Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa
File:                     878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa (raw, json)
Hash identifier:          p6QmTT3xViNXInrPw909vpQYYXcp/8aTClc1xeaDH9A=
Subject key identifier:   B7:41:E2:6A:82:3E:B7:52:22:56:D9:55:7E:61:33:82:51:A3:52:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1ACBB497AEADAFC176A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     10515
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ac:bb:49:7a:ea:da:fc:17:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=c758323b-c850-4793-8b80-4d21c5cc2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:a4:d4:4c:86:42:1b:ce:11:41:3d:0b:74:
                    7c:ed:64:7a:0f:7f:0c:55:55:45:01:fd:8c:cd:92:
                    60:82:cc:1a:40:21:d1:d7:b0:38:24:02:f0:0b:ca:
                    ff:a7:10:26:ac:c4:35:33:b3:bd:d7:84:a1:12:9d:
                    09:0c:23:29:0d:97:25:e6:fe:7e:7e:fe:a2:a9:e3:
                    64:7b:95:e1:ee:89:d0:47:01:53:61:b3:96:c9:53:
                    71:33:5d:ea:4e:8d:aa:f5:cb:bd:27:ee:f8:71:ab:
                    e6:ac:02:aa:0a:14:a4:32:6d:c8:3c:65:be:4b:bf:
                    6e:88:88:f2:1c:df:01:36:dc:66:11:a9:12:fe:7c:
                    d0:34:16:95:3c:92:b7:77:fc:2a:b7:21:74:68:fc:
                    ea:cc:59:c4:10:c0:da:8f:c4:33:98:bc:52:0d:b6:
                    62:cf:4f:f2:5a:79:f6:fa:42:a1:6a:b2:5b:48:8d:
                    c8:42:e0:6d:5a:bb:13:56:0e:10:26:ec:73:3a:8c:
                    1d:8e:34:46:c1:00:86:a9:11:81:c2:0a:52:6c:57:
                    ee:56:45:26:9a:14:9e:62:f5:05:35:18:e0:2c:17:
                    1a:f4:12:25:3f:66:18:35:ff:44:40:b6:42:20:3b:
                    9e:96:70:74:05:b5:75:9d:e7:fd:15:4f:bd:28:f9:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:41:E2:6A:82:3E:B7:52:22:56:D9:55:7E:61:33:82:51:A3:52:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/878a86d7-add3-3e3f-a60c-e4afd0e1a6c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b2:37:6e:af:76:18:d8:f3:2f:09:b1:68:24:e9:01:8e:59:
         84:15:80:d4:a6:69:67:87:86:f4:a0:72:23:19:56:5a:f4:ab:
         b2:4b:18:3f:d9:c6:44:eb:3e:d0:77:67:ef:58:0a:96:71:19:
         3e:2e:04:c0:70:ba:1e:6a:52:69:2b:2a:fd:51:b3:08:ce:c6:
         de:ed:ed:ed:ac:55:d6:a0:80:7b:67:b5:bf:ab:f2:45:57:cf:
         78:0b:ed:92:3c:11:ec:94:00:8d:c3:e0:39:ff:69:2d:cd:ab:
         a9:65:73:1b:31:03:7d:55:1d:e4:97:6e:0f:4d:bf:74:dd:f2:
         40:2a:88:fc:24:b8:c5:2b:63:4f:01:06:a2:0d:bb:db:6f:fd:
         b8:f0:20:7d:f2:d8:38:41:ba:a5:c7:31:d0:30:dc:94:d6:08:
         89:61:b4:6b:39:99:e1:b5:ac:4e:f1:46:71:78:e2:55:13:88:
         0b:4c:24:1b:12:d9:6d:c8:bb:40:40:89:93:e7:78:fc:1c:c0:
         eb:1a:a7:23:90:e5:ca:f1:97:18:2c:99:2c:bd:11:09:51:bb:
         22:1c:20:4c:a7:20:c5:19:1c:51:30:38:96:22:61:8a:2f:56:
         e3:33:79:a7:22:3b:5a:e9:da:f8:5d:6f:3d:f9:27:16:c0:07:
         27:09:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:25 2025 by rpki-client