Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa
File:                     889e3dbd-e927-39dd-aa9a-08263834c34c.roa (raw, json)
Hash identifier:          hfs3jk2gLGiAHPJWyiakj24RjMWwF+9AR5awbzyqF64=
Subject key identifier:   77:C4:17:A9:2B:9F:6B:76:29:25:52:9F:D3:15:37:B9:16:3B:E1:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1AC1BE8D11CEF007BB740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     397204
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ac:1b:e8:d1:1c:ef:00:7b:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=b3b6372f-55b7-40f7-8d3c-5be5a859250c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:01:31:87:1c:7d:55:03:eb:74:88:0c:21:
                    c8:c2:36:3d:02:7b:e0:1e:d2:e1:eb:12:b1:5d:a1:
                    9a:2d:89:91:c7:e2:d4:33:d7:df:58:f8:16:d7:e3:
                    63:78:0c:be:83:0b:73:b1:88:36:03:2f:1c:24:6e:
                    6a:18:7a:2a:73:3b:a7:13:a4:82:8d:dc:8a:9c:ae:
                    a0:7f:8c:a4:fd:7b:ba:0e:1b:0f:1d:ac:8d:a7:0b:
                    c0:90:2d:b9:7f:0f:63:5e:6c:c9:1b:92:c7:85:34:
                    d5:94:22:11:28:6a:43:53:4e:b1:d5:4b:10:bc:97:
                    86:ef:52:c9:52:26:39:bd:56:52:06:55:27:d6:81:
                    52:8d:5b:81:f7:75:f7:6e:fd:9c:cc:47:c5:9c:74:
                    99:20:16:b3:ec:16:80:c1:df:c5:b2:19:1d:38:73:
                    9e:3e:25:9d:8c:d3:f6:6e:91:7d:3f:9b:8f:23:a9:
                    20:08:6d:34:3f:95:46:55:ad:66:8b:94:a4:a6:0e:
                    77:d6:3e:15:b2:6e:af:da:7c:88:ee:89:68:56:77:
                    9b:f5:f9:7c:bc:f5:69:cf:c4:56:17:8f:39:a9:87:
                    b3:11:d4:76:b0:61:99:60:0b:2e:39:9c:68:b4:fc:
                    bd:70:17:82:d0:46:85:89:d4:25:cf:0c:09:8c:74:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:17:A9:2B:9F:6B:76:29:25:52:9F:D3:15:37:B9:16:3B:E1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889e3dbd-e927-39dd-aa9a-08263834c34c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:69:24:27:a0:8d:88:a7:95:4b:a4:b1:82:a2:64:b2:34:
         c6:18:4c:42:16:39:ce:ee:3a:ac:19:2c:45:3e:c6:62:e7:fd:
         62:fb:a1:9b:a4:4c:3c:07:d8:d3:75:32:c2:be:2e:23:e3:58:
         51:d5:83:7c:10:d0:bd:f1:62:57:a8:6a:9e:73:2b:30:61:55:
         a0:04:d3:77:e0:06:28:61:d7:02:b0:e9:3c:a3:04:08:77:09:
         25:f5:50:90:9b:10:38:9e:64:4f:bd:62:01:9b:fb:a8:89:27:
         d6:dd:7f:73:50:45:3a:1e:40:dc:ec:16:d9:e7:f0:e7:0a:c9:
         80:fb:28:98:7e:39:a3:e9:f5:77:26:2b:35:bf:41:16:92:8c:
         3f:67:9d:e4:2d:be:41:c8:38:df:7f:af:d1:b2:de:b5:16:ef:
         15:01:a9:f3:f7:83:36:e5:05:1d:29:0e:53:a4:c6:e4:d0:3b:
         9e:32:4d:66:eb:ae:68:9a:9c:a7:b7:43:3c:34:73:f0:fc:fb:
         ef:15:80:97:ac:c8:2a:24:4e:28:26:ba:d9:21:1b:01:67:88:
         bb:21:af:07:58:38:17:c2:15:d4:2e:58:fd:17:32:8b:f9:16:
         31:0c:14:df:ea:5a:07:9e:a1:fb:03:25:42:50:e9:5c:b9:7d:
         47:55:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:04:58 2025 by rpki-client