Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa
File:                     699ee14e-2e16-355d-832f-5e515173ef61.roa (raw, json)
Hash identifier:          BCABJIHIzZyiPwga9Q3KJB/ptOhuG05Y97X0cUvLpwM=
Subject key identifier:   21:14:05:51:35:82:61:AD:FE:DB:93:60:AB:9A:FC:BE:F4:7D:8F:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB1766112CFA2386260C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     396564
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:17:66:11:2c:fa:23:86:26:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=47783a55-a8ea-4169-9c46-060881e6a8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:56:98:e4:de:22:7f:09:20:94:48:58:61:
                    1d:87:d5:6d:7b:22:35:e2:ba:b6:f5:1c:fd:74:39:
                    e3:13:a4:72:6d:b1:41:3d:87:68:b5:d4:48:7f:7a:
                    80:26:89:55:9a:c5:f1:07:ca:a8:f8:e6:57:8d:f4:
                    dd:d7:cd:68:4c:a9:ab:33:98:3f:7d:a8:08:c4:eb:
                    b0:be:24:b1:ec:c3:5e:8c:5a:f7:46:49:29:f6:df:
                    df:6b:d1:51:37:ce:8d:04:6c:73:11:a8:94:55:f0:
                    77:65:25:65:39:58:f0:02:33:66:2b:ce:c4:3c:f9:
                    83:0f:7d:34:2f:86:3d:3d:e7:d8:15:c5:c1:e2:3c:
                    ad:bc:d5:18:87:3e:08:1c:de:89:ae:bb:58:2b:92:
                    c7:06:be:80:b3:73:f4:85:67:bf:90:9a:e7:49:71:
                    ad:a1:81:ae:21:d9:03:6e:bd:cf:a6:e6:e6:54:22:
                    38:1e:4b:32:6d:1b:6b:91:48:87:04:07:5b:20:9d:
                    c0:b5:77:c1:f9:79:e5:2e:4f:a8:c5:41:9d:16:3d:
                    0c:88:4d:cf:9f:9e:ff:4d:3f:d5:2e:c1:19:54:f9:
                    aa:0f:aa:a6:ed:a8:24:80:ec:e2:37:e9:d0:63:f7:
                    34:d0:26:6f:69:87:e0:59:d4:f9:18:1d:b1:17:ba:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:14:05:51:35:82:61:AD:FE:DB:93:60:AB:9A:FC:BE:F4:7D:8F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/699ee14e-2e16-355d-832f-5e515173ef61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3b:94:36:e3:0c:31:33:db:68:3a:e6:9d:01:11:ca:d5:7f:
         3a:a1:46:40:50:87:25:02:21:14:f8:7a:66:dc:cf:a5:14:31:
         8c:48:c7:14:b4:e8:86:dd:ab:19:a4:a5:3c:11:d1:8a:cc:e1:
         40:93:72:db:08:28:46:fa:6f:48:60:61:0a:5d:dd:93:50:30:
         ed:55:3b:79:f4:5b:0f:a2:5f:bd:ab:ae:26:e5:b3:42:4c:ae:
         fe:00:88:ed:7c:00:a5:d1:64:ef:75:6a:d2:0b:f1:21:1c:45:
         71:ac:92:a0:84:ee:e6:89:93:8d:8f:74:ab:e5:53:8c:cc:dc:
         6d:00:8a:9a:ba:ad:45:8f:00:e5:1a:1d:67:da:ce:32:3a:90:
         d9:f3:ea:f7:75:43:d0:7c:7b:40:55:93:8d:5d:a1:79:79:0e:
         90:53:3e:4c:d5:31:6d:5c:91:cf:fd:72:20:e1:b6:7c:20:31:
         7b:63:17:4e:2b:3f:6f:4c:e3:01:e1:2e:7d:d4:a1:56:8a:3a:
         11:95:2f:73:bc:23:a2:d4:97:4a:65:dd:18:f1:27:bb:5c:c4:
         3f:ca:81:e3:8f:09:66:7f:67:1b:e7:40:c9:7e:8b:23:8d:d8:
         7b:3d:af:3d:af:57:78:47:2e:e4:e6:b1:4e:dd:f3:bb:27:58:
         4a:75:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:49:18 2025 by rpki-client