Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa
File:                     a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa (raw, json)
Hash identifier:          SFwB/SRfXgocxCnfpcvFiWFbDIeZzurYcMAHwzEXo9A=
Subject key identifier:   41:63:6F:00:40:96:69:8B:91:9B:E8:B0:62:D0:B9:69:C3:9D:85:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B39870EE971A4A633DC85B490
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     396562
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0e:e9:71:a4:a6:33:dc:85:b4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=c6efc0ed-8293-40f2-b61b-a78a1418f6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:b0:49:0b:e8:3f:fd:e1:3b:be:d7:be:5d:
                    92:31:2f:d3:08:cc:57:de:bc:a5:01:a0:4d:cf:ae:
                    b7:20:d2:91:4d:5f:73:8c:40:82:7d:b2:f0:62:2c:
                    d9:0e:06:03:f1:55:9a:c5:ab:ac:ce:99:1b:c8:be:
                    e8:7b:a5:8a:08:0c:1f:73:e0:c8:af:f4:3a:37:6b:
                    7b:06:6b:60:58:e6:75:ac:7e:d9:55:56:fd:b4:26:
                    f4:6a:2d:29:1e:89:04:5c:b4:7a:ea:50:8a:17:8a:
                    77:01:9f:1e:f3:b5:b9:62:0e:d3:2f:7e:d6:f9:0a:
                    98:87:16:70:ea:f6:8c:d5:a7:b3:ec:e6:5e:59:e9:
                    8a:e4:17:fd:34:71:1d:96:b4:c5:4f:8c:a7:8d:93:
                    91:cd:80:3c:0e:17:93:ad:de:e4:d2:ab:e0:c6:64:
                    3a:15:ff:2d:13:74:e5:3d:32:76:c5:c5:d9:36:27:
                    b5:d0:d9:f2:52:5a:b6:e2:99:e1:08:1b:3a:0c:88:
                    aa:f1:ad:54:bd:10:64:b6:fd:61:25:14:35:cf:fd:
                    47:33:ad:1a:78:1a:05:2f:92:1e:a6:4f:9e:cf:fd:
                    20:43:60:08:08:a3:3c:f1:f2:8c:b8:77:3f:51:d1:
                    d0:88:88:0a:81:fe:44:09:ec:16:20:28:8e:3b:a4:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:63:6F:00:40:96:69:8B:91:9B:E8:B0:62:D0:B9:69:C3:9D:85:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:76:cb:7c:ef:35:27:21:1b:d5:26:28:d6:84:3c:01:8c:fb:
         62:87:5c:a6:d6:63:e0:04:cb:28:a2:7d:a4:a0:42:eb:0c:83:
         b9:9a:2c:54:27:0d:fd:e1:e4:1b:7d:a5:77:7b:a4:c2:38:13:
         9a:ab:de:7b:72:74:51:15:22:c2:b6:27:95:90:bf:14:8e:85:
         6a:09:92:9e:f6:09:a8:67:46:6d:f9:da:fc:76:98:74:9a:6a:
         d7:7b:2c:52:01:df:d8:d9:f0:9e:62:40:33:38:7c:75:c1:dd:
         5f:c3:7c:71:bd:63:2e:78:9e:ee:07:7c:2f:78:08:c6:2b:4f:
         8a:a7:da:9c:89:5e:7d:6f:38:81:84:e4:73:dd:31:85:2c:eb:
         fe:14:eb:44:ec:f4:f9:05:89:3b:d8:fa:40:51:44:a6:80:a5:
         1a:12:90:44:ed:a0:f4:72:c8:af:8e:a3:8e:8d:f4:b5:14:76:
         13:80:3b:43:ad:a5:0a:e9:16:ee:29:ff:00:2f:f8:73:34:b1:
         a1:c9:f4:4d:21:7c:c1:c5:41:a5:d1:29:c3:3f:14:68:37:e8:
         2f:3c:62:d8:7d:8b:01:6c:26:11:94:a4:ae:35:82:c2:65:3a:
         e1:23:b1:85:29:0d:2d:2f:6f:fe:c9:f6:c4:d7:6d:f7:2d:b3:
         b0:19:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:57 2025 by rpki-client