3:37:5c:a1:49:05:c4:8b:1b:f9:
         06:e3:54:67:1e:6e:77:73:48:81:8d:0d:32:02:2c:9f:0e:b7:
         81:7b:a0:a1:78:e2:6f:f2:c1:ca:ff:6f:08:b8:86:7e:af:7f:
         46:ba:9d:0e:6f:fa:9e:dc:c9:86:b1:39:78:10:e1:ff:30:e7:
         a1:cf:f0:f7:15:16:6c:93:01:79:a0:f9:4a:85:70:70:a1:7f:
         5c:cf:d1:cd:43:4e:26:0e:29:d3:dd:89:e5:30:83:38:ba:2d:
         14:5f:f4:da:55:bc:5b:8b:44:8b:cb:ab:48:73:ce:f5:36:ee:
         81:4b:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:06 2025 by rpki-client