Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97754029-c46b-3bb0-9481-573526234026.roa
File:                     97754029-c46b-3bb0-9481-573526234026.roa (raw, json)
Hash identifier:          TTqg2+drUZVgV+DMv1fqHTPCIQg859BAqPN7oFrggsE=
Subject key identifier:   21:AF:E5:EE:05:FB:9E:A2:DF:C1:E9:DB:7E:8D:B5:87:85:AE:CF:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870D092A78D33D009AC300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97754029-c46b-3bb0-9481-573526234026.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     40647
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0d:09:2a:78:d3:3d:00:9a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=1db8cff8-bcc7-42ee-9042-2c4ec8bc826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:6d:36:f3:92:da:ac:aa:d1:62:26:c5:7e:
                    f6:9c:91:bd:92:2b:5b:c1:55:31:6f:e8:67:45:f4:
                    c8:24:26:31:b1:1e:12:da:b9:0a:7c:08:ac:10:fd:
                    07:ca:3b:96:29:c7:3c:6e:48:65:2c:ce:90:5c:24:
                    e1:f2:e1:33:39:d8:84:59:8e:a6:ee:95:8b:ae:e0:
                    ae:97:12:78:77:4b:42:f7:b7:cd:07:e5:41:ee:3d:
                    5e:18:60:9b:4e:b5:1a:5a:12:9a:6a:24:9a:d1:e2:
                    41:6c:43:87:1a:6a:92:4f:7b:8a:25:a9:1f:42:2f:
                    62:fb:6c:b5:12:91:85:bb:ba:cb:1f:70:8d:5b:78:
                    bc:1f:94:36:3d:da:c0:38:b9:db:46:d4:28:ed:67:
                    ee:a5:4a:d1:d9:7b:ca:f2:31:b0:cf:cb:68:5f:1f:
                    3c:d3:c7:99:35:6b:d3:01:f5:9d:22:cf:53:6f:e6:
                    8f:f4:89:17:2a:dc:29:90:6d:56:b2:92:ae:14:c8:
                    bf:33:38:1e:75:25:39:a0:84:bc:43:33:39:ae:58:
                    e6:27:c2:98:b6:14:67:5c:06:e0:0e:62:7c:a7:da:
                    86:2e:a8:cb:37:ac:a5:9d:73:11:9a:33:12:b3:e2:
                    71:3e:91:1a:82:20:14:23:0e:15:a7:90:1d:43:1a:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:E5:EE:05:FB:9E:A2:DF:C1:E9:DB:7E:8D:B5:87:85:AE:CF:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97754029-c46b-3bb0-9481-573526234026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:14:33:c3:ea:56:00:70:d7:f7:19:71:3f:bb:ff:2e:ca:68:
         3b:24:21:6a:21:bc:c9:53:6f:3f:91:1c:3d:91:a2:19:a1:59:
         a2:f4:b1:d3:0e:c8:86:2c:ea:a5:f3:fc:83:e5:c6:33:22:0c:
         d4:89:01:c3:96:7b:a1:22:5f:14:cd:87:52:90:57:e3:c4:23:
         05:80:bf:4d:0c:55:21:93:d3:49:05:6b:df:9c:d6:68:ab:ea:
         05:b2:5f:17:28:22:4e:82:98:68:f1:e0:8c:ce:a0:65:0b:6f:
         ed:f2:35:b1:09:8a:24:fd:50:4a:49:3f:d7:61:40:6a:7c:70:
         52:76:98:fc:a7:9d:7c:bb:0d:11:8e:83:c1:71:8f:44:69:33:
         0e:82:dc:30:b8:66:78:8f:18:5e:40:50:40:45:c8:b3:d7:dd:
         89:61:29:08:60:56:fc:d6:b5:8f:c6:38:f0:c9:b0:96:3d:11:
         b4:56:26:41:7b:bf:9a:fb:fd:75:dd:de:40:ad:58:c0:f5:9f:
         26:50:6f:a9:20:db:7e:2f:d5:80:6e:09:01:2f:a5:61:35:7b:
         d2:93:16:c1:68:03:e8:4d:82:d4:52:7d:61:32:3e:76:43:b6:
         c6:c9:ca:9f:cd:1f:a3:86:1b:f7:c2:ae:12:35:c7:fd:6e:02:
         ad:2d:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:02:50 2025 by rpki-client