Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/744855d6-094d-3999-bd07-93e7c2c41dcc.roa
File:                     744855d6-094d-3999-bd07-93e7c2c41dcc.roa (raw, json)
Hash identifier:          csJHh4q8A6cIyXVPxnJKCw8bHCahWOAa0rfv2SvlkNs=
Subject key identifier:   EC:09:D4:1A:6B:D8:1C:DA:1D:7D:B2:16:4A:D1:39:87:E0:E5:BA:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B35592293F9CEDDF1080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/744855d6-094d-3999-bd07-93e7c2c41dcc.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396549
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b3:55:92:29:3f:9c:ed:df:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=55e12b74-3bd7-40c2-815b-28e7b087e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:5a:9f:e2:c1:0e:e3:31:04:95:5e:20:4d:
                    75:2b:78:6d:8e:93:a6:44:df:a0:46:d7:27:c8:02:
                    d8:34:50:8b:66:01:70:dc:1d:ff:b6:6f:05:8c:82:
                    40:cb:e4:03:be:03:61:12:0c:f2:ba:af:b6:b0:c0:
                    00:b6:d0:00:a8:6b:04:52:c9:96:b1:36:b7:78:99:
                    23:d7:2c:61:c7:45:2c:4f:c7:57:6b:cf:33:88:7b:
                    90:90:53:cb:79:f6:43:80:61:45:df:71:c0:00:1e:
                    e3:43:ac:a8:d5:ad:f0:48:81:4f:1e:de:e1:ef:70:
                    fc:13:55:a9:5e:21:15:cf:c7:ea:ed:8f:19:c4:2a:
                    f9:df:11:c6:ed:10:c6:de:5f:0f:fa:70:8c:ea:70:
                    31:19:18:06:4a:9e:72:07:84:74:d4:bf:91:2a:49:
                    7d:5b:47:fe:db:68:70:35:ba:d1:6a:ac:a1:49:05:
                    13:ef:b8:b1:53:3d:84:36:d3:6e:b1:81:31:99:25:
                    a7:13:e7:9e:9e:33:80:df:b4:16:e6:7e:dc:a9:6a:
                    22:1a:76:cb:a8:26:bc:b7:22:c5:f3:71:dd:78:bd:
                    a5:73:0b:31:8c:cc:93:27:a4:b6:9c:dd:4d:46:52:
                    a7:2a:ad:ba:2d:d1:14:f1:02:33:79:1f:ac:c1:c0:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:D4:1A:6B:D8:1C:DA:1D:7D:B2:16:4A:D1:39:87:E0:E5:BA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/744855d6-094d-3999-bd07-93e7c2c41dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:44:68:3f:19:65:d5:61:02:e1:d2:e4:a3:8e:da:68:af:4a:
         d1:47:7f:e2:fe:1f:5a:c8:01:02:64:9c:27:f6:63:4b:c6:c8:
         d2:58:2f:20:d3:fe:60:4f:03:4c:e6:92:bc:38:2a:68:cf:b4:
         d4:b5:ce:79:3d:f2:c1:d2:66:68:59:59:77:9f:cd:17:11:02:
         e7:74:95:ce:71:e9:af:92:f9:fb:2b:ac:6f:6d:b5:5a:0b:17:
         ab:2d:cb:19:84:b1:ce:92:35:63:88:32:81:4b:66:eb:df:73:
         e9:ef:31:84:7c:b9:d3:e4:8f:03:df:b6:fb:fb:05:92:87:d1:
         28:d9:30:71:8f:a0:7a:69:e5:ec:93:06:34:6c:4b:3a:63:9e:
         c8:9e:8d:dc:87:f4:45:68:d1:58:94:74:45:0e:87:38:c0:e5:
         12:30:eb:66:17:3f:13:b6:fc:f6:ef:03:02:72:15:20:54:86:
         0b:1b:72:83:24:0b:c0:51:67:c1:05:76:d8:7a:9f:bd:2a:a7:
         8c:58:03:e7:65:cb:89:84:06:24:4f:19:7d:15:34:79:4e:b4:
         c9:b4:f1:68:9d:e6:d0:43:66:78:d9:3c:6e:a0:bf:c8:90:be:
         73:56:b5:90:8b:bb:36:28:e4:1f:de:c1:19:71:6b:7b:8d:ac:
         6e:94:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:19 2025 by rpki-client