Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/773f5004-9789-3002-beda-ff498e77f3c2.roa
File:                     773f5004-9789-3002-beda-ff498e77f3c2.roa (raw, json)
Hash identifier:          xqii2rAPEXF0+R6ULyf4s0f3/YC2hCwb4QVICQY5viE=
Subject key identifier:   0D:A1:81:50:CB:51:93:77:82:6C:79:8C:97:0D:97:D9:0C:E7:91:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61D9A6BD80D5C658108C70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/773f5004-9789-3002-beda-ff498e77f3c2.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     40647
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:d9:a6:bd:80:d5:c6:58:10:8c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=4c40f05d-fe37-42f5-b12b-a984c39316b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ad:7c:fb:53:65:12:58:f6:2c:8b:54:06:d6:
                    6d:4e:9c:d0:16:aa:8d:54:b2:49:86:b4:b4:cb:5e:
                    32:7f:23:cf:ad:08:e9:8e:eb:af:60:f9:7d:93:9d:
                    6f:4f:fa:04:2a:9a:12:ac:df:5b:f4:2a:21:60:c1:
                    43:14:31:0e:91:48:0f:45:a1:08:d0:75:4d:1c:63:
                    44:2e:3a:51:28:8d:25:2b:19:f0:40:cc:31:eb:9f:
                    1a:52:5a:f2:19:9a:3f:e1:ff:11:c5:e3:d9:e7:57:
                    90:6e:f0:f4:a6:ff:21:63:91:c6:20:3d:2b:6d:7b:
                    ef:62:c2:19:83:b6:92:b9:47:10:26:d9:be:25:81:
                    e3:e2:67:7c:34:a3:6d:64:c4:d3:fe:61:3b:fa:8c:
                    e1:13:1e:e2:12:1a:47:a5:29:16:99:67:d5:a0:a0:
                    0a:72:17:eb:83:b7:0d:02:34:16:8d:c1:24:62:65:
                    67:b6:d2:e6:83:21:68:ec:d4:fc:1c:fd:d7:cd:f0:
                    06:01:da:bc:b6:82:ec:51:c9:90:04:69:b6:39:cc:
                    33:c2:f3:a1:95:d5:f0:fa:c0:5e:a6:74:06:6f:8d:
                    20:3c:08:ce:d5:d1:d5:0a:3e:18:78:9f:91:24:d7:
                    c0:1e:e8:a0:c3:e0:9b:3b:02:56:c5:c0:51:59:f0:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A1:81:50:CB:51:93:77:82:6C:79:8C:97:0D:97:D9:0C:E7:91:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/773f5004-9789-3002-beda-ff498e77f3c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:bd:b6:20:f3:d0:7b:3a:de:d5:e1:ec:00:86:3b:81:91:
         1a:6f:41:00:e3:40:bb:39:67:1b:5e:c6:ae:9b:10:7e:2e:09:
         9c:bb:f9:3b:bf:cc:1f:30:5f:2d:d3:5e:3e:93:9e:5e:34:21:
         ad:b5:bb:ff:ed:c8:90:2d:df:63:0e:96:ba:93:9d:e1:9e:39:
         06:25:94:8b:68:85:16:52:aa:29:0c:cd:84:37:ec:c6:fe:51:
         5c:4e:ce:fc:29:73:fd:ec:0c:e8:50:f8:28:e0:12:f8:7f:46:
         54:98:26:16:94:52:c6:60:2b:1c:35:1e:1c:79:c0:8e:44:e0:
         62:a1:84:54:c5:aa:0f:5f:1e:f5:02:7d:6b:38:9e:f7:52:00:
         f9:ca:a0:19:df:c9:3a:69:12:9f:b2:1d:ef:f0:3a:1d:9d:8e:
         0a:e1:c8:38:ab:23:b3:56:93:18:39:2a:11:88:44:ee:02:84:
         3f:d3:a8:06:0c:8e:96:97:2d:8b:02:e1:4d:83:cf:3b:32:f8:
         cb:be:1b:10:5e:06:f8:28:5c:37:b5:ae:af:02:25:4a:10:71:
         ff:54:2f:dd:15:6b:0e:4f:b9:16:9f:f3:da:d3:3a:40:88:11:
         0e:b0:a8:9e:35:e4:26:fd:4f:37:c5:d7:93:c3:63:6b:29:57:
         92:92:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:04:14 2025 by rpki-client