Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53fc39c9-976b-3028-96ef-715b3b537477.roa
File:                     53fc39c9-976b-3028-96ef-715b3b537477.roa (raw, json)
Hash identifier:          n8t9qCURX4fz2m8ruUde/YlsbND969HF54vtRJRUL2Q=
Subject key identifier:   E4:26:58:05:FC:1E:E6:9A:A9:2F:46:EA:25:FA:7F:E6:6C:E1:92:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1AD0135BC1A1714101940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53fc39c9-976b-3028-96ef-715b3b537477.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     20172
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ad:01:35:bc:1a:17:14:10:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=94d7a8ec-adab-4aa6-b3ba-cf7d451b2c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:8c:2e:66:3d:fe:a9:56:3e:98:e1:dc:cf:
                    ed:f6:a0:3d:e7:b3:3a:fd:77:07:9d:23:f5:19:87:
                    1a:ee:6f:b6:07:4c:bd:66:a4:4d:79:bf:64:80:a7:
                    c2:65:6d:f3:09:e2:c8:a6:b7:38:4d:3e:ed:fc:91:
                    b1:2a:6f:d7:99:dd:a6:e7:22:f0:ef:6c:77:40:e4:
                    47:91:1c:5e:ec:80:d4:22:9e:d6:ea:3e:a7:b5:49:
                    f3:22:68:8a:8e:68:09:9d:2c:23:2c:ea:97:82:d5:
                    0d:7f:f5:be:8d:47:8b:a4:60:0d:6c:4a:98:39:e5:
                    78:3c:b3:67:30:c5:2c:f9:2a:6f:56:84:cb:2d:33:
                    39:74:94:b5:db:18:13:a6:65:df:81:a4:b5:46:44:
                    27:bf:db:1f:6b:f4:38:75:a3:85:9c:6f:97:44:cf:
                    3c:2e:ae:f5:dc:c0:8a:0e:59:6f:41:4c:51:57:37:
                    0b:65:58:8f:f8:07:e0:81:61:ff:a9:7f:40:84:67:
                    6d:86:db:47:65:76:72:f3:ce:39:32:5c:97:fe:9b:
                    2a:43:6a:56:93:5e:da:7f:e5:b7:6a:3e:6d:67:3b:
                    a6:b3:dd:81:58:4c:0a:fc:b2:e7:1a:11:ee:03:12:
                    6b:1e:ba:83:e0:cf:02:c2:77:eb:49:e7:50:08:29:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:58:05:FC:1E:E6:9A:A9:2F:46:EA:25:FA:7F:E6:6C:E1:92:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53fc39c9-976b-3028-96ef-715b3b537477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f9:95:fd:53:04:ee:54:b5:33:19:3c:ff:f3:e2:c1:67:08:
         d8:3b:3e:91:54:8e:b6:3b:42:05:8e:a2:0b:22:98:02:9c:48:
         c2:5f:96:eb:c2:f5:d1:41:7f:f2:d7:1e:4f:92:af:80:a7:27:
         c8:f9:4c:7d:39:e0:eb:fd:dc:cc:2b:28:27:51:13:1d:cb:8b:
         b0:fa:0c:92:70:76:75:1e:d9:a4:93:b7:21:bf:cc:22:8b:6c:
         6e:d6:95:5a:4b:06:8d:25:da:17:d5:b6:97:a3:ea:c7:1c:1f:
         b6:88:7f:41:1c:ba:85:f6:22:ed:07:2f:2c:77:7b:0d:8e:e2:
         38:b4:33:77:99:9c:3e:8d:d8:e2:3d:58:e6:c6:44:99:0e:25:
         e1:24:19:d6:38:87:97:33:4d:80:5a:1f:76:85:ac:f4:4b:2a:
         06:d7:5e:a4:54:86:16:83:3f:fd:c8:4b:e2:18:a6:c1:27:0e:
         28:a5:2d:8c:65:49:29:81:eb:e2:6f:18:f3:d3:f4:78:e2:f2:
         a7:aa:6b:b8:52:d2:ea:ce:a3:6d:a6:03:39:0c:38:30:ed:2e:
         05:a3:26:52:1c:d8:96:59:45:dd:89:21:02:23:af:59:7d:c8:
         29:95:6c:5d:28:ea:c8:af:66:b9:89:a2:25:ec:dd:2d:43:3c:
         70:c5:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:02 2025 by rpki-client