Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/919fb181-ce98-3fe7-8e43-3e188c8d20af.roa
File:                     919fb181-ce98-3fe7-8e43-3e188c8d20af.roa (raw, json)
Hash identifier:          JeZLAy2lx6Kp4Y4Q5lu/89u0K8onkIdJ2kipflh3Xew=
Subject key identifier:   31:71:D5:02:B0:79:28:C6:94:DE:F3:27:85:F1:5A:6B:B1:DB:D7:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EF563FE3A041FDB42F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/919fb181-ce98-3fe7-8e43-3e188c8d20af.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396543
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ef:56:3f:e3:a0:41:fd:b4:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=318691c4-8d6c-4610-a300-6827f48dcc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:d1:b8:1e:e2:2c:98:31:30:54:7c:a1:10:
                    28:9d:61:81:3d:d6:b6:9b:c5:a2:9c:cc:2c:66:d0:
                    4a:8d:f0:a2:ef:65:ce:29:6f:ba:60:0a:b3:9b:93:
                    a1:25:a3:12:39:d5:a7:12:71:1c:33:6d:33:81:0c:
                    cc:29:5e:ad:75:b0:17:08:ce:39:2e:d0:96:ac:c0:
                    a0:1a:00:0a:e4:6b:df:1f:95:e0:96:e1:e5:97:cf:
                    01:3d:db:29:02:16:e1:3e:b8:b4:bf:10:12:b0:bb:
                    69:2e:c9:22:84:2e:0a:e1:cd:db:78:20:30:04:eb:
                    c2:82:48:89:26:24:3a:bd:e7:d7:6c:cb:73:1d:e2:
                    0c:f9:d5:00:0d:3a:ef:af:e6:d0:b1:6f:c2:27:64:
                    45:8c:37:4d:c0:2d:84:dc:7f:d3:b7:9f:ac:b3:f1:
                    4e:fb:74:f8:18:45:37:38:53:be:ad:c3:3c:5d:8f:
                    6a:dc:b5:14:b0:3b:d1:57:f1:51:2d:fc:a9:81:33:
                    66:81:54:36:a3:ec:f9:1d:68:d2:11:42:11:c1:4d:
                    d4:d7:5c:40:ac:e3:cc:52:25:8c:89:91:e6:32:47:
                    ad:75:c0:e8:48:68:8b:64:92:b2:4a:39:db:7a:e3:
                    c8:a3:a2:40:bf:c9:9d:76:40:d0:c4:39:64:01:b1:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:D5:02:B0:79:28:C6:94:DE:F3:27:85:F1:5A:6B:B1:DB:D7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/919fb181-ce98-3fe7-8e43-3e188c8d20af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:92:99:e5:22:be:e9:a2:68:d7:82:ef:aa:83:68:48:25:3d:
         77:4c:58:c9:7a:51:4a:11:69:cc:c7:31:57:99:f6:2b:8d:e4:
         65:af:c4:06:c7:56:76:5c:02:c5:b0:37:93:92:36:f6:f9:08:
         ac:13:57:67:36:29:42:5e:19:93:41:70:75:6a:45:b6:81:41:
         8c:f9:3b:79:dc:eb:cc:6b:f7:38:fc:56:56:33:19:c5:ee:c5:
         d2:a1:5f:cd:d4:0f:af:6e:c7:48:28:62:c8:2e:30:85:42:e4:
         bb:a5:40:a5:f5:b4:99:21:35:c6:b0:ca:fc:18:1f:74:34:90:
         a8:ee:c1:88:82:c4:42:80:d4:1b:d2:19:94:94:dc:5c:b7:4c:
         11:c2:14:74:60:e3:52:ba:af:e5:40:67:a1:38:25:60:a2:d2:
         71:8e:cf:a5:e4:b4:4b:15:e2:38:85:72:72:63:eb:51:5f:82:
         05:72:be:2d:97:73:1b:8e:dd:30:27:7c:aa:f1:58:8f:de:34:
         fc:23:90:3d:92:79:b6:09:7d:fa:01:ce:9a:37:cd:7e:ce:19:
         cc:1a:9e:60:58:19:9f:ad:e4:4a:a4:43:cd:ad:28:4a:c3:0d:
         dc:2e:c2:eb:86:27:38:41:0f:1e:1e:95:a3:55:7f:d1:b5:a5:
         23:ee:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:12 2025 by rpki-client