Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c9e945a-1d5f-39ce-9a57-fe667c810605.roa
File:                     9c9e945a-1d5f-39ce-9a57-fe667c810605.roa (raw, json)
Hash identifier:          T9/Py0g0Wy3MnORVyfwurwMWzieG5LUH6TtHxxGaiAc=
Subject key identifier:   FD:72:70:73:18:9C:8E:7F:A6:FD:85:DB:2E:AE:2B:50:05:1F:F0:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331AFFEA615CBFA2A04B6FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c9e945a-1d5f-39ce-9a57-fe667c810605.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396571
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ff:ea:61:5c:bf:a2:a0:4b:6f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=87d98def-2518-4b55-bb87-f6c88f738b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:ed:e5:90:18:7a:96:2d:b0:79:1b:b6:7c:
                    e6:7c:83:33:fb:18:d6:23:64:ea:41:d0:65:5b:3b:
                    53:4d:1f:6f:6a:eb:dd:de:d4:30:43:d6:00:20:94:
                    98:22:b1:e0:54:68:39:e9:41:8f:3a:f5:e1:9e:ce:
                    f0:dd:ef:b3:3f:8b:50:68:c6:7c:f0:f8:d0:56:e8:
                    81:ae:28:31:1b:86:2b:23:57:e0:4f:3a:86:42:96:
                    b0:10:3b:6a:4c:49:10:e9:2d:15:42:f8:e1:ff:0e:
                    e2:9d:2f:09:ef:86:ab:45:ee:93:76:0c:89:fa:70:
                    47:ea:a7:f0:6f:f8:44:ff:f1:02:7d:dd:16:92:b5:
                    0f:bd:b6:cc:5c:bd:29:3b:c8:45:53:55:29:ed:3c:
                    12:46:d2:d6:d8:e6:5b:c6:4d:e2:17:47:1f:89:25:
                    18:e8:e4:53:5e:25:69:e0:60:1b:2e:d1:3c:a3:2f:
                    db:e0:8c:7b:34:56:30:4d:91:67:cd:bb:a3:d0:e7:
                    c1:89:05:ec:17:36:44:61:d5:c0:4e:5f:df:3b:52:
                    8e:61:37:33:95:be:60:57:b9:9e:73:0b:0c:65:8d:
                    f0:be:2b:4f:5c:76:c5:18:c3:cf:85:3e:05:f4:c6:
                    de:dc:a9:98:69:04:a8:fa:07:a7:4b:6e:fb:83:a4:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:70:73:18:9C:8E:7F:A6:FD:85:DB:2E:AE:2B:50:05:1F:F0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c9e945a-1d5f-39ce-9a57-fe667c810605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:2f:6e:78:3a:21:4a:ad:da:ed:54:94:35:4e:74:09:ed:8e:
         3e:ba:5d:a1:d0:9a:0a:7d:af:28:44:e5:e9:b2:7d:2e:32:44:
         b3:07:f9:c6:af:9f:4c:08:2d:a6:e5:80:6d:4c:fc:86:97:90:
         ce:89:54:4f:11:5c:d9:e6:dc:36:0e:50:06:dd:2e:16:78:6c:
         f4:fc:75:6b:0f:d5:08:66:58:8c:92:f0:b6:90:14:2e:b5:d7:
         01:8c:f6:d8:b1:7d:1c:34:1b:93:f2:c5:f7:e8:13:a5:40:ff:
         0f:62:3d:1a:df:bd:65:33:da:64:0a:7c:4e:14:69:3b:8c:43:
         48:5b:bb:e7:97:a1:30:0d:53:8c:4d:69:08:c0:56:82:26:e9:
         a7:fb:46:72:bb:06:81:04:70:98:f4:83:ef:40:9e:5e:4f:37:
         69:3b:73:64:36:db:36:a2:48:43:9c:8a:fb:88:97:80:fd:94:
         a4:e1:7c:83:54:6d:0a:a5:fe:4c:dd:c6:44:8e:dc:48:0e:7b:
         a3:b8:16:aa:94:9a:93:48:64:b3:2f:f5:bc:40:34:87:ef:dd:
         70:18:3a:ae:4f:38:8c:9c:69:81:d1:bf:56:44:65:7f:a1:1e:
         44:7f:40:47:5d:0b:c5:f8:b9:c6:b4:bc:ce:12:ff:02:e1:08:
         ac:1c:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:44:38 2025 by rpki-client