Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa
File:                     9f95ef66-277d-301c-a319-98353b50df8b.roa (raw, json)
Hash identifier:          ud9u1Np/QPn3Z1Lr6YzdzHjz3E1CWeawjY+6C7YtYJw=
Subject key identifier:   BF:17:BD:E3:1E:1D:F2:89:4D:A3:4C:21:AB:CB:C4:4B:45:BB:AA:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C84A3A2FD64A5D815B300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396574
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:84:a3:a2:fd:64:a5:d8:15:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=2e61f8c6-679d-406e-b68b-b3d1d6e00fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:5d:f6:f7:17:9a:39:21:15:0a:95:07:d7:
                    bb:6e:43:69:24:36:f9:ee:54:55:e0:c6:28:aa:3f:
                    79:e4:c5:ca:68:f3:57:c2:b5:24:04:f3:d8:06:61:
                    3a:81:a4:d4:59:41:1f:cd:9b:71:fd:ea:d4:d8:76:
                    c2:65:b7:11:17:47:45:07:20:2a:12:7e:b2:82:7a:
                    c2:03:51:43:be:04:f6:b9:18:3e:fa:d1:6a:69:a1:
                    c1:0b:02:ef:f5:17:36:03:59:c1:0d:27:8b:b9:dc:
                    fa:f7:fc:d6:8b:ce:15:18:24:10:35:ef:d7:1c:2c:
                    16:e4:92:5f:03:e8:93:e8:9d:80:31:3d:f4:55:4e:
                    6e:ab:1e:a0:8f:d3:9b:26:ff:b6:30:58:c4:9d:92:
                    92:c7:93:f3:f5:ba:a1:c2:2e:82:e6:98:42:05:19:
                    68:10:05:98:33:6c:0e:6b:a9:c8:56:c9:12:7b:49:
                    61:96:e0:4a:e9:8e:75:a8:77:ba:e4:09:31:4a:00:
                    cb:16:96:80:55:89:59:02:f7:34:fa:96:86:13:d0:
                    ec:85:94:c2:6a:f0:88:5e:cb:2a:2b:85:86:dd:de:
                    ad:8d:33:79:57:fe:1f:4d:1d:58:ac:88:fd:13:d6:
                    72:b2:fc:cd:75:c5:33:fe:42:d7:51:93:91:c3:db:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:17:BD:E3:1E:1D:F2:89:4D:A3:4C:21:AB:CB:C4:4B:45:BB:AA:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:fb:05:0f:c7:b4:c4:d1:db:d9:6e:11:de:a3:4b:92:f2:
         78:8e:40:8a:0b:ef:35:51:ec:c0:68:98:f2:2d:a8:08:dd:14:
         8a:75:b1:96:6a:48:9c:95:99:2c:8a:4e:ec:dd:89:ab:3c:83:
         ff:80:b5:9b:2b:cb:00:3c:8e:27:cc:38:69:ea:84:8d:82:55:
         6d:83:fd:79:e2:17:e1:84:85:80:e9:78:c4:02:90:b0:96:9c:
         a8:3d:9b:d2:6e:b1:a5:be:dd:23:6e:50:56:8c:fb:a1:94:e2:
         ea:0c:72:42:db:5f:94:27:e9:28:76:18:68:af:98:ee:60:12:
         5d:7c:e1:25:42:32:ac:ae:f9:e3:e5:1d:60:49:66:12:a1:c1:
         8a:98:3e:ad:f8:b3:9e:73:ff:af:e1:e5:e9:30:ca:fa:51:ca:
         cf:81:9b:49:26:1a:f1:2c:8f:e4:5f:cb:98:a8:d0:44:3b:4b:
         2b:a7:aa:2b:43:4d:0e:28:5f:56:19:ea:65:14:c4:ad:ff:69:
         a3:71:2b:93:f9:65:eb:77:02:cb:74:09:67:a3:01:74:63:85:
         5f:fb:bb:a0:d3:d1:a6:fa:d5:a2:b2:15:5e:d3:a0:9c:c2:1e:
         c1:c8:a2:87:a4:d9:93:e6:fe:14:8c:26:7f:07:e6:f3:18:1f:
         2a:70:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:40 2025 by rpki-client