Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e74fd0a-7ea8-34bf-b807-b884e9a08bd3.roa
File:                     8e74fd0a-7ea8-34bf-b807-b884e9a08bd3.roa (raw, json)
Hash identifier:          0/2ivaAECWfa+tRls5cPzZ0iI6ZNPtmM75l6FXijF1s=
Subject key identifier:   68:1F:19:79:2A:5C:75:A6:A7:D7:CA:BB:D7:BE:26:03:40:69:C4:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E79FE789D2A3CE3F1280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e74fd0a-7ea8-34bf-b807-b884e9a08bd3.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396555
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e7:9f:e7:89:d2:a3:ce:3f:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1e9f3908-c31b-47ae-883c-842b5c898531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:a3:6a:85:81:e4:f7:29:86:6a:57:ad:73:
                    1b:2b:c6:f5:c5:87:72:74:aa:cf:21:8d:b4:36:4f:
                    48:66:d4:f6:c6:72:65:5d:1c:63:44:a5:cb:e9:d8:
                    ea:6c:78:94:69:1b:b5:01:a6:a0:58:db:44:a3:79:
                    b8:62:36:86:0b:88:42:19:e7:fe:40:54:2b:a3:c0:
                    15:e7:83:f8:d3:00:90:1b:d8:5e:34:f3:1a:1b:20:
                    01:13:c7:b8:56:56:cb:f3:ce:09:45:c4:5e:ed:25:
                    44:9e:86:1e:fb:c2:26:6c:97:cd:31:21:b6:6e:8c:
                    35:24:f3:92:db:ff:eb:8a:c4:5b:c6:c6:31:b4:4e:
                    0b:38:28:de:e6:9e:24:58:97:f1:e2:b4:46:30:e1:
                    72:39:fa:58:ff:52:39:93:49:47:bc:0f:24:a9:0a:
                    44:86:2a:99:6b:a9:f1:0f:01:70:69:17:04:99:e8:
                    99:ce:af:af:87:88:a4:70:7c:1d:77:2b:d3:82:c3:
                    f5:05:47:74:40:c9:57:57:38:22:d3:0c:a5:59:9c:
                    bb:69:97:d4:a3:6c:92:5c:6e:90:3f:98:9c:d4:2e:
                    9f:69:c5:93:e5:69:d5:f9:79:8c:f3:79:09:47:06:
                    8d:91:0c:3b:13:ee:e7:39:f9:82:6d:df:25:d2:8b:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:19:79:2A:5C:75:A6:A7:D7:CA:BB:D7:BE:26:03:40:69:C4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e74fd0a-7ea8-34bf-b807-b884e9a08bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:73:00:65:db:95:e7:55:08:f2:3f:aa:86:42:2a:d0:96:84:
         a0:e8:fe:00:f4:89:1e:07:a8:4a:ee:30:f5:00:07:41:51:7a:
         a8:52:44:9e:ab:cc:9b:76:cd:6f:56:77:7e:d5:24:4f:cb:6e:
         ec:5f:d6:44:81:ae:f8:3f:a5:29:fb:b8:02:e6:ba:d8:eb:e1:
         4c:61:b7:56:8d:03:8f:c3:4c:ed:66:7e:27:80:37:6d:4c:e5:
         40:51:92:f9:7e:73:6e:d0:87:ab:24:31:54:7e:a7:18:23:a3:
         d1:fe:de:cc:5a:7a:8b:1e:86:bc:aa:18:90:28:87:c2:9c:8c:
         50:1b:7c:c5:25:de:e1:f2:63:3a:aa:82:0c:26:de:f0:01:ac:
         d4:b8:04:07:5e:05:c9:92:22:34:eb:cb:91:56:7a:41:b6:86:
         e3:5b:ae:d1:28:8d:b4:f8:dc:5e:3d:2d:82:31:2c:eb:57:a9:
         2c:c0:1c:12:7a:d6:1c:79:ac:15:22:58:25:ff:10:13:28:e0:
         82:86:8f:af:e1:9b:e9:b2:e9:ce:60:62:a6:eb:6f:2d:90:6e:
         c9:53:ac:3c:76:66:53:4b:5f:f1:82:2c:d0:63:e5:12:40:fb:
         09:65:c8:57:d1:a5:3c:90:6d:dc:ae:94:66:74:54:9c:55:6b:
         8a:ef:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:08 2025 by rpki-client