Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa
File:                     7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa (raw, json)
Hash identifier:          3kLHydw7hWNkNm0qTlplnxxEPO6sSIElu7S9gkAZpCc=
Subject key identifier:   2C:E6:FB:55:7A:08:DC:85:D1:08:8B:FF:48:6E:0A:1F:E5:0F:D3:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E6E9C6967CC173291A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     40717
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e6:e9:c6:96:7c:c1:73:29:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b75ad42e-59dc-44e2-a537-a2ab4dd56f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f8:9a:c6:ac:67:b1:c3:02:a1:65:76:48:ce:
                    86:ee:22:05:95:50:b3:09:85:e4:09:27:63:31:fc:
                    9d:18:15:19:15:e0:51:0e:d3:47:e4:e8:27:bb:28:
                    d6:c9:1e:3d:08:d7:ce:43:7f:1b:24:6e:ac:26:7b:
                    87:71:23:0d:4f:11:33:a3:c4:7c:ff:b1:d3:0f:32:
                    0b:d9:fa:1b:4b:33:9d:5b:84:1c:90:42:c4:50:40:
                    0c:55:4b:12:9b:ff:9f:cb:f7:71:0c:e3:ae:09:c2:
                    fa:11:0e:12:9d:8f:46:e7:c2:20:3a:b5:ef:f0:74:
                    c3:a5:6c:10:2e:4e:ca:06:74:0e:d3:5e:e7:c5:19:
                    aa:b3:41:3b:6a:38:9d:74:3e:58:6e:65:6c:d5:33:
                    e0:68:51:fe:28:b2:98:61:90:7e:b5:61:6e:93:be:
                    eb:90:60:53:18:6f:b3:35:2e:2c:02:62:c8:e1:bf:
                    05:09:b3:26:fb:d1:6b:46:0c:a9:42:3d:77:f9:f3:
                    4c:5f:4d:ee:94:04:1a:97:69:c9:0e:a6:a4:17:9d:
                    b7:a1:3d:87:fa:51:6c:df:d0:c8:9a:46:09:fa:43:
                    e6:b0:70:0a:7b:ca:8b:1d:cc:a6:71:ac:44:39:28:
                    27:c4:cc:7b:c6:b9:8f:a8:cb:11:c2:60:0f:e8:e3:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E6:FB:55:7A:08:DC:85:D1:08:8B:FF:48:6E:0A:1F:E5:0F:D3:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d5d3835-bbdc-3d8c-9db8-aa7f232afc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:09:4f:42:13:0b:d8:85:32:f9:3d:c7:94:fe:79:bf:0f:
         66:af:6f:b3:00:8a:ee:dd:eb:a7:b8:62:53:3c:3b:5c:d9:80:
         11:43:3b:1a:15:30:d4:a0:17:8d:76:9e:8c:f3:78:b8:83:84:
         a0:ee:40:81:77:b7:56:f7:e9:90:78:f9:dd:cc:46:25:f0:11:
         6a:99:d9:d6:29:da:eb:ad:32:b5:5b:d2:61:4f:1f:a2:f1:d4:
         b9:35:88:ff:12:1b:1a:79:05:75:21:2f:ca:8c:05:3a:9c:e7:
         cf:70:29:74:7a:7e:74:ff:24:d2:e7:ed:cb:82:a2:29:04:a0:
         59:82:ff:54:96:d7:c6:ad:09:24:36:6e:f2:b6:3b:96:78:82:
         3a:e9:a0:65:18:4d:76:ed:64:c1:d5:7b:c2:db:84:cb:5f:88:
         d0:4f:43:ff:26:df:de:c0:33:d6:4d:29:75:67:62:38:c2:e9:
         9f:30:10:7c:fe:49:75:88:ad:40:80:54:75:34:be:3e:a6:69:
         3a:5d:65:d2:97:2e:33:2f:18:d6:e1:b5:cd:06:a9:fd:33:ce:
         c9:25:61:50:bb:af:8a:7f:a4:4d:1c:49:64:88:e2:07:f9:04:
         99:6a:dc:63:d8:84:2c:6f:65:79:58:8f:1a:51:e5:56:a6:37:
         6e:5d:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:06:58 2025 by rpki-client