Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa
File:                     a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa (raw, json)
Hash identifier:          c5hFUv+0YjQsveWIXAqIU6OOqASLOqpGFrZ5N/rgUls=
Subject key identifier:   1F:36:9E:B7:C9:70:7B:13:64:01:92:C7:A9:5D:45:8A:80:0A:10:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B17430B313E385747B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396599
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b1:74:30:b3:13:e3:85:74:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=cad155ac-1b46-4bf2-a064-f95e5c8b08c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:2f:66:53:08:f3:f9:5f:1c:e1:4a:ba:2f:
                    29:9e:69:78:46:09:ad:be:59:1b:5e:71:f3:45:33:
                    14:43:80:23:6c:79:bc:ff:f8:3c:01:98:df:28:59:
                    ee:11:5c:68:38:b9:17:05:41:1c:b0:f9:d5:fd:bd:
                    65:51:cc:62:d8:67:05:92:d9:bb:78:7e:67:16:41:
                    e1:73:1c:c7:5f:5f:31:97:55:44:98:53:72:5a:1d:
                    0c:b5:1d:10:e7:49:0d:10:4a:01:6c:bd:ff:f2:96:
                    b5:82:36:dc:09:54:8c:ce:46:d3:d7:15:9f:1a:e5:
                    0d:5d:52:48:7d:ce:69:96:fc:04:cb:19:7f:6b:9c:
                    71:78:de:6d:31:3f:f4:bf:6f:ee:93:d6:0c:58:7e:
                    a6:27:45:11:09:83:de:83:39:9c:60:27:a3:45:cc:
                    49:66:68:8b:ac:8b:61:a6:da:0b:b4:a4:25:80:94:
                    a2:42:db:8f:7e:1e:55:f1:7e:08:b4:f9:a2:f2:5d:
                    63:12:fd:4a:f6:a4:1b:72:bd:68:0b:73:57:d3:7a:
                    7a:9e:ac:dc:db:5a:28:eb:ae:21:2b:4e:d5:5c:a5:
                    d8:5f:ca:b8:d2:ce:bf:6a:db:19:ce:98:fb:7d:dd:
                    12:df:62:25:67:e5:43:ba:47:b2:f7:69:fb:8b:b1:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:9E:B7:C9:70:7B:13:64:01:92:C7:A9:5D:45:8A:80:0A:10:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8349583-d7cd-3ef6-ad88-9e6b1c2a9c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:87:c1:1c:b7:95:39:89:79:31:69:b1:28:cf:57:45:0e:3a:
         eb:d9:30:14:07:a7:f9:ff:9b:7b:22:0a:48:40:72:bb:d0:b6:
         75:6d:e6:38:5c:bb:e4:9a:4b:a9:09:9e:ef:ce:d1:04:a7:44:
         5a:cc:df:3b:40:90:b3:db:d5:fe:47:b0:4d:10:87:07:c6:29:
         dc:49:de:37:c0:33:fc:d4:88:e9:59:78:a7:da:5b:3f:d2:60:
         d7:a6:38:06:e8:0b:d8:83:7e:73:d7:e6:13:4f:d1:16:a7:6b:
         88:73:c7:73:0c:84:66:bc:f3:2d:0e:92:fd:d7:98:4f:8b:5d:
         de:2d:41:90:94:48:3a:bb:69:4c:98:f8:b1:23:c5:ba:cf:cf:
         6f:7e:11:01:27:d2:7b:ae:b6:af:25:ce:31:31:bd:b5:5e:2c:
         af:ca:95:61:3f:d5:67:75:3f:ac:72:83:36:26:8c:18:a0:14:
         b2:cd:65:f1:5e:be:4b:6e:37:21:2b:fa:69:47:46:79:29:d2:
         02:47:51:af:54:a0:07:0b:5a:44:54:11:e2:31:11:08:81:c7:
         1b:d0:d3:87:17:e2:95:63:15:78:4d:93:4f:19:e0:d9:12:4a:
         2f:55:ff:d5:33:9b:de:f6:48:67:9d:b3:dd:18:bc:54:04:32:
         9b:5b:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:38 2025 by rpki-client