Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa
File:                     7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa (raw, json)
Hash identifier:          zFJHUNNPqxQ1eozz5S7q7y7tNZdDasHFQnUtpBdZrME=
Subject key identifier:   24:0C:E1:20:72:10:F0:09:D4:29:D7:C7:86:3F:CC:44:64:4D:9F:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE0319F2805DC0B30311F6700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     397198
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9f:28:05:dc:0b:30:31:1f:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=ff289360-e0cf-4172-a492-e2f259eae9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:95:52:60:d8:f1:fe:85:ce:0e:82:14:3c:
                    86:d3:cb:10:22:89:dd:38:c1:9d:3b:42:93:cd:74:
                    06:85:1b:57:2d:23:ad:c9:09:79:8c:95:00:26:da:
                    fc:5a:da:ed:eb:fc:cd:8d:fc:48:4d:88:64:41:c3:
                    45:c8:d7:e7:15:10:c0:74:a1:6b:ee:1d:42:6d:85:
                    30:cc:23:39:b5:23:6f:2b:df:db:41:59:b9:76:4a:
                    14:6a:27:66:0f:97:b7:a1:ae:87:3d:3e:6d:ec:5c:
                    90:5d:f2:b8:b8:95:88:41:7c:ca:1a:39:d3:96:57:
                    1d:5c:b2:3b:e8:a4:96:6f:65:22:38:b3:1e:fe:1f:
                    2a:28:4d:27:f3:00:6a:98:6b:53:ba:cc:13:8c:3f:
                    e5:d6:f1:62:0d:37:51:2f:b0:80:5f:13:7a:91:ce:
                    41:28:4b:e5:82:4f:9a:8e:6a:9c:a8:57:86:51:ec:
                    fd:07:d6:22:a7:c8:0c:33:3a:47:ad:05:1e:d1:05:
                    63:80:61:f9:e8:75:a6:4d:09:a6:9d:90:3c:ef:c4:
                    7f:e5:79:1a:97:b2:b9:c8:7e:6c:80:65:73:74:40:
                    3e:19:c0:fe:bb:97:84:e0:f0:29:fd:75:87:d8:9d:
                    72:33:c8:f7:38:9a:f2:c2:53:6c:d0:93:a5:ae:23:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:E1:20:72:10:F0:09:D4:29:D7:C7:86:3F:CC:44:64:4D:9F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb3520f-9a8f-31ba-937d-35b1b1636efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:77:fb:67:d2:c7:61:2b:39:ff:32:c3:c5:ae:11:76:f5:
         ff:95:ae:a4:20:61:9d:e2:4f:db:f2:f2:63:ed:7f:42:84:df:
         d3:fc:0a:34:35:07:75:1c:49:a3:18:43:12:d9:eb:b5:57:9f:
         93:91:36:4e:2d:a5:a0:b1:be:ec:3e:46:2e:63:8f:66:e5:25:
         ee:a9:16:b1:a8:ed:9a:41:eb:d0:7b:af:00:30:23:ba:d3:c9:
         1a:d3:72:52:33:ed:37:36:2f:ed:99:23:80:66:70:79:cd:29:
         7a:e2:ef:fc:81:ed:53:ce:0d:4f:14:03:7f:85:df:2c:3a:65:
         c7:1c:63:70:1e:3f:bd:35:32:13:ce:2d:51:92:78:41:1e:3a:
         cc:4a:e3:f8:19:22:eb:a1:96:8c:b9:5e:82:3a:e6:cf:00:87:
         15:06:d7:ee:ed:4f:9e:e1:ac:22:7f:50:d3:02:39:d8:f4:dd:
         4c:f9:a4:3a:03:b7:70:91:5e:26:9e:d4:db:36:db:c3:cd:6b:
         1a:cd:fc:81:a7:9b:40:3e:df:6e:6b:f3:55:fc:62:62:68:4f:
         00:f5:9d:65:52:02:7f:c7:9f:4d:fe:67:1e:8e:5e:c3:ad:da:
         39:39:e2:78:ea:2a:db:91:9d:97:61:05:25:2e:65:00:bf:4b:
         c5:73:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:47 2025 by rpki-client