Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b090a52-754b-333e-838c-f8d4396e42b8.roa
File:                     9b090a52-754b-333e-838c-f8d4396e42b8.roa (raw, json)
Hash identifier:          /Zz/y7SFFILLhxlJUrxAP79ui1FdoROcQqwijp92GYI=
Subject key identifier:   51:D4:D9:1A:1E:26:B6:39:A5:53:F3:98:B0:74:56:41:AA:D4:27:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E7738166D0B767BF464A638
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b090a52-754b-333e-838c-f8d4396e42b8.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     36619
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:38:16:6d:0b:76:7b:f4:64:a6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=95733def-b313-44c2-a379-fbacb385118d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:6c:5d:fb:62:1d:dc:ed:46:81:1d:e1:45:
                    24:68:9b:93:49:85:e1:52:6c:b0:ae:14:67:5a:e5:
                    f7:16:30:45:f1:3b:d7:8e:ac:a7:1d:5b:e7:be:f0:
                    29:34:bc:f5:f1:9a:26:07:16:68:d8:a4:eb:39:eb:
                    a9:5e:0c:44:0e:bf:cf:99:c7:f5:66:22:d1:ef:94:
                    b4:51:01:5d:0f:6c:6c:67:29:45:81:b9:1e:3c:7a:
                    7c:86:8e:ae:d4:3b:52:cc:29:d9:9c:12:c2:99:ef:
                    73:70:92:a9:4e:c9:02:78:d5:63:fe:04:61:ee:4e:
                    ba:3f:00:e2:c0:6e:88:ee:37:fe:7f:8b:8c:f9:e5:
                    72:35:20:f8:12:a1:ec:53:c7:55:99:b7:54:97:29:
                    1c:c7:0c:c0:d4:1c:7c:44:70:01:48:c3:9d:15:fc:
                    72:9d:55:12:46:37:8d:a1:c9:89:ab:a3:2d:23:76:
                    ec:44:0e:ce:6a:8b:45:d0:40:68:ee:5e:86:0c:a5:
                    3b:47:c1:a5:e8:c5:73:cf:6d:b8:5a:3d:a8:2b:86:
                    e8:63:26:e5:1c:d3:d8:6c:9d:14:ca:d6:4c:a6:0c:
                    5d:97:3b:b1:a9:79:a5:d7:90:d7:f7:75:b3:94:9c:
                    17:da:39:e8:a3:5c:ec:32:cd:7a:a2:a8:27:1f:a9:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D4:D9:1A:1E:26:B6:39:A5:53:F3:98:B0:74:56:41:AA:D4:27:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b090a52-754b-333e-838c-f8d4396e42b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:39:29:a2:44:37:36:11:f5:bd:7b:43:b5:9a:24:e8:ba:ba:
         7d:e1:5e:d5:22:05:d9:16:1e:be:7e:eb:24:80:dc:29:aa:f9:
         4a:e5:01:83:48:3f:16:1e:85:6d:75:b8:4f:12:c1:64:74:eb:
         97:a8:53:dc:36:bf:9a:dc:70:98:67:7e:ba:89:61:29:82:53:
         19:68:69:c4:2a:c9:97:50:dc:c1:21:b1:4b:a1:46:a6:ea:5b:
         49:db:3f:83:16:aa:e0:79:66:e7:e3:ee:eb:1b:41:94:4a:44:
         ef:19:aa:8c:3e:6a:e4:0c:f2:a4:e6:eb:99:9a:60:06:01:bc:
         5f:75:85:8c:fc:bb:04:4e:c0:a3:fc:64:56:a5:ef:95:e1:b1:
         51:a0:7b:af:fc:00:12:50:21:47:53:d2:e1:12:84:46:8b:14:
         3f:12:38:26:10:df:30:31:3e:b4:10:07:d9:3e:b3:77:b5:62:
         e4:91:45:72:75:e7:42:42:22:09:af:e9:5b:01:0e:d3:63:de:
         ce:8b:7e:c4:c7:78:d2:13:af:f9:2c:04:50:52:b8:02:cd:34:
         e8:2d:08:23:b3:45:78:f7:ac:cf:a8:88:e4:21:f3:c5:13:ab:
         d9:eb:2a:35:81:76:91:79:84:e0:3f:63:fb:49:93:df:4f:56:
         39:19:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:25 2025 by rpki-client