Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/830869b6-0362-3d09-b019-27f83a075941.roa
File:                     830869b6-0362-3d09-b019-27f83a075941.roa (raw, json)
Hash identifier:          F4TXMYF6Qj5S7OMqW/z+JxSDw2WJRCys+LFgSGjOKxQ=
Subject key identifier:   A2:C3:81:06:40:2A:AF:5C:EC:68:8C:96:C4:DE:F2:DC:49:39:23:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61FFC7DA91837A79F76B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/830869b6-0362-3d09-b019-27f83a075941.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396594
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ff:c7:da:91:83:7a:79:f7:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=eeda1a11-70fe-48a0-983f-bb5aea949519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:84:f7:c8:98:99:af:d6:9e:f3:f5:59:26:
                    00:8e:1e:92:6f:80:c6:b4:f9:53:f2:79:60:4c:c6:
                    fb:3b:dd:09:87:bc:f5:c6:9b:82:e4:4a:9a:cf:0c:
                    f5:6e:45:50:8b:73:7e:26:41:af:93:68:72:fa:d0:
                    4e:e3:e3:cc:1a:dc:7a:f9:4a:d2:d7:96:ff:7e:68:
                    bc:de:4e:17:3c:8e:f7:22:e4:15:c3:21:ea:a9:2a:
                    e2:27:5c:ed:00:62:17:9b:5d:36:dc:c8:bc:19:5d:
                    e6:d5:7c:2a:f5:93:bf:61:66:68:b1:0e:df:b6:6f:
                    4f:ec:a2:2e:6c:aa:fd:2c:a7:b1:a5:75:8e:d5:51:
                    53:cf:a5:b6:24:7d:de:97:43:bf:79:6e:36:f8:35:
                    59:f1:27:1b:e8:6c:98:d2:34:80:1c:78:ed:27:03:
                    f5:01:13:e8:bf:c7:6d:fe:13:27:87:80:8e:4b:ab:
                    9f:d0:f0:d8:f6:0e:04:4d:61:3c:d5:ce:58:df:1e:
                    ac:43:1b:8e:34:dd:b5:8c:7e:b6:e3:f3:43:e1:6c:
                    e2:d6:42:42:90:2f:a8:e1:13:1c:44:87:14:fe:ca:
                    27:e8:67:f1:f2:6c:80:f4:38:0c:77:e2:ee:ed:0e:
                    a4:3a:a4:4d:99:b0:80:04:69:2b:67:ec:5a:53:77:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:81:06:40:2A:AF:5C:EC:68:8C:96:C4:DE:F2:DC:49:39:23:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/830869b6-0362-3d09-b019-27f83a075941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:2b:74:a1:d7:b9:27:2b:d6:c6:c5:37:e1:e4:2b:c3:23:
         3b:bf:9b:13:6c:e2:ff:5a:43:dc:cf:f2:db:48:8c:ec:59:45:
         e2:1d:7f:c9:c3:c4:f5:2b:f3:46:47:04:32:74:35:a2:79:b7:
         fd:6e:5a:54:3f:24:33:f6:27:0c:7b:af:52:7a:4a:f7:43:25:
         c0:2f:5c:8b:55:f8:30:c8:c2:f0:0f:fb:40:17:db:9f:38:5f:
         8e:8f:53:3c:bd:85:86:31:75:55:33:bd:b4:9b:e5:c3:c5:d6:
         70:12:47:80:77:da:38:97:4c:8d:32:52:e6:48:2f:7b:01:a3:
         37:ec:29:63:4b:27:f8:72:53:e2:66:d9:16:e6:02:be:c6:52:
         67:c6:99:2c:90:af:cc:7d:84:54:05:89:8d:00:fc:3e:f8:5a:
         e7:3a:b7:ff:5b:a0:93:16:58:ec:7c:4d:bd:a5:88:dc:15:0a:
         4c:4f:61:24:b8:cd:a3:ac:8a:8b:47:58:73:68:0c:ee:fd:f8:
         7a:35:b5:df:a9:ad:b7:79:64:9e:22:73:e3:c0:47:fb:a1:36:
         12:68:e7:1d:f0:0e:1c:df:b0:4e:fe:f6:9f:d5:be:97:8b:70:
         9e:c2:dd:0a:7b:27:c4:65:d9:72:27:15:1a:5c:4d:ad:6d:85:
         5a:d8:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:43:08 2025 by rpki-client