Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54f04b43-a79e-39f7-a6ff-46d3791997cb.roa
File:                     54f04b43-a79e-39f7-a6ff-46d3791997cb.roa (raw, json)
Hash identifier:          C+1wIWp38dxpGDLYRzREBsRC3dvfoXHanlblgrg908Y=
Subject key identifier:   A3:D8:B6:6E:7C:9D:DF:D9:A4:D0:69:F3:7F:38:16:72:93:BD:68:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D7423F9E4BCAD2554EB380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54f04b43-a79e-39f7-a6ff-46d3791997cb.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396586
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:42:3f:9e:4b:ca:d2:55:4e:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=eccf96e9-4208-41ca-bb8e-79978411177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:44:09:07:6b:87:e4:d6:ae:d2:22:5c:22:
                    f5:85:15:3e:16:26:38:98:ff:58:0c:0d:5d:ce:5f:
                    3a:c3:3c:e7:56:02:fd:3a:4a:72:96:87:e6:20:a4:
                    bc:90:8f:33:6f:cf:28:3a:ff:f2:f4:6b:97:ec:f3:
                    13:0b:d6:c1:4c:46:47:94:db:05:1b:9b:32:c7:be:
                    90:ea:10:2d:b6:8a:2b:9d:90:6b:ff:a1:31:02:74:
                    90:b2:fb:55:a3:7e:4f:a4:b9:58:54:42:db:21:14:
                    b8:19:ee:c7:84:d9:3e:b3:6a:58:d3:c2:69:be:a2:
                    7c:a2:5d:f1:43:dc:74:9c:94:f4:bd:b3:4e:e4:be:
                    01:cd:ee:77:27:d6:d1:1f:ec:49:b7:2c:0d:2a:df:
                    2b:76:f0:ca:03:3a:f8:b5:9e:d7:ef:1b:09:1a:f9:
                    31:3e:ab:bf:5e:93:27:ec:e3:fe:c3:d6:3c:6f:dc:
                    38:33:b7:da:84:a9:88:b9:e0:32:8f:47:c4:a9:20:
                    08:47:ad:cb:87:cd:29:eb:fb:c8:b7:e5:9a:f4:41:
                    8b:49:ce:14:fd:57:0e:71:20:97:ae:3e:07:3c:ef:
                    86:cc:31:db:3b:96:bd:48:d2:65:1e:00:14:9f:ba:
                    9d:86:d1:4d:2c:6b:36:17:02:4a:c9:b8:6b:f9:22:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:B6:6E:7C:9D:DF:D9:A4:D0:69:F3:7F:38:16:72:93:BD:68:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54f04b43-a79e-39f7-a6ff-46d3791997cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d9:3f:9f:71:aa:f1:9b:eb:e6:ff:4f:27:48:51:58:5e:73:
         be:8c:47:9a:2d:5e:8c:ec:e4:b1:16:e4:ca:1c:43:f0:08:c0:
         dd:12:f6:c5:d0:b9:28:bb:4e:c5:95:f0:10:76:61:fb:dc:b4:
         cf:a6:2d:79:7c:6e:9b:bb:f8:cb:fe:8b:37:9b:6f:e1:3d:8b:
         40:58:2a:10:2c:17:14:22:ab:87:8b:a6:df:34:71:39:1d:21:
         87:ca:5b:0b:aa:cc:0b:4d:d8:92:3c:5a:40:60:a4:6f:f7:f7:
         34:1f:b8:a8:38:7a:a4:92:5b:bf:10:eb:07:be:7c:1b:14:0e:
         6d:cc:3e:36:40:e6:d3:53:67:39:45:4a:57:fa:17:52:86:cf:
         de:02:64:af:1f:f6:3c:df:56:44:0a:1b:1d:85:7d:ca:c7:2c:
         46:be:0f:26:c5:68:5a:67:b2:a8:60:40:9c:a7:85:ea:29:a8:
         8b:d5:a7:dc:3c:9a:63:5f:39:0d:24:7e:95:52:e0:45:aa:9c:
         99:93:4b:7e:26:fe:a1:9e:c4:33:dd:70:65:6b:8d:af:95:ed:
         c9:21:2f:dc:15:9f:2f:d0:d4:be:8a:8a:68:c1:61:af:d9:df:
         50:b3:94:1f:66:7c:3b:97:1f:5a:3d:ef:f1:0f:3d:4d:be:04:
         53:49:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:16 2025 by rpki-client