Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ee8bea-7b5f-3448-b58f-b242f713b674.roa
File:                     81ee8bea-7b5f-3448-b58f-b242f713b674.roa (raw, json)
Hash identifier:          KzXB7Zy/TxZJaFcZp+YAUOAZsZ49GXYTQpqP1wvsdPg=
Subject key identifier:   B0:D9:3D:99:4A:6F:BC:95:53:1C:0B:26:CE:97:C9:77:E5:B4:BB:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58D330C952C732CBB5880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ee8bea-7b5f-3448-b58f-b242f713b674.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396555
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8d:33:0c:95:2c:73:2c:bb:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a233bf9b-8a4a-49cf-abf9-4eb76719f925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:4b:43:5a:2a:a5:a0:8a:45:76:df:d6:11:
                    9c:11:77:39:84:e6:cd:f3:44:23:a6:51:73:d8:76:
                    a9:a3:e0:45:d8:67:24:bc:de:36:fd:cf:61:7c:29:
                    ce:d8:b5:58:ca:c4:47:1f:5b:66:18:d7:2b:33:e9:
                    de:fc:bb:0e:ff:38:f8:91:b1:33:b3:69:b4:4e:5a:
                    c0:ae:9c:f1:aa:22:25:5c:f6:9e:ac:f3:17:50:cd:
                    d2:b3:0f:e1:96:2c:5f:87:9d:6d:ae:39:2c:a8:b1:
                    3f:8f:8a:73:b2:21:c7:8c:1c:e0:27:c1:09:04:92:
                    38:bd:8d:3d:7f:a2:00:5c:b0:30:e6:37:60:2b:44:
                    ca:53:6f:0e:fc:63:0b:b1:53:42:47:c7:73:5e:f3:
                    8a:cc:b1:08:06:6c:de:47:f4:e2:67:ab:66:d0:fc:
                    ea:73:2b:67:30:d6:52:e0:fd:e2:8d:74:d4:bf:2a:
                    06:1a:88:db:76:5e:85:a0:fd:03:8f:2f:7e:96:0d:
                    f3:65:2d:61:1a:de:c8:49:52:d2:09:cb:cf:52:3c:
                    55:cd:ce:4f:72:a9:5c:83:90:fe:38:d9:63:37:0c:
                    ab:cc:ac:0a:1d:5a:b1:d7:46:2c:99:3d:11:31:66:
                    91:c2:59:40:59:f4:f1:9c:5e:c8:9d:3f:37:f5:8b:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:3D:99:4A:6F:BC:95:53:1C:0B:26:CE:97:C9:77:E5:B4:BB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ee8bea-7b5f-3448-b58f-b242f713b674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:b7:bc:d8:f0:aa:88:c8:6c:e1:75:69:4e:2c:38:93:ea:
         d6:0a:9a:24:06:6b:25:b6:a5:eb:77:f8:c8:8f:81:e3:60:d7:
         b2:33:93:02:3d:9f:a4:d7:7e:8a:f5:45:15:5f:40:a5:7c:3d:
         ca:19:53:e9:52:96:af:d9:ce:59:66:79:ed:d5:ee:7d:45:af:
         86:c0:ca:ff:8e:38:50:16:14:66:a3:ce:f9:4a:4e:d1:ff:93:
         3f:5c:cd:bb:36:8d:ec:bc:cd:81:0d:61:da:fb:2d:bb:14:1a:
         f0:73:4f:b0:8a:01:44:82:fe:b2:6e:48:08:58:08:e4:cd:7c:
         df:f7:62:c7:f7:e2:ab:72:01:ba:49:77:f6:94:7d:e1:7f:2e:
         45:76:8c:e2:1b:31:b9:52:e6:0f:20:dd:d2:ab:88:01:a1:b0:
         d9:f6:06:59:c6:49:0d:b1:11:b1:14:7c:f2:c6:66:d3:09:72:
         aa:b1:55:7e:68:8f:f8:bb:2b:a2:cc:81:5f:37:34:09:1b:5f:
         7b:f8:b6:0e:6e:b1:69:a8:18:d9:b6:30:8d:b6:d1:c0:76:f5:
         ec:b3:04:82:da:2e:cb:74:c5:98:bd:d6:cd:4c:97:11:1d:d8:
         f9:82:b9:6a:58:2b:98:4b:2a:08:a8:d0:5f:91:f2:b0:09:f8:
         92:3e:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:16 2025 by rpki-client