Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2612aa-1609-318b-b077-c01dd03afb51.roa
File:                     af2612aa-1609-318b-b077-c01dd03afb51.roa (raw, json)
Hash identifier:          8ph2IXnZmll+yj2OEEln8E4Imk75Xm2RXpCqtw+WXQs=
Subject key identifier:   FF:15:28:86:3B:8B:BE:2E:13:47:F8:DC:2A:4C:DA:06:3F:3C:B7:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9D17EF1CB19E99E01880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2612aa-1609-318b-b077-c01dd03afb51.roa
Signing time:             Wed 20 Aug 2025 14:37:02 +0000
ROA not before:           Wed 20 Aug 2025 14:37:02 +0000
ROA not after:            Tue 18 Nov 2025 15:37:02 +0000
asID:                     397193
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9d:17:ef:1c:b1:9e:99:e0:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:02 2025 GMT
            Not After : Nov 18 15:37:02 2025 GMT
        Subject: CN=f763b1ec-df68-4e17-b5ea-30b8d072b9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:e9:94:3c:5b:26:90:6d:60:90:8a:f1:23:
                    2c:98:93:e1:24:da:81:e1:b1:65:ad:05:21:55:a4:
                    1c:01:09:cd:bd:4b:c2:ca:63:c7:e7:ef:1e:9c:a6:
                    a9:a7:9c:01:bf:3c:ef:e0:9d:7c:63:99:4f:3b:83:
                    6c:2d:74:94:25:18:17:3d:8c:c9:ac:43:8c:69:5c:
                    1a:82:69:2a:d9:80:13:4a:d2:ba:65:de:9b:e3:7f:
                    8e:a2:17:70:8c:0a:9f:32:18:65:29:95:0b:36:4c:
                    be:e2:a4:d9:24:dd:2d:05:90:57:59:10:ce:00:36:
                    c4:fb:a3:1e:a3:36:62:e8:d7:af:b8:97:d8:93:54:
                    f5:d0:83:dd:16:b3:23:4c:79:61:f5:bc:c3:78:5a:
                    49:5a:60:2f:95:a7:9b:58:92:f9:0b:d6:df:a5:0c:
                    1c:51:24:9e:9f:f0:d5:be:bc:31:9b:07:81:9e:1a:
                    32:2e:37:40:e0:17:50:7e:0f:07:08:ed:3f:99:99:
                    23:0e:04:4a:14:07:87:f4:ec:40:31:84:2f:9e:16:
                    2c:09:33:14:d4:be:ff:fe:d7:9e:28:a4:40:21:ae:
                    5d:a2:7d:69:2a:75:0c:33:5e:1d:d2:94:00:70:67:
                    ee:11:50:9f:57:1f:4c:12:a4:2e:8e:c6:a0:73:9f:
                    9f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:15:28:86:3B:8B:BE:2E:13:47:F8:DC:2A:4C:DA:06:3F:3C:B7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af2612aa-1609-318b-b077-c01dd03afb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:bf:8d:fb:ad:f6:cd:a2:b8:4b:d5:b7:4a:2f:5c:ac:19:
         95:64:ed:6e:f4:9f:22:cc:2e:62:05:90:01:8e:ca:49:97:1b:
         28:c5:5e:e5:c7:1a:09:26:fd:3e:1c:e9:6c:71:8f:35:e1:75:
         01:2e:b6:4a:e5:3f:39:9d:7c:7d:f5:f4:45:bd:10:40:36:5f:
         08:98:8c:b5:6a:1d:d2:80:6f:9c:f6:c7:68:9d:64:dc:52:16:
         63:e5:a5:99:06:9f:85:31:ea:85:a1:75:c9:ba:cd:3d:0e:47:
         0f:1d:3a:2c:8f:a4:58:73:ec:f8:9a:8a:02:b3:1e:7c:af:ff:
         ba:1e:f2:bf:08:8e:ed:df:f9:de:af:6c:05:37:7b:9b:35:35:
         28:b1:38:f1:36:bd:5f:60:78:51:f8:39:c5:cd:45:fc:5a:b3:
         06:1a:63:fb:57:6d:f7:37:d1:88:89:3b:02:df:77:86:7d:f4:
         9c:79:ad:c0:ba:7a:cd:01:d4:6e:ef:09:a3:f0:3d:c3:01:0e:
         cd:56:92:05:7e:a2:7f:43:95:98:e5:01:4e:29:df:40:c9:71:
         39:0b:af:0f:5a:31:88:ea:75:94:19:56:8a:71:42:46:07:3c:
         ba:a0:25:31:05:b9:62:dd:6b:70:38:7d:40:63:6a:f9:ef:b5:
         9e:df:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:45 2025 by rpki-client