Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e10fb64-e821-3985-bac0-0a33fba853dc.roa
File:                     7e10fb64-e821-3985-bac0-0a33fba853dc.roa (raw, json)
Hash identifier:          fvIa+Q0+N/8gBuDnCcwelTdNSuYbTg8VyozujAGILps=
Subject key identifier:   A6:38:05:71:A0:53:14:CB:22:FA:45:F5:80:F5:73:45:76:83:B9:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58B2CC8E08BBB1F8E92C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e10fb64-e821-3985-bac0-0a33fba853dc.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     397201
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8b:2c:c8:e0:8b:bb:1f:8e:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=681a18d1-2200-4fe1-9df5-c3b383531c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:95:9a:4f:d3:94:b0:92:85:45:68:5c:0a:
                    7d:d2:2a:eb:90:b1:c3:10:75:bf:69:05:dc:43:96:
                    8a:14:46:35:d0:69:f0:fc:6c:b9:26:e2:0c:12:02:
                    57:f9:ec:06:10:21:5d:ab:5c:e7:e1:19:6c:0a:54:
                    17:7c:a8:ff:f0:4a:a6:00:28:a3:27:ff:95:6c:31:
                    b7:56:12:b8:5e:61:85:a1:94:54:7e:4d:10:25:7a:
                    4d:54:28:2b:f4:6d:88:fb:a4:de:a1:59:ad:4c:5b:
                    55:73:03:33:b0:05:16:ac:02:3e:63:23:f6:94:54:
                    94:71:fb:f3:fc:bb:77:ba:5d:b4:3f:40:3f:8b:84:
                    3d:08:e0:8d:01:40:63:4a:c2:41:5c:09:4f:e0:ed:
                    2c:39:a0:e5:6f:67:fa:8e:7b:ab:ed:6e:07:61:9f:
                    ce:89:e2:92:c8:4c:04:a4:bd:8a:16:c1:86:13:10:
                    d5:70:d9:41:50:b0:7d:73:3f:67:e0:72:e5:69:2a:
                    50:56:2b:14:f9:b7:ff:a3:51:18:43:a0:b0:55:24:
                    0b:51:ce:77:2a:20:4e:fa:fb:1a:d1:99:1f:31:f4:
                    b6:e5:b0:f2:15:73:7a:b4:b2:00:20:0f:45:ef:31:
                    2b:95:55:e2:1b:21:e6:15:61:71:2e:7a:c3:2f:96:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:05:71:A0:53:14:CB:22:FA:45:F5:80:F5:73:45:76:83:B9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e10fb64-e821-3985-bac0-0a33fba853dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:83:b2:6b:53:e7:f9:73:18:9c:02:60:62:44:a3:b5:2e:
         43:33:07:dc:73:92:17:7b:ef:5d:f1:02:a7:47:44:19:4b:d4:
         43:0c:f2:1e:75:10:f4:f3:4e:d8:24:26:03:85:b8:c5:99:b9:
         89:7a:82:38:f4:18:9b:44:7c:56:4a:31:dd:14:64:5b:52:68:
         4f:ed:42:af:8e:31:6e:6f:1d:78:23:b0:e8:e6:51:70:98:cd:
         10:ec:12:44:71:8b:db:6b:51:11:f7:b9:1f:97:a5:f5:4b:e6:
         7f:a2:60:b3:89:07:1d:69:36:e8:1e:e2:93:8d:33:bb:cd:a6:
         93:ea:96:63:01:9c:8a:62:09:1f:88:e9:e5:b0:c1:d8:ed:6b:
         65:bc:5c:49:6c:07:d7:57:7c:14:f8:c4:0f:2c:e8:2a:9d:01:
         86:76:9c:0c:1f:7d:09:e2:72:84:9b:f3:f7:2e:80:f2:fe:f0:
         fb:3e:d2:68:56:36:c1:db:ef:77:b5:69:84:73:32:d8:f8:71:
         a6:26:3c:8f:00:0c:62:6b:35:32:a6:0d:7d:71:39:19:b9:4a:
         8e:4d:01:95:31:ce:aa:c7:50:c8:bd:70:41:48:5a:63:43:b0:
         80:9a:ba:dd:c1:b0:78:44:d2:b1:c1:23:b7:e1:87:02:bd:50:
         f5:87:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:55 2025 by rpki-client