Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/556d9f98-fabd-3716-9eb5-280e5b558aa8.roa
File:                     556d9f98-fabd-3716-9eb5-280e5b558aa8.roa (raw, json)
Hash identifier:          2V8B49RsyBCxWJhbLnIRP/QSJIA9y9kkRQyvZ0H6UGs=
Subject key identifier:   87:16:4B:23:0F:35:4B:26:E4:A6:B8:57:56:65:9B:A1:22:B8:E8:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D724BDFB1B37F6F046B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/556d9f98-fabd-3716-9eb5-280e5b558aa8.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     396572
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:24:bd:fb:1b:37:f6:f0:46:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=33a41256-6da8-4aeb-a6c4-3adbb0b88dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:de:e0:cf:33:bb:c4:47:a0:e9:9a:50:bf:
                    09:c0:df:98:6d:52:ac:42:cd:d6:39:77:19:4e:17:
                    bb:42:91:39:7d:fc:0b:8d:7a:c9:b2:c5:16:61:64:
                    8d:ec:23:81:92:0a:c9:ca:22:e2:92:3e:14:df:a2:
                    94:5a:9a:7f:71:f8:2e:f1:a4:38:88:20:2a:90:8c:
                    7e:6f:04:5f:99:6d:be:ef:f3:4c:ba:08:37:4d:db:
                    e2:5e:c1:1a:32:b9:99:2d:a1:78:d5:a9:4a:83:9c:
                    6a:89:af:0d:1a:ab:fa:0a:3d:dc:5b:f4:64:1d:06:
                    41:74:16:b9:0d:8c:a5:27:00:c6:3e:d1:f8:ec:f2:
                    60:84:6a:80:44:a3:b9:be:79:15:ee:75:24:64:62:
                    ff:f3:c7:2f:4b:fe:95:fb:13:e6:03:b6:cd:90:cd:
                    c6:79:f0:d3:25:e4:78:35:a2:6a:98:18:23:e3:bd:
                    fb:5c:fe:15:23:b9:bf:35:8e:6a:27:df:3c:c9:f4:
                    0d:c0:67:23:67:39:c1:08:e5:b4:74:cc:94:86:0a:
                    73:76:46:3d:92:78:f0:ed:5e:6d:2a:a6:d5:3e:19:
                    71:0a:10:e3:41:64:65:04:7d:5c:e0:f9:80:7a:53:
                    3e:2b:7b:ac:38:94:f5:fe:63:1c:5c:98:6c:46:ba:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:16:4B:23:0F:35:4B:26:E4:A6:B8:57:56:65:9B:A1:22:B8:E8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/556d9f98-fabd-3716-9eb5-280e5b558aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:8f:e6:fb:cc:eb:41:94:92:ae:d5:15:96:f3:a5:d8:87:
         bc:a6:94:91:c8:ba:90:fc:ea:65:47:45:62:de:c2:ac:c4:f7:
         33:29:e4:f4:d2:26:17:a5:75:77:4a:27:9c:0f:3c:c7:36:7b:
         3c:f3:0a:db:af:f0:63:e4:d0:a2:c9:ad:90:b1:2a:3a:fd:fd:
         10:f5:ca:6c:c5:ec:88:6d:01:35:c1:83:f1:95:33:76:5a:12:
         f4:05:8a:2b:b8:3d:90:52:3a:5c:1d:a1:3a:2e:18:e0:92:43:
         ff:d2:55:8b:3c:c8:0e:f2:ab:2c:b5:31:31:aa:9b:df:36:c3:
         68:a6:ef:70:59:12:a0:51:d3:ee:aa:64:17:7a:96:3d:e2:72:
         81:e3:9b:80:0a:a1:ea:b9:b2:b8:e8:09:d7:6d:e9:a3:ca:68:
         3d:fb:54:d0:67:9d:d4:2d:5b:e6:cd:a8:27:c0:19:a6:ea:25:
         99:30:e4:cd:1f:4a:90:bc:32:b4:45:cd:68:41:9a:66:0a:9f:
         4a:51:89:73:41:d2:1f:51:48:dd:02:85:0e:53:4b:03:59:dc:
         1d:6c:5b:0a:5a:e3:4e:31:6a:a9:ae:93:6e:4d:22:f5:f3:5a:
         87:6f:9d:51:3b:7d:74:d8:05:78:e6:f1:a0:3e:57:e1:96:b2:
         e3:36:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:23 2025 by rpki-client