Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9899ea57-89c6-32b5-8e2c-671e24d787d6.roa
File:                     9899ea57-89c6-32b5-8e2c-671e24d787d6.roa (raw, json)
Hash identifier:          kgDt2V/GKhjVCifF8uzJK92PwpF2gOrlG581nHhY4so=
Subject key identifier:   61:7C:9B:E3:B6:59:77:5D:81:77:A2:76:C7:1B:A6:73:57:2B:33:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B398711AA326B37EE9BA5BB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9899ea57-89c6-32b5-8e2c-671e24d787d6.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     36628
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:11:aa:32:6b:37:ee:9b:a5:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=6dfcd728-97b9-4e1b-a36c-0374e9ce25ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:04:3b:75:96:f1:9c:5e:bf:c2:2f:33:c8:
                    cb:89:ca:b1:6a:da:75:1e:75:70:63:81:60:23:1f:
                    d5:58:e0:f5:44:ed:32:ff:86:fd:21:5f:69:b6:0e:
                    dd:20:09:65:5a:35:92:1d:03:11:4b:a8:77:04:c2:
                    42:92:aa:8c:7d:0b:48:e6:7e:51:05:1e:4a:86:f1:
                    c6:8e:cb:cc:b7:88:34:10:9e:5f:59:7c:52:d9:1b:
                    01:91:19:b2:35:2e:d7:dd:3f:cc:e7:2c:d9:ae:fd:
                    21:e6:7b:fb:4e:d5:9c:0b:af:b2:e7:6c:fd:82:ef:
                    ec:b5:68:d2:79:97:bd:5e:b0:e5:0b:b1:1a:dd:af:
                    66:1d:78:63:58:a9:ee:13:fb:f4:78:9e:8c:8c:61:
                    d8:27:3b:d8:fd:21:40:6e:50:02:1e:87:79:df:5b:
                    49:5e:52:2b:b3:9c:dc:1f:a3:c9:12:92:14:ae:49:
                    f7:bf:1b:d8:38:5e:d3:9c:cb:a2:27:85:2d:8b:bb:
                    25:53:bb:bb:c3:47:66:92:27:80:17:09:d5:c2:74:
                    54:6c:cd:fa:fe:d2:1f:e8:2c:22:9b:b0:c7:be:a1:
                    15:d2:0c:6b:fa:20:e5:20:91:ab:ba:51:08:76:42:
                    69:20:58:70:75:03:84:d6:36:39:ef:d7:97:ef:59:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:9B:E3:B6:59:77:5D:81:77:A2:76:C7:1B:A6:73:57:2B:33:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9899ea57-89c6-32b5-8e2c-671e24d787d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:78:8d:4f:cc:3f:fa:bb:c2:49:d3:6b:8b:0a:0f:8f:84:
         d7:4f:4c:10:5c:60:1d:91:57:8c:e9:0d:af:f6:6c:74:b0:83:
         e7:be:11:83:56:61:55:4c:b7:74:22:2b:1a:a6:d1:6d:4c:a0:
         c5:eb:98:3e:68:1c:7f:58:04:5b:9a:aa:e4:e2:f2:50:c3:27:
         95:90:66:d0:79:c3:56:60:f7:fd:0d:fb:07:13:72:92:05:c0:
         69:05:1c:dd:92:de:50:bb:88:ac:6e:5a:a0:df:16:d5:46:ee:
         4c:c1:bc:b0:f6:f6:53:22:26:ea:cf:5f:4e:72:39:50:5d:bb:
         99:ec:75:12:e7:7f:e2:48:3e:c9:73:66:d1:61:66:02:4c:22:
         c2:a4:7f:7c:ab:e4:ad:6c:78:f6:27:e3:bd:eb:19:03:f3:34:
         a4:49:7b:9f:dd:d8:6d:70:01:6b:0f:39:ab:f6:8e:4b:74:0e:
         56:4f:57:86:6d:bb:a9:74:28:c8:33:f5:e5:21:01:f6:bc:27:
         f5:00:a9:4f:c0:c8:5f:84:de:b3:86:e9:6b:00:d2:8b:ac:5b:
         39:eb:4c:65:a2:ab:ca:a9:27:17:48:4c:6a:60:61:0d:f2:21:
         c9:ed:0e:23:23:08:89:25:77:28:08:6c:93:80:0d:d4:8b:81:
         70:e6:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:46 2025 by rpki-client