Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/717ccbdf-97c5-37f8-902d-52d1d0f9522b.roa
File:                     717ccbdf-97c5-37f8-902d-52d1d0f9522b.roa (raw, json)
Hash identifier:          6KkszdQVqpmyTOLSoZt/egjLWh/isOhwao7DSTp+9yI=
Subject key identifier:   3A:CF:FA:D5:36:7D:56:F9:1B:91:D6:7A:AB:FC:C6:19:48:F0:2A:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E7737E263A78EF8647F98F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/717ccbdf-97c5-37f8-902d-52d1d0f9522b.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     36618
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:37:e2:63:a7:8e:f8:64:7f:98:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=2c132afa-ef74-4351-a69e-0c894a72a7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:73:45:ad:1a:97:70:4f:fb:4a:3c:72:7e:
                    18:3a:47:ee:53:f6:63:3b:7a:df:73:c2:b9:68:3b:
                    bc:e8:bf:21:63:59:a7:25:25:95:5d:55:4f:48:e0:
                    ee:e3:cf:22:1f:1b:37:65:b1:3c:fa:c7:1f:6a:4d:
                    57:40:3a:2f:de:03:60:19:ec:5d:11:09:83:46:62:
                    ca:ab:e4:80:6e:bb:c2:f5:f6:8b:4a:61:db:32:f3:
                    ed:0c:91:f5:4d:43:bb:81:c5:78:23:d0:4b:16:4c:
                    04:ce:67:c4:eb:2f:13:f8:a1:cf:77:20:1c:9b:82:
                    c8:ae:e6:93:c3:5b:86:11:98:50:4d:3e:df:a6:34:
                    47:ff:e5:54:c9:a8:89:a9:80:8f:df:6d:7b:84:8e:
                    27:f8:52:32:eb:32:3e:0d:4f:90:17:9a:ee:c1:f7:
                    28:2c:fa:d9:72:8b:9d:a2:dd:8a:71:fe:22:38:f2:
                    20:76:41:7e:ca:a2:ee:49:bc:1b:ee:f6:b3:9f:fe:
                    23:88:e0:1f:55:3f:35:14:fc:12:75:5a:4c:69:f9:
                    8e:e7:8a:a0:0e:fd:7d:4c:3c:6e:2c:94:b7:23:15:
                    e6:e9:e7:3d:a1:41:28:0d:65:62:8c:92:48:f2:b6:
                    ae:8e:3a:36:39:b2:9e:c5:6b:ac:bc:fd:e7:d8:19:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CF:FA:D5:36:7D:56:F9:1B:91:D6:7A:AB:FC:C6:19:48:F0:2A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/717ccbdf-97c5-37f8-902d-52d1d0f9522b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:21:29:df:ac:be:16:61:e7:f0:da:15:d2:26:67:8f:04:81:
         5f:a6:47:ec:f2:ea:d5:c5:a8:84:1a:b5:3f:51:35:66:5a:49:
         82:e9:68:c2:da:86:0e:b0:49:cb:03:35:9c:10:a1:fc:04:11:
         ef:1a:74:bd:c1:bb:95:cb:bd:b3:71:cf:1f:6d:3d:ae:02:b0:
         0c:d8:33:89:ec:d6:d3:f6:5c:47:89:73:ef:c5:ad:5f:14:07:
         04:19:5e:72:3b:da:82:b0:dc:c0:67:d7:fd:16:2b:3d:bb:94:
         81:6b:39:1e:a2:a2:8e:a2:07:7a:ec:f4:e1:24:88:fa:c7:92:
         24:7c:52:1b:b1:93:c0:f9:3e:dd:64:84:e6:eb:ed:d7:4e:22:
         33:36:cb:fb:e0:c3:24:87:27:5a:24:85:26:da:14:24:53:42:
         07:14:f7:6b:b3:c6:b2:83:a1:20:d6:41:c8:0e:18:81:cb:0e:
         ce:19:20:67:4e:b8:c1:f6:50:35:bf:3d:81:83:fb:05:49:c3:
         af:24:d7:71:2e:8d:0b:85:95:4a:ae:f1:b5:57:b7:2d:ec:9c:
         25:93:fb:50:ac:a4:45:71:4f:f5:b0:69:8e:12:bc:b7:b7:b9:
         01:37:45:17:e0:ee:0f:2c:4d:71:eb:99:8d:d4:bf:41:39:b4:
         31:0b:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:44 2025 by rpki-client