Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/644aecf9-fdf7-377c-a087-9e4b6c05544a.roa
File:                     644aecf9-fdf7-377c-a087-9e4b6c05544a.roa (raw, json)
Hash identifier:          pYNdTPA+uzTW09DUhDTlMDSeew65y6rDUviJA/eh83U=
Subject key identifier:   26:20:D0:C9:60:68:D8:14:10:50:29:44:2B:90:DC:8F:4A:00:3B:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EC6544D6273E070F2600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/644aecf9-fdf7-377c-a087-9e4b6c05544a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36620
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ec:65:44:d6:27:3e:07:0f:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f1fc3452-b314-4741-85e8-1c755a7c02a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:ec:c3:17:03:0a:22:43:6d:77:97:4d:44:
                    fb:c5:f6:69:64:db:86:93:29:e4:f2:d1:4b:69:b6:
                    9b:88:1e:ae:b1:1a:f5:40:d3:86:50:9a:ec:25:a5:
                    c9:10:e7:51:b9:05:65:3e:42:ec:0e:d3:6e:bb:a9:
                    78:52:f8:51:d3:c9:91:d2:86:3e:6c:60:f0:6c:93:
                    68:07:8c:fb:20:e5:85:82:d5:0a:fb:7d:ff:df:d6:
                    00:9b:cb:17:2b:5a:17:03:a4:c0:00:a6:d9:97:56:
                    40:4b:ec:b2:04:94:42:9b:d5:56:97:fb:90:4e:50:
                    1d:de:23:65:7d:fe:cf:e6:23:52:cf:45:dd:6c:31:
                    32:aa:c8:10:19:bd:17:2c:9f:ae:8c:52:06:77:6f:
                    d5:b1:a1:5f:a9:46:f1:9f:3c:90:55:44:47:dc:6f:
                    52:ba:71:8c:0c:86:1e:6f:e9:4b:7d:d7:27:05:1d:
                    94:fb:fa:52:68:a6:d0:5d:a9:96:13:42:6e:fd:10:
                    5e:c4:de:5b:ad:52:c9:74:e0:d9:3a:4e:dc:f0:ec:
                    9e:c0:56:6d:60:44:7a:7e:66:c1:cb:d9:ae:47:5c:
                    3d:7b:77:46:7b:d1:0c:05:b4:f7:a6:e5:ad:c9:ee:
                    e6:a7:55:fb:aa:5c:e5:1d:df:43:7e:e3:cb:c4:12:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:D0:C9:60:68:D8:14:10:50:29:44:2B:90:DC:8F:4A:00:3B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/644aecf9-fdf7-377c-a087-9e4b6c05544a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:34:84:45:97:d4:25:5a:45:79:b2:bf:54:40:d9:68:02:ad:
         58:c2:bb:26:cb:d0:1f:0a:8f:2a:2a:e9:6f:94:8a:c6:29:2c:
         8d:be:70:91:4a:1c:d3:07:2d:67:a9:a5:6d:7f:8d:33:32:48:
         8c:1d:b9:0f:e0:7c:02:d9:40:8c:9b:3d:b0:60:3f:a8:3d:c8:
         69:d2:5e:df:8e:9b:d0:68:07:f4:06:27:91:93:3f:01:72:9a:
         9c:f7:9b:eb:13:44:ce:f3:0e:4e:1d:c2:f9:c1:08:ef:a2:ba:
         61:13:d0:b2:f5:de:29:32:52:d6:5e:8e:fe:42:39:60:34:54:
         3a:3c:2b:41:74:ac:f3:2b:95:5e:73:7c:63:d0:21:5f:5a:a3:
         2a:cf:90:46:eb:3a:2b:cd:86:d8:0b:92:ce:bf:87:a0:f8:13:
         f8:57:3f:01:98:4b:64:b2:8a:59:26:67:16:bc:33:f0:14:97:
         43:84:39:21:c5:40:97:af:09:d6:45:cd:19:af:7f:2e:72:b2:
         f3:e8:da:e3:a0:98:99:b3:8f:ec:62:a9:15:54:ae:ee:02:aa:
         24:b2:fb:b3:b0:ba:b5:cd:ab:8e:d3:11:33:9f:e8:f2:47:1c:
         d8:e9:d4:0e:46:9e:15:53:ed:73:b9:06:30:fa:d8:a2:5a:a7:
         5b:bc:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:42 2025 by rpki-client