Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e746390-e6ca-395b-9916-25487e2dc3bc.roa
File:                     6e746390-e6ca-395b-9916-25487e2dc3bc.roa (raw, json)
Hash identifier:          Ol9VhtnMWY5m6SgLbyBN3sb8rTwLxJBnCLYQSGNIQYg=
Subject key identifier:   29:88:DC:BF:13:AB:B8:9E:9E:24:B8:93:06:7C:73:8C:A7:1C:7E:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E77333E20A408D59E74A600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e746390-e6ca-395b-9916-25487e2dc3bc.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396577
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:33:3e:20:a4:08:d5:9e:74:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=f870decd-ca28-4fd2-a06f-8d52dd305c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:35:50:7a:01:22:e1:ce:f2:8f:99:13:ca:41:
                    25:cf:36:42:ae:95:5e:90:ec:af:80:48:d9:a3:ff:
                    6e:40:04:71:0f:90:c6:2b:ec:7d:33:54:c1:6d:c4:
                    1b:38:fb:23:e9:fb:3d:41:62:61:f4:80:f1:f8:e3:
                    96:de:02:c3:41:ac:16:a8:da:64:af:a7:e2:6c:40:
                    63:22:bc:3e:92:e8:1c:41:7a:60:38:4d:9a:fa:b5:
                    88:20:2e:d8:bc:c8:6d:d9:55:c3:dc:a2:df:f4:87:
                    34:9e:ea:fa:b3:37:10:8c:82:d8:83:55:2a:c7:cf:
                    fd:62:d7:c1:c7:34:0e:8f:c5:71:1a:63:ab:27:a6:
                    ad:eb:3b:be:b0:a1:0c:6f:e5:fb:3f:88:ae:cc:1a:
                    cd:2d:bb:c4:13:a1:2c:45:37:30:1a:92:c8:ae:61:
                    d6:7f:a0:16:89:f7:52:13:73:32:7d:9c:e0:90:7c:
                    3a:66:13:54:21:04:15:73:7a:ca:fd:e0:55:06:25:
                    89:13:96:19:f5:21:8b:1b:a6:e3:06:ac:28:52:cc:
                    d8:9e:b0:d9:ea:4a:a6:0b:8c:be:5c:ad:96:ba:6b:
                    72:64:1a:e0:b4:ff:83:77:eb:3e:29:6a:dc:d8:39:
                    03:e0:bf:d7:af:0f:8e:15:aa:d4:5f:f5:6e:15:09:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:DC:BF:13:AB:B8:9E:9E:24:B8:93:06:7C:73:8C:A7:1C:7E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e746390-e6ca-395b-9916-25487e2dc3bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:3a:a5:63:59:84:14:e8:b2:a2:79:e1:ef:61:8c:ce:ed:
         e2:a1:06:ee:b2:38:aa:9e:cb:82:2e:77:ef:48:b8:35:43:2f:
         dc:24:22:e9:af:da:d3:3c:6d:cd:c1:75:28:ef:1b:3e:ca:74:
         b0:53:84:37:0b:26:7e:bf:85:e3:7a:36:16:b9:3e:a9:30:fb:
         9d:d6:b2:89:96:6d:ba:3f:26:f6:7e:9a:94:a9:96:68:a2:35:
         bc:c1:28:bf:a3:54:f2:64:fd:59:19:d8:4f:99:5c:5a:fe:87:
         7a:d7:d8:38:28:63:c3:f9:f6:5b:7a:a6:b9:01:b8:82:81:93:
         0b:37:b0:45:43:4c:e0:f9:77:e7:a0:07:f4:06:e7:01:4a:cb:
         3a:55:ac:89:51:6b:43:80:bf:50:11:09:39:d9:81:7d:46:e2:
         38:56:fe:11:9b:c3:08:ba:46:04:88:6d:69:b3:ab:8c:81:63:
         99:73:45:bb:ec:4b:bb:a3:b7:8a:85:e0:64:37:15:87:fb:48:
         22:f0:94:96:b3:3a:bf:d3:d7:09:88:6f:57:3e:21:8f:f3:80:
         65:10:df:c1:9c:7f:93:b7:80:27:14:d8:e0:1e:08:56:84:58:
         61:30:77:b4:35:17:8c:02:5a:15:01:e9:a9:8c:2f:c7:3b:74:
         1c:5f:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:19 2025 by rpki-client