Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f7877af-d974-3fb6-9ae2-f27afd063d35.roa
File:                     6f7877af-d974-3fb6-9ae2-f27afd063d35.roa (raw, json)
Hash identifier:          I9RP3L6zPJ7GOcs5p+b/me7wkkgDIi0gSi1i4lhlRfo=
Subject key identifier:   D8:4B:C4:F1:42:82:53:1D:B9:68:5D:65:78:B4:66:5A:EC:E8:B5:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC589B4020281E2F337ECA8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f7877af-d974-3fb6-9ae2-f27afd063d35.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     36630
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:89:b4:02:02:81:e2:f3:37:ec:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=401451db-2318-4ae6-b495-14a971edb7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:d7:57:53:8f:13:4e:f1:b6:5d:1a:c5:26:
                    92:e4:82:72:d3:14:4d:d2:a7:2b:ef:c9:0c:8c:c4:
                    ab:ca:06:85:cb:cf:71:97:e7:79:f9:61:36:69:fd:
                    d0:1c:ed:4f:14:d5:21:bf:13:8d:04:12:cc:6a:8f:
                    00:81:3b:45:ff:62:da:6a:6b:ec:6b:6e:dc:06:cf:
                    0d:4a:7e:5f:eb:45:ed:46:ea:c0:a7:e0:06:77:e3:
                    f3:58:86:1c:e5:f2:04:3f:45:d6:51:fd:24:6b:7a:
                    6f:46:7a:f7:2b:6f:39:93:b8:77:88:54:0e:41:58:
                    35:f4:c3:6d:fe:4b:9d:31:cd:ab:5e:4b:51:1a:2b:
                    15:0a:19:f3:34:ed:77:52:e0:04:c6:3a:96:10:c2:
                    c6:04:8d:69:ee:ac:e4:f8:17:91:95:3c:bb:c1:f9:
                    17:5d:53:ad:bc:c0:86:16:63:f2:ad:6c:aa:b6:6b:
                    b7:dd:1f:89:a8:40:6f:8e:bd:c2:82:e9:9d:9e:d0:
                    8c:32:48:a4:d6:94:01:23:27:0b:65:26:53:16:67:
                    d1:29:b0:d2:f1:fb:8a:75:71:b3:35:80:b4:93:27:
                    bb:b6:75:a0:ca:29:7b:25:88:bf:8e:57:f9:a3:89:
                    fd:20:9d:6a:2a:f7:41:bb:cb:eb:a6:54:21:8e:86:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4B:C4:F1:42:82:53:1D:B9:68:5D:65:78:B4:66:5A:EC:E8:B5:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f7877af-d974-3fb6-9ae2-f27afd063d35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:0f:dc:57:e5:95:ec:6a:6d:f4:ef:e2:76:5c:29:e1:43:
         00:9b:31:c0:4a:51:bc:b5:87:d9:92:77:85:d0:87:ba:c9:3b:
         dc:7c:00:cd:1e:fa:17:a8:1a:80:a0:82:c7:64:3d:1e:26:3a:
         32:29:1e:d0:0a:d6:3e:d7:f0:2b:4f:37:55:77:e8:77:f3:7d:
         b1:e1:42:77:59:03:a9:ae:71:fd:98:66:0e:8b:a9:4b:39:93:
         a9:55:53:36:a8:41:5a:f8:77:f4:1e:7c:65:1a:2c:04:5e:ce:
         5a:24:97:a3:ec:01:19:0a:5b:ed:87:0c:16:5c:91:82:b4:41:
         e6:8d:7a:d4:cb:1c:13:4b:a4:fc:77:f5:ba:ea:0e:a0:3b:fc:
         21:39:be:58:2f:f6:c3:27:65:d2:eb:fb:d3:62:be:5a:59:89:
         9a:2c:d1:0c:c6:25:d2:b0:19:e6:80:e3:a4:5e:96:0d:81:bd:
         87:3c:d1:24:76:08:30:d3:ee:51:96:15:c0:36:05:20:e3:61:
         b3:f3:1b:55:7d:b0:dd:95:a4:f5:3c:91:7b:1e:ec:9d:8d:46:
         42:a4:1b:be:0a:a2:6c:15:35:1c:2e:a3:e0:c0:d6:e4:f2:12:
         60:67:f5:a8:12:a1:52:ae:25:ac:33:37:52:ac:7d:ac:ad:e6:
         18:d5:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:57 2025 by rpki-client