Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c09921b-295f-3a08-9b59-1d8282ff69c1.roa
File:                     5c09921b-295f-3a08-9b59-1d8282ff69c1.roa (raw, json)
Hash identifier:          wsnNa2zfVTYFXicyeM12UnM7Y5ATO7UmRX0lNQcewHQ=
Subject key identifier:   D7:6A:E3:A4:90:FE:AE:36:D8:1D:AC:9A:80:C6:67:76:6C:69:ED:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0DBDEA1010848EB56980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c09921b-295f-3a08-9b59-1d8282ff69c1.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396585
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0d:bd:ea:10:10:84:8e:b5:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=c0f536b5-7cdd-41c5-a6af-e54223565e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2b:8e:9c:f5:ba:84:e3:30:0f:bf:57:95:b9:
                    96:20:a3:f5:d8:01:1d:93:00:81:56:6a:be:b4:0f:
                    97:57:a6:e3:01:73:3e:1a:08:4b:e3:0b:83:dd:c3:
                    3e:99:73:20:7a:d3:8b:66:52:9e:bb:30:f3:da:e6:
                    f9:d7:8b:fb:ac:a8:ec:d2:fa:35:75:d7:42:2a:3d:
                    1e:98:50:ab:4f:2b:26:c9:cc:30:dd:36:ec:83:83:
                    85:6a:63:7a:57:7c:e5:7f:1c:03:4c:78:b5:60:13:
                    b8:87:2f:ca:74:f3:5d:41:70:79:c6:64:00:ae:f1:
                    64:6b:28:b4:89:ec:2a:17:b8:aa:57:7c:06:e6:91:
                    dc:cc:bf:87:4f:43:13:d0:c3:6f:35:62:c5:90:2f:
                    0a:69:99:6c:49:7a:15:3b:7e:bc:5c:ae:f1:87:22:
                    c9:e6:0e:02:b4:32:f3:37:92:b9:22:5e:92:f7:02:
                    76:cc:49:8d:8a:7b:9b:b0:f6:60:5a:85:fa:29:11:
                    25:3b:46:e8:fd:a4:07:34:29:90:55:a5:24:e2:42:
                    2b:b1:e3:8a:a0:56:52:d9:b3:8e:cb:56:e6:d2:94:
                    9c:4f:10:da:57:b6:d8:63:c5:6b:d3:d7:7d:08:63:
                    32:ff:fe:ea:f0:aa:2b:0d:50:7b:83:1b:8f:36:67:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:E3:A4:90:FE:AE:36:D8:1D:AC:9A:80:C6:67:76:6C:69:ED:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c09921b-295f-3a08-9b59-1d8282ff69c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:df:81:bf:c1:e5:53:c8:46:52:65:51:0f:1a:fd:46:a3:fc:
         f9:25:90:35:9a:58:b7:50:ad:9a:bf:99:4e:12:ce:68:b2:68:
         4f:6c:eb:44:cd:0f:80:11:0e:13:d5:a1:a4:ca:ff:4e:eb:af:
         50:b1:72:65:24:7c:bf:39:bd:10:05:dd:f4:1c:4f:e9:3d:6d:
         2a:7e:3c:c8:f4:c3:a1:ac:23:e2:1d:5f:50:4b:f8:ec:8c:32:
         08:f7:bf:d0:57:60:2f:59:64:cc:f5:2c:d6:22:27:ec:21:b3:
         1e:8b:55:fc:7a:20:44:f4:62:9e:f0:bd:fe:f2:77:3b:29:4c:
         96:09:fe:16:3a:ee:dc:23:18:30:1a:44:52:bd:c5:72:58:cd:
         2c:41:27:58:d4:7f:67:4f:91:0f:48:6b:74:11:f5:ee:a9:22:
         7f:f4:a2:3a:de:62:5d:d5:c9:b7:05:df:84:55:58:15:41:f8:
         bf:3a:3f:7f:8d:0a:02:d2:00:11:9c:e2:cb:92:ed:b4:d0:97:
         34:ac:4b:42:94:32:53:d4:e6:c7:2c:b1:72:3e:7b:0d:45:52:
         13:71:34:89:c7:7d:e1:ef:f5:aa:22:5e:3e:86:96:9b:d8:ad:
         a2:88:31:b5:31:55:79:65:f9:20:62:d9:51:6f:0d:70:13:e7:
         14:c3:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:56:38 2025 by rpki-client