Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ae1ff89-ba13-3c58-a5f3-49d807076b40.roa
File:                     5ae1ff89-ba13-3c58-a5f3-49d807076b40.roa (raw, json)
Hash identifier:          rZ7yWZ0k5TbBZDKV+Js3pPs8ZYlv4IOXcMxSpB6XhSI=
Subject key identifier:   39:1A:EC:E5:3E:BC:60:09:56:B0:4C:90:E1:70:3D:26:5D:62:A5:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D0333B0042F3753A3D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ae1ff89-ba13-3c58-a5f3-49d807076b40.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396592
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d0:33:3b:00:42:f3:75:3a:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=bc0f8bf2-4271-4771-8f70-3677fa0988ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:60:9e:c9:f7:89:d2:5e:8b:d8:a7:8e:69:
                    06:e3:1b:0f:4b:9b:a3:4b:a5:35:a9:04:ef:95:d6:
                    35:29:f4:06:88:97:bd:43:17:ab:87:fa:a0:13:8d:
                    fb:5b:ad:13:89:a7:d2:be:74:ec:01:38:9d:c5:d1:
                    07:a0:ac:43:58:7d:e8:9d:ad:d3:98:00:4e:e5:de:
                    eb:f8:d3:47:25:9a:df:0c:df:67:1b:5e:ff:ed:d8:
                    b5:89:60:e7:34:5d:2a:b1:eb:65:62:70:51:21:58:
                    2c:f9:2f:46:5b:26:74:5c:82:f1:8b:35:c2:44:e7:
                    30:8f:98:c4:38:8a:ae:4c:53:ce:6e:95:bb:89:77:
                    43:31:be:64:37:de:89:68:d9:b5:99:ef:2e:f0:0f:
                    43:89:0f:ff:60:79:70:3f:e0:33:00:f1:e7:95:72:
                    22:2b:5b:5b:e4:d1:b9:f1:32:51:22:44:26:3a:ef:
                    be:59:89:d7:64:67:11:93:0d:c1:37:87:f3:9b:49:
                    2d:be:a5:bd:08:d1:27:b3:20:7a:15:a2:e4:9e:0e:
                    33:63:6f:b9:44:1e:d0:b1:9e:c7:42:71:d7:79:01:
                    cb:fc:20:dd:bf:c4:d3:9a:f5:fa:25:fc:88:0b:1b:
                    f8:b1:b9:b4:1a:54:84:7f:e0:e9:0e:f2:a6:48:a4:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1A:EC:E5:3E:BC:60:09:56:B0:4C:90:E1:70:3D:26:5D:62:A5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ae1ff89-ba13-3c58-a5f3-49d807076b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:d2:ff:3d:13:a6:67:a8:1a:61:38:2f:a5:4a:ae:92:d7:
         c6:64:a4:e7:aa:9b:eb:d8:39:f7:e0:f5:e4:4c:9c:c8:f1:1b:
         96:e0:27:65:90:5b:d0:ab:6e:9b:b1:a5:60:c2:33:34:af:8d:
         cb:16:23:ed:96:3d:f6:22:b7:44:df:25:eb:2c:71:0e:f6:e0:
         67:be:00:13:b7:1f:00:4d:bf:da:ec:cb:93:85:d7:8f:f0:10:
         57:f0:89:ff:c8:58:72:fb:dc:05:78:3f:71:b1:ce:62:ed:e6:
         db:be:be:e4:ff:19:84:9e:31:41:c0:f0:63:30:58:40:7b:c0:
         10:29:4b:1e:95:9a:85:2d:ee:78:05:7a:e5:69:fe:b3:75:a3:
         03:52:08:33:61:e4:0a:55:43:13:5b:d8:8c:dd:c4:8f:fc:c2:
         5a:7f:b6:d8:76:80:fc:56:03:2e:eb:65:52:6c:f0:09:e5:29:
         c0:07:06:94:16:f3:1a:b2:0c:aa:0c:ae:fd:be:6f:49:d9:40:
         89:a9:4a:08:98:6f:09:68:10:4c:93:7b:21:03:76:3b:02:ec:
         d0:d0:0e:4f:ae:be:2e:97:e2:0d:81:d8:e2:ee:55:75:c7:84:
         ac:d9:37:65:18:04:ce:87:96:c0:24:81:de:06:b0:c3:0a:95:
         ac:f9:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:08 2025 by rpki-client