Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67d19063-de1f-37c2-8741-a2a9b85d7735.roa
File:                     67d19063-de1f-37c2-8741-a2a9b85d7735.roa (raw, json)
Hash identifier:          uh3tVpZii1wAaLkdFi7k6xalATYQ6/KQCLiGGBjXmkA=
Subject key identifier:   6D:32:E2:EA:44:6E:72:C9:C1:23:AE:93:EE:F3:EC:8E:FD:C9:41:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1AC555CD0E2415580D3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67d19063-de1f-37c2-8741-a2a9b85d7735.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396581
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ac:55:5c:d0:e2:41:55:80:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=b0f2db67-5ef4-4b3d-89f5-f72f1e77d1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:a9:67:01:08:33:a6:f4:ee:40:18:54:13:
                    e2:a0:e7:50:3d:f2:b6:c7:b0:23:51:36:0a:64:5f:
                    c0:ab:ee:6e:c5:06:39:93:d8:6e:2e:6f:7e:bc:82:
                    dc:91:35:76:c8:52:21:1e:35:a8:21:7f:ba:d9:cf:
                    cf:5c:0c:c7:4a:2f:fc:61:d0:d2:9d:ab:f4:6a:55:
                    88:34:d8:d3:3f:57:60:1a:f7:dd:0c:53:7e:84:86:
                    ec:4d:6d:49:09:0f:47:42:64:c3:cf:f0:87:a8:b1:
                    d7:42:6c:16:75:b2:90:51:1d:63:5d:b8:30:72:c5:
                    de:29:ff:ba:93:3c:4d:8b:e7:88:08:e0:86:83:07:
                    9f:7d:b2:3d:d3:9e:27:ca:0d:21:7a:d6:21:72:a4:
                    c3:fb:a2:ee:78:d3:ea:b5:82:d0:37:8a:d3:a1:50:
                    61:22:eb:c8:ed:4d:0b:ca:c3:a6:35:6d:da:4f:95:
                    86:03:09:15:8b:ef:81:90:68:b6:de:9c:02:28:46:
                    c8:ac:e5:9e:39:fb:c8:b3:8c:4e:aa:02:e8:3d:22:
                    61:f4:8f:3c:1c:36:20:e1:6b:a7:14:de:d9:dd:2d:
                    4e:ee:47:e3:48:05:67:e4:21:cf:7d:3d:bd:79:a9:
                    ef:cb:86:8a:e2:3f:8e:72:f8:f4:3c:fe:1d:ca:ac:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:32:E2:EA:44:6E:72:C9:C1:23:AE:93:EE:F3:EC:8E:FD:C9:41:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67d19063-de1f-37c2-8741-a2a9b85d7735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:54:19:19:09:27:5d:90:f2:52:c5:64:a3:52:1a:1d:56:
         6a:bf:18:20:bf:61:30:1f:4a:c6:61:ba:19:45:f1:3d:da:52:
         3e:46:45:fa:e3:e9:00:6a:08:03:42:46:fb:aa:88:b9:e9:0b:
         0b:9f:c6:a6:b9:f3:ef:d9:96:81:20:13:44:8d:2d:80:83:a2:
         18:f3:6f:a6:d9:31:91:3c:46:1b:71:f9:f5:68:4e:fc:ee:71:
         4b:cc:9f:ee:da:f1:85:43:0a:97:10:f5:ee:44:e3:bf:2a:68:
         08:8d:7c:df:a5:31:db:bd:43:84:7a:3a:97:cc:fd:a0:e1:48:
         91:ad:e6:aa:97:c7:8c:a8:e1:7d:0f:7b:47:c5:91:6d:9f:7d:
         1b:d2:74:33:6d:c6:bc:c7:33:0a:73:40:fa:f5:a8:11:13:9d:
         1d:26:3d:6a:cf:c0:9f:05:07:2a:da:29:fa:85:ec:87:ae:6a:
         6e:3c:ea:dc:ac:ab:ae:b8:48:0c:52:45:e7:65:2d:e9:b2:fb:
         4c:50:0d:f8:15:85:3f:05:14:e1:08:62:f5:ad:96:17:c0:82:
         52:cb:42:68:c3:ba:c6:d3:9a:61:3d:7a:72:b2:c8:17:e8:8e:
         d2:4c:4e:e7:80:8d:77:ab:20:22:75:d6:23:3d:0b:b3:88:97:
         33:06:a8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:41 2025 by rpki-client