Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa
File:                     8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa (raw, json)
Hash identifier:          YOaMqv3o4uS5dl32fdSrzlyLROi6xjadXT+ato4uvy4=
Subject key identifier:   F6:DF:33:AA:09:54:4C:6E:DA:F2:84:3E:00:E8:6C:97:D4:DF:0B:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B398712757BC06E9A68277800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     397200
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:12:75:7b:c0:6e:9a:68:27:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=bc35f5fe-c1ff-43d8-ae83-3a1634f40ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:81:35:43:2a:e0:3c:a4:b8:ab:40:ef:33:
                    02:78:f4:50:fc:56:e1:6c:b4:32:ba:c1:2f:21:43:
                    10:b5:a9:3f:e8:92:85:e5:da:24:b6:f9:bf:31:a9:
                    80:71:50:3b:f7:83:94:a6:44:e7:4a:3e:02:3f:4b:
                    52:ed:5b:de:e3:44:63:75:19:97:b6:15:40:f8:f4:
                    29:a1:a3:9d:02:45:91:db:e1:ba:27:80:ee:dd:14:
                    43:15:8c:eb:33:24:a1:77:dd:69:55:3e:69:95:4c:
                    90:6f:1f:fe:fb:b1:71:44:46:e8:c2:84:f4:8d:d5:
                    2b:26:84:1f:81:39:6a:2d:6f:95:fc:fa:71:1c:dc:
                    a1:35:de:5d:bd:e0:19:8a:7a:e5:2d:e7:97:99:5c:
                    76:10:fc:56:ad:6a:df:ab:46:68:ac:60:82:7d:a0:
                    c9:16:ff:70:a4:2b:10:de:98:1b:d4:12:80:64:b6:
                    85:57:a3:4d:96:42:2f:de:e7:5a:1c:ca:14:69:ab:
                    09:04:94:cc:df:e7:f8:34:96:1f:d2:f7:b7:80:d1:
                    fc:40:be:2b:e7:07:16:41:ee:d3:47:dc:26:a2:ce:
                    4e:c3:45:1e:aa:24:63:94:fb:69:53:40:93:17:8a:
                    d1:59:fb:02:1e:d4:b4:65:19:20:c2:e4:2b:e2:b6:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:33:AA:09:54:4C:6E:DA:F2:84:3E:00:E8:6C:97:D4:DF:0B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:8c:e3:3b:49:22:97:2c:e9:09:f1:f4:0a:a1:80:6d:55:
         fb:c7:e4:45:c3:45:60:88:ef:0f:60:23:11:67:b5:f4:0d:db:
         fb:ee:95:9f:b2:86:56:85:29:4f:31:03:fd:2b:c5:ba:5f:1e:
         0a:60:4e:e5:9a:7c:8e:e7:dd:66:fa:9e:fe:e5:c2:f0:66:4f:
         aa:72:1e:91:ff:a7:d2:23:26:0b:4b:12:1e:7a:ac:da:8b:99:
         31:cd:d6:76:9d:29:ac:d5:41:d4:8e:08:5e:9e:5f:3c:95:4d:
         0d:af:dc:21:74:eb:ba:f7:18:b5:0e:47:7d:07:cb:d1:e3:ad:
         30:0f:49:ec:81:37:85:8f:4c:51:05:df:ba:23:25:be:07:37:
         d9:5f:a0:e9:2a:35:5a:c1:9d:1e:03:f8:f7:0d:a6:ef:f5:7f:
         cc:6e:f8:82:ee:91:e5:a4:1e:49:60:4b:df:15:1d:8a:fd:a5:
         bc:c0:a4:79:99:49:2d:46:63:95:69:5a:f7:5e:ee:06:26:43:
         31:e2:ee:81:5b:3a:12:a1:eb:63:c5:7c:45:18:d9:7f:76:50:
         75:55:d2:60:62:80:15:fb:2e:05:5e:43:09:1e:ce:ab:69:6b:
         1b:93:23:8f:11:29:51:0a:ba:b7:b6:bb:2c:94:ca:f8:56:48:
         42:78:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:57 2025 by rpki-client