Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa
File:                     8485d8aa-301a-3bf7-ac15-360740514ac0.roa (raw, json)
Hash identifier:          iCapk/6JZoec00+lXIeuZLKKvDQ0etPA9BIqJzx2iYU=
Subject key identifier:   AE:32:F3:D9:CE:17:E4:20:93:17:82:98:37:74:CB:00:D4:0B:40:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870D51C8C4DA062A6E6900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     36632
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0d:51:c8:c4:da:06:2a:6e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=63231b70-948b-4b4e-9719-121f279a8744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:81:84:9f:ec:18:da:6f:76:d1:a9:c7:04:
                    65:46:51:05:26:81:a2:31:a5:78:27:b3:ff:dc:99:
                    29:c8:24:22:47:7d:39:2c:7e:f0:c0:8a:b9:de:d5:
                    00:f6:b9:d9:5a:32:33:30:43:24:15:f2:79:1d:46:
                    8b:ff:78:2e:59:2f:51:b0:b1:a3:8b:98:9d:22:40:
                    72:36:cf:75:a1:b5:94:d2:08:fe:0f:e9:1b:4e:85:
                    36:df:9c:25:14:21:07:aa:00:46:13:b1:32:44:0a:
                    6c:51:97:b9:9a:28:aa:e7:da:58:46:f0:fa:74:24:
                    21:12:dc:8b:6f:05:8a:32:c8:9b:d2:ba:11:10:1d:
                    f8:54:66:2f:be:71:1b:ea:83:e8:0f:35:e6:9f:f8:
                    c2:86:8c:d7:2e:57:ec:be:8b:52:0a:99:a9:4d:07:
                    9e:e7:ea:93:18:58:5c:f0:a6:47:b9:7d:76:0c:2d:
                    e2:60:a0:91:ba:21:8a:5d:51:f8:03:5a:cd:6c:84:
                    a5:a7:66:f6:ac:a6:15:fe:21:3b:ee:fb:9f:8e:39:
                    29:3d:e4:11:27:7a:c7:3b:2e:91:89:7d:cf:48:02:
                    fb:da:74:ae:cf:b4:5b:86:bd:e4:6c:d3:a2:72:99:
                    a9:d9:c2:bd:7f:8e:98:fe:b8:38:2b:2e:64:8a:d6:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:F3:D9:CE:17:E4:20:93:17:82:98:37:74:CB:00:D4:0B:40:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:0e:d9:96:8b:c8:20:99:79:2b:bc:a1:b2:7f:2e:79:9a:c9:
         44:4d:b0:76:f9:ce:2b:c0:88:db:7d:2d:e4:d9:1f:7b:12:74:
         48:c6:47:ee:85:37:cd:0d:eb:e7:d5:d6:2a:e9:b5:22:a2:eb:
         80:2c:68:9a:b7:6b:ab:29:51:17:d0:27:fd:0a:bf:7e:a9:0f:
         60:63:6c:a9:33:d1:e8:0e:fb:b2:33:68:aa:fc:f2:76:34:75:
         7d:67:4f:84:2e:5f:77:27:1e:6b:50:a2:79:28:78:78:b6:4f:
         fd:c6:fb:bb:aa:82:3d:8f:ec:92:25:28:39:f5:f0:92:60:fe:
         81:2a:a8:46:2c:e8:cf:38:53:66:43:87:af:ab:04:9f:28:bf:
         95:38:2b:69:bb:df:46:81:d7:fd:f0:36:68:22:16:b1:88:97:
         0b:3a:66:e9:e0:d8:7a:bf:f4:cd:9d:67:20:52:13:b6:50:1e:
         92:86:29:48:7e:d1:72:c3:2f:18:7c:ce:80:50:0a:1b:1d:d4:
         20:86:b9:5f:9f:02:86:a8:53:56:16:cb:15:dc:55:25:5c:97:
         03:33:76:c2:53:38:1f:fa:25:8d:53:92:8e:ac:2b:3e:0c:cc:
         6f:44:8f:ff:d1:d9:aa:88:b1:9a:72:b2:65:13:83:02:ef:d4:
         64:c0:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:52 2025 by rpki-client