Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843b9730-888b-3ee3-9909-68e57df86713.roa
File:                     843b9730-888b-3ee3-9909-68e57df86713.roa (raw, json)
Hash identifier:          S1cCl/8kZpX5dWFk//+3RA/hygskGOXoIGPO8d1R6Dw=
Subject key identifier:   05:BC:E8:27:DC:74:F5:E9:8E:18:37:05:3B:54:99:77:8C:ED:24:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58BC0CE25A752030C2980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843b9730-888b-3ee3-9909-68e57df86713.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     20362
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8b:c0:ce:25:a7:52:03:0c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=8069dd9f-7161-4bfd-b02b-3e6121539d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:ed:e6:26:ee:96:94:fa:6f:33:41:71:b3:
                    3d:88:db:21:50:32:5f:f4:8e:8e:59:14:88:43:f4:
                    c1:20:cd:a2:86:88:54:a2:1f:87:99:02:45:d5:98:
                    12:1f:ea:48:db:42:d1:ab:29:50:42:f6:48:e4:01:
                    b2:b3:86:39:4e:9f:a3:b9:98:09:b0:84:d8:ae:19:
                    8e:32:99:b6:db:eb:05:c9:ae:02:fa:ed:74:d3:7e:
                    c1:08:78:dc:bd:34:b2:94:83:c4:80:1c:ff:fa:ef:
                    69:b1:19:4b:d7:a2:d7:dd:16:6e:1b:73:66:26:fd:
                    d2:49:b4:18:93:8a:71:1d:c4:5e:47:7c:d5:fe:39:
                    3f:98:12:25:de:6c:f5:9c:18:7a:2b:ed:f3:f2:e0:
                    c5:6b:b7:2a:16:4f:30:47:49:64:a6:3f:23:b9:cc:
                    5f:6b:39:3c:99:20:91:c9:92:ca:95:53:8f:e1:5f:
                    ae:5c:6c:c0:45:39:74:b8:01:79:91:71:d7:ad:39:
                    20:a0:ff:78:dc:cb:8e:b7:ce:70:19:78:ef:bc:43:
                    0a:53:b4:6e:02:bc:30:b3:1f:eb:38:5c:a5:ba:38:
                    8c:f2:b1:01:08:62:d7:89:a2:ee:4b:1d:e2:78:54:
                    2f:a3:e4:d8:31:4b:76:66:fa:75:13:e4:4d:f2:b0:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:E8:27:DC:74:F5:E9:8E:18:37:05:3B:54:99:77:8C:ED:24:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843b9730-888b-3ee3-9909-68e57df86713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:65:da:53:89:49:cc:02:29:f1:60:fb:a6:90:03:1b:7d:
         9b:94:91:be:80:81:bb:52:20:03:1c:f4:0f:61:65:2c:df:da:
         1f:f4:33:69:5b:40:bc:b7:f1:d3:b9:c6:f3:83:16:9b:60:d4:
         7b:b5:2a:cf:7e:25:91:e4:46:dc:f5:aa:61:1d:ce:a1:e4:29:
         2d:0d:8d:a9:e7:0c:af:28:d2:a3:66:d1:99:24:f5:89:19:07:
         29:06:ec:3a:d8:83:16:34:a9:a9:d4:81:1d:e5:94:70:61:02:
         50:5d:59:e4:a8:4c:09:89:96:ca:15:e0:92:ec:83:a5:c8:ed:
         2e:74:59:93:17:ee:5a:31:17:7f:e4:d4:1f:97:d9:c7:70:51:
         4f:79:0c:b4:e0:8b:8f:3c:5d:f7:42:96:de:69:66:4a:dd:78:
         6b:00:33:95:26:8e:9d:b2:44:bc:2f:01:d1:bb:29:0a:0a:0c:
         f4:30:e0:53:49:72:2f:20:c2:ba:e1:22:86:f4:44:79:82:9e:
         5d:15:a3:7b:d3:5a:82:b6:ff:39:dd:37:b5:6b:84:83:f5:d4:
         b6:80:be:9d:47:22:09:c5:71:39:51:d9:7b:43:1b:c9:53:ea:
         a2:fd:a4:2c:be:18:d4:79:35:b5:81:88:d0:09:90:ba:95:b0:
         6c:b3:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:58 2025 by rpki-client