Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7473012e-981f-378b-a02b-938abc911851.roa
File:                     7473012e-981f-378b-a02b-938abc911851.roa (raw, json)
Hash identifier:          pgXT2Htu7ydnK8nD8/K6p9vPJmpVW8NpxFmX8tMaDGw=
Subject key identifier:   25:B5:9B:F7:68:83:04:7F:52:EC:D2:3E:D8:AB:2D:C3:67:1B:28:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39871356FD5797F0A74A4A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7473012e-981f-378b-a02b-938abc911851.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396613
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:13:56:fd:57:97:f0:a7:4a:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=21dcb77c-2da0-4ec4-aef5-bd4eac4218f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:09:f2:46:55:85:48:fc:36:c7:cf:df:cf:
                    59:5a:78:1d:60:fc:df:9e:a1:32:b7:5d:0a:29:68:
                    85:17:8f:1e:05:72:e2:b4:3a:bc:38:53:7d:6c:f0:
                    d9:7b:5c:7e:56:55:54:de:6e:c1:26:b5:3e:ce:06:
                    06:ec:b8:47:77:85:c5:b9:b6:43:54:c0:15:a9:b0:
                    2e:3d:7d:d4:f1:5e:a6:9f:90:4e:14:0c:8e:e9:8c:
                    04:03:c4:10:43:c2:92:03:75:eb:36:43:72:a0:62:
                    8c:35:4c:79:f0:9a:8b:9f:97:b9:18:40:9a:d3:d2:
                    b7:73:50:c5:d0:fe:da:25:c4:5b:12:b5:29:71:b0:
                    fd:c0:32:8c:62:af:30:e7:cc:fe:b0:2c:02:ab:08:
                    a8:e9:41:01:68:67:d7:7c:20:f0:09:a4:e9:de:a2:
                    a4:e3:e4:6d:f3:67:71:3f:52:42:98:ec:ba:8b:11:
                    60:56:58:9f:dd:e4:7e:b4:78:1e:dd:f6:6d:20:64:
                    00:2e:11:ab:6d:be:d9:69:17:7f:8e:17:d8:3d:7f:
                    89:fa:f9:18:d8:18:1c:52:6a:f8:c8:00:95:a0:c3:
                    39:78:af:eb:f9:17:0a:0d:cc:48:36:1d:93:00:a2:
                    55:2d:2a:36:eb:80:c4:cf:e9:38:bc:22:70:94:2e:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B5:9B:F7:68:83:04:7F:52:EC:D2:3E:D8:AB:2D:C3:67:1B:28:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7473012e-981f-378b-a02b-938abc911851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:56:d7:42:ea:14:91:ec:67:fe:fa:fa:59:c0:19:c4:93:ae:
         30:50:26:ee:58:f2:92:66:51:48:0c:25:ae:fb:57:e9:05:d3:
         5d:6b:ad:ee:7e:b6:26:25:2d:67:9a:1d:87:dc:be:b1:72:aa:
         5d:00:ad:5b:85:e1:85:b7:53:53:59:11:44:1e:fa:a7:8e:51:
         06:59:7f:68:33:e7:07:92:21:7f:f8:79:b7:e7:e2:9d:96:29:
         77:2c:d7:97:7b:80:08:a1:3f:a0:bd:e1:63:26:2b:9d:d8:f5:
         a5:bb:05:79:f7:14:00:f4:f1:a8:91:24:97:1a:5b:35:07:a7:
         49:aa:6b:54:8e:e2:67:6b:9a:6c:02:23:9a:17:e7:bd:3d:a5:
         ef:52:70:ce:30:fd:64:f1:d3:c7:68:f4:54:ff:e0:f0:fe:24:
         5b:e0:79:c8:6c:2b:f8:dc:33:12:88:7d:c2:eb:f6:8d:3a:f8:
         f7:93:ef:e2:c3:83:87:9a:4f:ae:b2:9e:89:bd:55:de:d9:b0:
         21:de:37:9b:3f:11:fe:cd:48:63:92:47:a1:da:a5:ac:df:36:
         65:8b:b2:2c:21:c8:3b:24:75:6e:ef:5e:2a:d5:81:f5:83:2f:
         ba:5f:e3:2a:33:ab:fc:4e:b6:4a:27:f6:fe:63:32:81:79:c2:
         fe:2b:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:12:56 2025 by rpki-client