Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa
File:                     7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa (raw, json)
Hash identifier:          WywzAC7+gTXZWu5P9zi4qegt+VKGAcy2Kq756KzKmE4=
Subject key identifier:   C0:41:65:E6:BD:8F:93:4D:F5:6E:F3:DA:57:F3:6D:67:53:4A:21:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FA3BEBC0EA73D7D4D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396603
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fa:3b:eb:c0:ea:73:d7:d4:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=fecca191-c5f5-408f-8bf8-724b5c879a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:ec:e3:f9:d7:3d:26:f2:4b:d0:7c:a0:b2:
                    3d:43:d1:12:45:1d:e4:8c:37:a0:ca:b8:e2:80:b7:
                    02:c8:dd:0c:d6:e6:a4:08:57:53:67:9a:f3:e5:bc:
                    e9:03:54:3f:a4:4d:9e:f1:4b:84:3f:d2:5c:8d:d8:
                    38:5c:91:a2:36:34:a4:da:48:c3:64:f1:4a:10:1f:
                    e4:42:e8:d2:86:ad:15:fb:92:5d:f2:33:9b:f8:13:
                    34:7d:5f:6c:df:6d:3c:b1:31:07:9a:51:fb:32:39:
                    2e:ce:71:cc:f7:b7:35:44:23:87:34:11:c5:fc:1a:
                    f1:2d:2f:67:7a:37:a4:7a:31:65:50:87:19:13:f2:
                    6e:ba:c5:db:62:a0:14:75:2a:fc:6b:31:27:39:76:
                    23:84:a5:24:86:d0:f5:31:45:eb:11:92:9d:c5:1a:
                    73:be:a6:cf:30:b6:ff:25:94:30:ca:7e:40:dc:df:
                    ff:e3:3a:dc:ab:3c:80:97:1f:d5:d4:a2:bb:1e:44:
                    91:7e:5a:91:ee:8f:47:ab:f8:3c:d8:f3:9f:e9:13:
                    1a:4c:7f:4b:0b:3c:5c:a8:8e:88:2e:99:e6:22:6f:
                    bf:8a:8f:da:1d:8f:e5:cd:be:5a:e7:b2:83:cc:80:
                    5e:05:8e:14:8d:f1:21:03:86:04:20:3a:13:ce:7f:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:41:65:E6:BD:8F:93:4D:F5:6E:F3:DA:57:F3:6D:67:53:4A:21:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:37:19:2d:a2:17:3f:7b:3d:2e:a7:27:93:82:52:01:3d:
         29:f2:a3:eb:3e:2b:e9:a6:8b:6d:6f:2b:26:59:e5:9b:43:f2:
         43:9e:60:cb:6c:10:77:73:13:0a:2d:69:8b:da:9b:aa:bc:84:
         1e:fa:2d:2b:47:31:c4:38:dc:01:17:df:6b:a1:db:61:14:37:
         bb:1c:3d:6e:2c:79:ff:26:48:98:59:a1:ab:d4:06:df:d1:0b:
         6f:32:99:8f:4e:69:fc:79:7c:af:93:31:30:6e:f9:8a:80:52:
         41:3e:27:25:54:30:6a:b3:3f:8c:73:a9:eb:e6:b2:25:14:74:
         c4:98:c8:83:f3:4c:69:68:ae:48:ce:e7:f3:79:d6:9b:db:86:
         30:d6:3f:c0:5f:52:2c:1a:eb:21:b5:c8:81:f5:8f:a0:13:57:
         0f:3d:e9:d8:76:7e:69:92:e1:ae:5f:98:ea:80:f2:65:dd:b4:
         1d:f8:e4:2f:8e:9d:74:b0:52:7e:e2:3b:fb:d3:41:92:de:89:
         da:4c:c8:e7:f2:98:3e:9c:be:ed:93:ff:61:7f:11:04:4e:69:
         4d:6b:38:2a:73:a8:28:99:f3:75:96:6a:95:63:ce:a9:ce:99:
         f4:57:d4:c7:25:6a:e8:19:12:6a:25:e2:1c:92:51:1e:8d:a3:
         59:4d:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:04 2025 by rpki-client