Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c110a72-f771-3048-9189-1a5fc4d797b9.roa
File:                     6c110a72-f771-3048-9189-1a5fc4d797b9.roa (raw, json)
Hash identifier:          BitPYTDk6fB/poEbTQ3mRu5bfXFzCVHQ8qj4SwYHb38=
Subject key identifier:   CB:20:66:F6:E0:D7:7B:26:83:22:CA:B6:25:A1:77:64:BB:C2:77:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B99C329F95DE02AD02ED0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c110a72-f771-3048-9189-1a5fc4d797b9.roa
Signing time:             Wed 20 Aug 2025 14:37:00 +0000
ROA not before:           Wed 20 Aug 2025 14:37:00 +0000
ROA not after:            Tue 18 Nov 2025 15:37:00 +0000
asID:                     396563
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:99:c3:29:f9:5d:e0:2a:d0:2e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:00 2025 GMT
            Not After : Nov 18 15:37:00 2025 GMT
        Subject: CN=9a019a3f-2cd8-4db7-9e17-917cbdc78238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:10:4c:ed:05:d0:f9:c6:e2:22:8f:6a:56:
                    47:74:dd:cc:9c:2e:3a:95:8f:e3:2b:a0:60:86:cb:
                    b0:c1:8c:fe:52:f1:9d:af:66:7f:4f:1b:19:71:62:
                    98:73:b1:a0:f9:cc:93:fc:8b:01:ad:c2:99:eb:5c:
                    23:22:85:97:ef:57:09:53:b7:63:a3:2e:a4:af:74:
                    71:97:7c:16:05:98:4f:1a:ac:ba:94:e7:41:a7:46:
                    cb:20:c9:64:a0:51:97:8e:b8:3a:05:ee:25:e4:58:
                    21:1c:c8:4e:5b:66:3f:ec:4f:da:b4:12:89:5c:01:
                    e8:27:f9:68:36:a9:2a:6e:c0:2a:10:4c:28:11:0d:
                    0c:aa:5c:5a:43:f3:6b:1b:45:f7:7c:01:84:d2:0e:
                    ab:ba:c5:9b:36:04:0c:25:ef:fd:60:1f:50:b2:89:
                    a4:c4:73:57:e8:78:bf:cc:88:9b:ec:7d:10:93:8f:
                    91:83:f6:a7:25:86:8f:6b:56:1e:03:d1:b0:1e:9b:
                    c3:83:a8:71:5f:ca:7b:5e:4c:b8:a8:a4:3b:3d:49:
                    ca:1b:ad:ca:f0:99:d5:4a:62:a1:13:ec:03:4c:b8:
                    79:99:d9:ee:70:c5:8e:27:7e:31:95:08:6c:b6:e5:
                    85:20:36:fe:53:c9:3f:f3:41:17:6f:da:1b:24:f4:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:20:66:F6:E0:D7:7B:26:83:22:CA:B6:25:A1:77:64:BB:C2:77:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c110a72-f771-3048-9189-1a5fc4d797b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:56:6f:e8:93:a9:44:60:05:f3:30:f7:c9:43:7f:2f:4d:
         f9:9a:3b:7e:8f:b3:99:7e:41:45:ba:d3:24:0c:20:14:15:42:
         a0:0c:9d:af:8c:31:8f:0b:e4:d2:5d:db:a7:88:91:24:90:1d:
         d3:7e:b9:18:49:0e:f2:c3:d4:94:51:16:18:9d:a7:c8:14:ac:
         45:7d:3c:11:6e:ac:d0:47:11:ac:4c:57:d2:ba:61:77:13:12:
         7e:43:02:97:5d:51:5e:32:83:bb:8b:7a:f6:2f:69:1d:0f:e0:
         84:f2:51:36:62:64:0a:31:a7:0b:fb:63:18:32:48:5d:a2:6b:
         b7:96:21:b1:1c:f0:3b:02:8c:b6:8d:15:cf:15:a0:c5:e0:4d:
         04:b3:e9:9e:18:de:6e:28:59:10:68:a2:52:4c:b2:2c:b2:72:
         76:8f:68:95:6e:93:d1:e4:82:ea:df:95:ae:b0:91:e5:71:14:
         54:72:92:fd:31:ad:3f:2a:a6:22:b1:d3:a6:d6:2e:86:84:33:
         98:10:3b:62:b4:d3:19:ef:42:00:4b:81:9a:93:74:f7:79:8d:
         64:d9:24:50:7e:47:eb:64:60:76:61:61:b8:bf:f7:41:0f:60:
         45:56:18:6b:61:fe:27:f8:d5:2b:f1:d7:36:0b:b1:84:8b:3e:
         47:9c:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:31 2025 by rpki-client