Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
File:                     9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa (raw, json)
Hash identifier:          55XsjhdqyeutFS+h3I57+xQ7OaeFfnsuz5azDyWK7Mc=
Subject key identifier:   39:F2:04:D8:42:81:FF:33:C3:1B:CF:70:E9:78:DF:F9:A5:6B:40:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE0319E5271A9E2145A2CBC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     396602
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9e:52:71:a9:e2:14:5a:2c:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=351e7e60-baf6-455c-a0ae-3db8437a69f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:a3:86:c9:d0:f0:39:e9:13:28:66:6c:f1:
                    8f:00:4f:e2:a6:f5:d8:1a:fe:fb:f1:be:19:6d:ff:
                    f1:04:18:29:aa:72:f6:2f:be:43:c0:e0:ef:ba:51:
                    5c:ad:fa:8f:18:ac:55:07:e9:18:cd:1b:d6:30:ac:
                    8f:1c:7f:f9:41:f8:cc:c1:16:78:05:4a:4f:c4:09:
                    58:c5:1b:55:b8:c9:a8:f2:ab:c4:97:c7:d6:20:e8:
                    8e:cc:d6:8a:99:d9:db:73:3d:50:c3:a6:e5:f4:04:
                    d7:d7:6b:78:a3:ef:03:91:e4:ae:a3:25:ef:27:38:
                    88:26:7c:0a:22:1e:58:fe:65:ce:e0:7a:59:1b:24:
                    ab:9e:11:11:da:4a:88:76:d4:5a:91:65:21:1b:b4:
                    17:15:64:64:ac:1f:e2:5b:41:ab:93:b2:1d:bf:2a:
                    99:88:7c:0d:c4:54:af:ed:0b:d7:2f:95:a4:1d:ed:
                    c5:51:ca:78:76:2b:ef:5f:cb:78:25:51:cb:e6:35:
                    34:55:16:5a:cc:33:89:1b:cf:97:30:66:f3:84:21:
                    d9:7b:c8:56:c6:06:7e:18:65:9e:34:80:36:b4:28:
                    5f:13:20:95:a5:2a:a3:75:5f:14:e1:ab:9a:22:8b:
                    1e:02:e7:4b:f2:03:75:dc:6d:bc:25:cf:4b:88:c9:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F2:04:D8:42:81:FF:33:C3:1B:CF:70:E9:78:DF:F9:A5:6B:40:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:38:2e:0d:00:91:d5:f6:06:01:31:25:55:ed:ea:0b:fb:55:
         62:33:3f:bf:12:7c:a9:79:4d:50:a5:eb:c0:ef:25:ca:23:5f:
         a9:d3:2a:b5:59:a1:69:83:23:fd:12:00:a0:2e:dc:2b:19:85:
         f9:e4:f7:fd:fd:88:73:80:df:1c:5d:d7:11:77:17:76:92:cf:
         ae:6c:d9:64:fd:42:5b:7e:9e:40:9a:ce:eb:d2:da:51:3d:c1:
         e5:4d:ae:52:63:6d:a5:6a:51:d6:8c:9f:9f:4a:6a:6b:be:67:
         29:ab:73:98:16:85:06:84:ec:ef:82:71:27:ea:b4:36:2b:6c:
         7c:00:91:75:ef:ea:54:9d:75:c0:e4:dc:62:48:7a:ed:32:4d:
         de:68:53:10:2e:b0:af:fb:4c:a8:a9:e1:5f:a4:b8:f9:ee:bb:
         c7:af:78:5f:61:e5:08:32:9e:73:92:67:29:1d:a1:6d:ab:06:
         c6:7a:c2:da:3a:d6:77:5c:e8:96:42:cf:eb:3c:b0:0b:e2:e3:
         ea:bd:d0:b7:41:1b:71:84:9b:19:63:64:2a:4e:47:49:a6:dc:
         49:ad:39:50:27:45:d0:e6:89:9e:a9:2c:f5:c9:64:f9:a2:45:
         5f:26:ae:25:01:12:6e:9e:39:fb:13:52:77:8c:b5:5f:50:80:
         ce:5c:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:14 2025 by rpki-client