Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
File:                     a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa (raw, json)
Hash identifier:          UfyqsyfSnF2EZJbFyMkWBigblNrteYK+nRsg06jV3DI=
Subject key identifier:   FC:4D:F9:19:7D:09:CC:9E:3E:7B:09:85:06:65:E4:BA:CA:6E:F0:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39871104561C11FAE2F37400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     10515
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:11:04:56:1c:11:fa:e2:f3:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=ebab5bbc-8b48-4872-b6da-1c85b5f09b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:04:cf:38:b8:2b:ce:1f:ab:68:c2:34:ef:
                    7c:3e:0d:e3:d5:42:d8:c4:bb:fe:b7:bc:39:2d:84:
                    f3:78:22:32:76:f1:e5:d1:13:be:66:95:c2:1d:b5:
                    92:eb:e0:fd:83:fb:0b:a5:53:61:b9:25:93:50:79:
                    37:5a:4b:99:bd:b6:fe:71:84:44:0d:52:45:04:b9:
                    5a:75:86:49:05:fc:9c:57:d7:4d:be:41:5b:37:07:
                    8f:4e:16:8e:76:8f:1f:7d:d1:35:42:7d:b1:aa:e6:
                    07:f8:35:78:eb:52:19:ae:7b:11:77:fb:ab:f3:a7:
                    32:c2:10:b7:15:1f:ef:10:16:d7:59:fc:3a:8c:8d:
                    d9:59:83:ab:26:61:54:90:29:57:af:ad:92:d1:4d:
                    59:c1:7e:ea:4b:bf:b5:42:38:07:cc:e0:8b:a1:3c:
                    81:7b:b8:67:28:d4:78:99:5a:9b:9b:3f:88:36:09:
                    69:ce:f2:a9:4c:86:83:2f:5c:fb:b1:b8:9f:57:b1:
                    5e:a9:21:dd:92:e4:d1:9c:06:e6:a6:32:03:5e:ed:
                    0c:72:36:5c:d2:5e:7e:62:4e:84:98:9a:b2:6d:c2:
                    5f:63:5c:c0:e5:88:c6:31:fa:80:5e:0c:f6:c3:7e:
                    ff:8d:4b:c5:ef:94:9d:a3:74:91:7b:67:c0:a3:6f:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4D:F9:19:7D:09:CC:9E:3E:7B:09:85:06:65:E4:BA:CA:6E:F0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:56:ac:ec:1d:a4:15:db:8d:19:17:b5:d7:b2:40:7e:b1:
         50:d8:f3:e2:63:68:64:1f:da:14:7d:e0:7e:40:c9:4b:8b:6c:
         bf:f0:36:9c:65:43:29:0f:34:bb:bf:2f:8d:3c:0f:81:a1:69:
         f9:8c:f9:f9:12:95:56:1c:af:3d:be:82:13:99:61:6f:cc:f1:
         66:2c:7b:51:75:7a:41:8c:21:2c:2e:06:99:eb:a5:55:24:75:
         a7:4d:64:bb:5c:13:9e:a2:2a:d4:b0:06:b8:c2:79:88:d0:2f:
         84:24:fa:aa:39:fb:a2:2f:05:0b:e4:1b:5b:28:84:8a:e1:55:
         56:f7:25:ef:d4:b3:2e:12:b5:19:3e:8e:87:c8:1b:30:70:4b:
         c9:b0:89:61:44:5d:2d:0a:cc:dc:37:df:8a:46:78:a5:0e:c3:
         6d:b4:c0:26:f2:6c:16:e6:63:e8:41:ec:12:6d:c4:77:05:f5:
         2d:3f:13:53:66:74:e5:47:fa:92:92:fe:be:92:78:9d:3a:96:
         29:af:6e:54:d1:8c:f6:20:77:6b:83:e2:1e:20:2e:fa:fd:89:
         12:fe:5e:d9:46:21:1e:5b:06:fe:07:96:89:73:f3:ff:4a:ae:
         91:5e:29:63:dd:c9:12:ac:9d:da:e5:4a:e4:cd:5e:81:c9:4a:
         aa:a7:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:26 2025 by rpki-client