Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/627920e7-7091-3b7e-acfe-b47d848c142e.roa
File:                     627920e7-7091-3b7e-acfe-b47d848c142e.roa (raw, json)
Hash identifier:          L0F826ay3scmp8lJNHNa5r9sDSmi0xRMALF120tDR8o=
Subject key identifier:   10:BA:4D:7D:3B:F4:D6:63:DC:0D:33:AF:A6:A5:89:59:43:C5:DB:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B0C0EE4284B6905C5982
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/627920e7-7091-3b7e-acfe-b47d848c142e.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     36625
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b0:c0:ee:42:84:b6:90:5c:59:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=64306374-10ea-4b45-9ac5-42b2ba8b7ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:58:37:a4:ae:7d:d3:2a:2c:27:0d:fb:02:
                    d4:a8:d4:d3:7e:1c:39:a1:6e:4e:1c:41:76:2a:d2:
                    3d:29:72:eb:94:01:f7:ec:db:40:a4:93:f9:41:21:
                    f2:a7:50:45:ba:76:95:20:52:7a:61:9c:83:2d:2e:
                    37:6e:f3:57:1d:b6:22:f8:e7:b9:20:de:9c:65:be:
                    5e:46:cc:fc:6f:3d:fb:ad:e2:22:b5:0f:9b:2c:44:
                    cf:e5:56:dd:e0:39:52:91:1e:9d:e3:3a:27:a7:07:
                    5a:f9:94:cd:ca:85:f4:97:3f:8a:42:d6:4f:5a:bf:
                    db:79:c2:37:42:a9:50:a3:06:8f:66:4a:68:78:0d:
                    cc:0b:52:49:d7:d9:a3:b4:52:0e:16:b4:c6:e2:98:
                    86:4b:5d:1e:7e:25:4c:eb:3f:b8:3b:fc:cb:f3:04:
                    15:c0:d0:b9:a8:a1:52:04:7a:9d:14:1b:cb:aa:9f:
                    46:8f:05:2e:43:28:c5:c4:50:db:88:2a:f9:44:47:
                    a2:3b:51:7a:f9:26:3a:14:90:fa:53:93:af:e1:19:
                    2e:99:d0:19:78:cb:c1:5b:25:35:aa:55:62:54:e6:
                    67:44:fb:65:c7:25:44:49:6c:30:5e:4e:31:b0:cd:
                    6f:17:1d:32:6b:85:5f:55:b9:9a:fb:27:35:4a:20:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BA:4D:7D:3B:F4:D6:63:DC:0D:33:AF:A6:A5:89:59:43:C5:DB:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/627920e7-7091-3b7e-acfe-b47d848c142e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:0c:c0:82:84:e5:75:52:43:1b:79:b5:7e:14:c0:e2:20:
         2f:01:6a:40:47:a3:8e:85:60:33:61:89:94:74:78:64:44:63:
         fa:de:50:e1:96:0e:8f:73:a1:c1:e7:8d:a9:bd:78:c2:eb:d1:
         e3:2a:23:00:b6:f5:fa:9e:aa:fc:39:5b:c9:e9:3b:6b:84:bb:
         37:e9:92:ed:58:26:17:b8:bb:23:d5:ff:c8:98:e6:2f:82:dd:
         ef:6d:db:8e:16:ba:b3:e3:d7:74:e4:0b:3e:a9:01:cb:54:aa:
         8a:6f:93:79:22:ec:aa:d2:a9:d6:39:45:91:9d:2e:5d:6b:71:
         c9:4b:ef:e3:45:fe:25:cb:dd:67:d2:66:e5:b1:a5:2a:52:e9:
         3e:37:11:3b:21:8f:ed:72:7c:4a:a3:af:19:88:d8:51:fd:dc:
         ea:66:bb:ae:2c:e0:36:29:c3:96:45:50:68:9c:0b:86:8f:cc:
         05:3e:16:7b:e3:76:62:8e:f3:2c:f3:57:28:8e:58:84:37:17:
         ce:bf:f1:9d:78:85:b7:36:01:f1:2b:a7:42:5d:a8:3d:c3:d7:
         f9:d1:35:7d:6e:7e:cd:de:45:86:c0:88:3a:90:24:b5:bc:3e:
         0c:65:c0:e8:ee:8c:f4:2c:50:f9:61:62:8f:5b:05:49:ab:2a:
         bc:fc:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:25 2025 by rpki-client