Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58318090-af48-3009-b98f-4622f5ccd17f.roa
File:                     58318090-af48-3009-b98f-4622f5ccd17f.roa (raw, json)
Hash identifier:          b0yPhc2u7guMs47OBv4HozWIR/hrG8yOVDMK9OdVTrg=
Subject key identifier:   03:20:EB:EF:A7:2A:0E:B6:94:F1:68:DC:47:7D:04:3F:E0:A5:F0:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E77377689C03A82619B8300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58318090-af48-3009-b98f-4622f5ccd17f.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396572
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:37:76:89:c0:3a:82:61:9b:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=b7e3da5b-d582-466e-b33b-bd3e476299d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:50:e9:16:2a:ad:b8:5f:9c:16:e0:15:48:
                    eb:60:b3:65:cb:92:de:62:a7:e5:a4:4b:dc:49:75:
                    e4:ea:84:8e:77:8d:70:89:83:09:39:d5:62:68:1b:
                    1b:68:4e:ef:61:9b:64:8b:2c:cb:56:16:b4:36:a4:
                    f4:9c:ed:73:34:4f:6e:96:67:f7:02:63:93:d1:fb:
                    6b:25:ff:f1:38:82:52:20:86:53:f3:99:5e:1b:96:
                    60:60:d8:70:6c:d9:c4:ce:4c:d7:36:c3:ab:50:ea:
                    2d:47:36:8a:54:66:ae:97:8b:06:46:28:22:8a:0a:
                    e7:34:ac:4d:31:d2:06:ec:91:dd:e9:56:74:5a:4b:
                    42:67:00:9a:5d:09:51:48:72:e4:c7:80:3c:f0:3c:
                    5d:b4:26:c9:47:31:e9:53:a4:5e:b1:71:48:f1:6a:
                    76:7c:46:4d:fd:b1:56:30:ee:e0:de:84:26:29:04:
                    81:56:e4:11:fc:4f:b2:6e:87:35:bd:44:46:a4:00:
                    09:58:18:bd:d9:67:a4:d4:5a:b9:66:0f:3d:4d:70:
                    d1:41:1e:ae:75:c7:7e:4b:ed:40:af:0b:56:fb:c4:
                    fd:0a:0b:63:6e:ac:a5:04:4b:54:1f:27:fe:8f:a3:
                    56:19:d3:e2:39:c1:cb:e5:5a:50:d6:66:55:00:3b:
                    0d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:EB:EF:A7:2A:0E:B6:94:F1:68:DC:47:7D:04:3F:E0:A5:F0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58318090-af48-3009-b98f-4622f5ccd17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:09:a4:49:42:c0:6c:f2:89:2c:a1:81:3e:b4:77:38:72:
         8a:ec:28:88:f1:6b:7b:97:8d:e4:99:cb:64:b6:10:2d:3c:8f:
         7c:e6:3a:0c:a8:c2:7d:86:11:2e:ba:2d:8c:ea:ab:04:3c:c9:
         16:80:aa:a9:d1:28:a4:cc:c8:87:52:d8:51:cb:79:6d:c4:37:
         7d:8e:32:39:66:6a:63:6c:7f:07:b4:b3:b9:66:28:e6:52:d1:
         ee:e0:7e:7a:a6:05:6e:69:41:f6:8a:ea:13:f2:84:b7:c1:08:
         ec:7b:b8:5c:35:f9:0a:da:92:4a:92:20:93:b0:1b:b1:6d:94:
         36:d9:d4:7c:ca:f4:f1:a5:7f:cc:ad:ad:91:2a:fa:33:0e:90:
         a7:d3:72:97:fe:e8:d8:bd:43:74:02:7c:11:15:ab:a1:27:5f:
         20:50:4f:e3:e0:76:ab:8c:15:09:9d:2d:7a:af:80:41:50:84:
         bb:ab:af:6c:9b:59:b5:50:77:7c:77:80:d1:14:dc:56:54:e7:
         2b:d1:4e:26:19:46:04:39:04:fb:80:b9:b4:2e:95:2f:c6:1e:
         cc:85:33:42:e8:96:88:a6:77:ba:68:0f:5a:97:99:05:6a:00:
         b6:1e:f7:d7:cb:d0:c0:ff:88:db:ce:43:2d:59:ea:5a:b0:8a:
         2d:ab:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:36 2025 by rpki-client