Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
File:                     60db1c24-6a73-3330-bf67-63ba94c1beeb.roa (raw, json)
Hash identifier:          SZHkIAc/8tiEsD5C2bYzpmzan/4g+HPp+1MkRRS60eQ=
Subject key identifier:   6F:FE:77:26:8C:13:DD:76:95:0A:B7:08:FC:03:38:0E:B3:B6:B0:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3987104AEC5AAC74FF826480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396600
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:10:4a:ec:5a:ac:74:ff:82:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=d422a024-d2e0-44ae-9d05-16df0b5d30b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:87:f3:d2:57:ee:ac:2a:be:70:7f:77:8c:
                    a0:c3:60:b7:e7:43:d8:62:3f:ea:e4:ae:27:60:2c:
                    b8:03:f8:b4:21:bf:75:b6:a7:e3:19:2f:50:ca:66:
                    c8:11:5c:25:75:8e:a9:64:cd:f3:bf:e1:ff:c6:41:
                    8b:0b:4a:ea:b7:8d:ad:d4:0e:9f:f2:d5:9f:06:54:
                    a5:c8:f7:b7:d0:c2:46:7c:f0:f3:8b:0a:e4:46:b8:
                    7e:89:12:af:74:43:03:67:76:f1:7f:b1:70:ad:a4:
                    24:17:1b:a9:43:aa:8e:b2:3b:8a:4a:5d:ce:33:72:
                    43:82:9b:56:e9:33:25:05:a7:9e:65:75:64:da:15:
                    bb:25:c2:e8:14:27:5e:2b:bf:c8:45:0c:b1:d0:07:
                    ae:7f:59:01:9c:02:5c:57:cf:cb:83:fe:73:a4:fd:
                    9b:09:d9:e5:31:b7:a1:f4:b1:e4:bb:b7:5a:2d:a5:
                    54:d6:30:fc:7f:a5:86:14:f8:54:c5:b0:11:1c:2c:
                    ac:ed:58:26:20:91:b2:f6:e9:f1:e4:60:8d:8f:7c:
                    4a:80:fb:b0:d5:36:a7:24:0b:49:b7:fa:f7:01:de:
                    2f:7d:f7:b5:20:5a:42:37:45:2b:a8:39:32:39:97:
                    ee:f3:69:fe:9a:ee:f2:76:d6:7f:a5:8c:7f:51:0a:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:77:26:8C:13:DD:76:95:0A:B7:08:FC:03:38:0E:B3:B6:B0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:60:97:72:99:8a:9f:8d:72:23:50:6b:e1:b6:d4:82:84:5b:
         24:df:a1:93:f8:33:0f:f9:e7:34:70:83:20:8d:67:9d:1a:d2:
         fb:87:80:86:57:ec:40:1b:9d:07:91:bd:31:cf:53:15:eb:ed:
         d1:d4:90:6e:b4:57:82:4f:a3:4f:ae:24:94:7f:d2:1f:61:2a:
         67:a7:5d:65:04:86:71:4d:07:64:17:27:74:f8:41:df:40:08:
         36:37:ec:c7:01:5d:b4:ee:38:05:a6:cb:a3:dd:3f:ff:4b:19:
         9f:9a:01:34:8c:64:2e:bf:55:11:94:10:36:6a:03:36:5f:26:
         e0:57:3e:e7:99:fd:f8:2a:f2:d3:3a:76:b2:e7:95:d5:f9:06:
         d1:6f:b3:4c:e6:1d:12:8c:75:69:93:89:5b:62:75:4e:4a:78:
         b1:f1:66:be:19:a5:4b:ed:0f:d4:d7:ec:5e:35:41:39:52:de:
         76:fc:42:ca:f2:fb:dc:09:5c:76:82:2c:9f:31:3e:f5:f8:5e:
         45:91:43:39:7c:79:12:50:3f:bd:72:af:b4:71:f4:0e:dc:48:
         1b:f9:09:36:77:27:34:60:6c:b2:e3:50:4c:d5:82:a3:bd:df:
         79:f8:ff:fa:7a:77:ba:12:99:69:b1:34:d1:03:53:d7:98:ce:
         b9:6a:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:47:05 2025 by rpki-client