Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0d2b146-5fd5-3547-99a7-b26abf194776.roa
File:                     b0d2b146-5fd5-3547-99a7-b26abf194776.roa (raw, json)
Hash identifier:          gSgUhrsyGdPiSBjCBIs/gtmwr524njZxpAwgr99QS7c=
Subject key identifier:   D2:38:76:34:F3:20:5E:E0:01:31:37:CB:15:EC:35:7B:13:8E:59:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F9F9C7FB9A1919E59100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0d2b146-5fd5-3547-99a7-b26abf194776.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36618
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f9:f9:c7:fb:9a:19:19:e5:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=37bed913-2325-488a-8eae-fea9b5c82227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:94:7a:a7:b3:e1:ca:e8:84:d9:9b:37:3c:
                    63:d8:37:7e:0e:ea:16:d0:b8:b8:26:62:54:03:c3:
                    13:a0:95:1d:2b:f3:e7:91:65:20:c9:7d:da:3c:ba:
                    ee:cc:76:8a:d2:83:1d:0d:56:96:01:ec:7b:2a:b3:
                    ec:01:50:b8:e9:f2:4d:4a:ec:80:4e:0f:69:1b:60:
                    ad:3d:2d:97:4c:b6:ee:44:6f:48:15:db:53:31:f5:
                    33:f3:a6:2f:57:f3:14:3e:36:22:69:c9:8e:99:ca:
                    93:35:a9:79:c0:f8:d7:0b:bd:64:24:34:e3:33:73:
                    d8:ab:b0:3a:2d:b5:ed:c9:ca:e9:b3:c9:1f:30:cd:
                    dc:3f:ed:f2:d1:25:77:8b:d1:57:01:4f:2b:94:8b:
                    47:4c:24:aa:7b:ce:85:34:e0:8d:35:ee:27:cd:b7:
                    90:6f:ae:05:f4:81:42:d4:79:0b:b2:8c:63:d3:e6:
                    21:73:ff:84:f7:aa:b8:3d:b1:f9:10:11:b9:3d:94:
                    f2:8d:a9:fa:e3:c3:4f:60:08:43:d3:48:68:4b:dc:
                    98:2d:67:a8:40:3a:2f:a3:3f:13:37:5d:47:57:8b:
                    c1:cd:7b:3c:eb:bd:f8:23:06:98:51:76:38:3e:3f:
                    b1:34:bb:81:63:ec:88:94:02:63:d4:2a:ab:5a:09:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:76:34:F3:20:5E:E0:01:31:37:CB:15:EC:35:7B:13:8E:59:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0d2b146-5fd5-3547-99a7-b26abf194776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:a3:f8:84:35:ef:dc:47:f3:ed:0a:52:d8:4f:e2:1e:5c:
         76:1e:90:b1:83:8f:ee:70:60:c5:8f:cc:10:57:f0:51:c5:8c:
         08:d3:64:20:e6:c0:9b:12:fa:02:01:90:83:2b:ae:8f:e0:a3:
         cc:1f:4d:f2:ac:ec:54:ba:9b:8d:0f:5c:4c:f6:83:8b:18:9a:
         ab:2a:8c:94:61:d7:71:58:d6:42:ea:b6:e4:ca:cb:d9:ae:db:
         e5:e5:6f:25:c3:aa:22:ea:c4:52:68:0f:52:a2:4f:d5:48:a6:
         e2:f4:f8:84:ba:79:62:20:99:f5:17:bc:01:fa:65:8b:6d:ed:
         89:81:37:96:e4:f9:48:f7:0d:9c:e5:2d:8e:0e:db:57:84:4d:
         79:df:62:98:b3:75:a0:e1:c8:99:1a:40:20:b6:2a:bc:77:f2:
         a9:f2:40:75:fc:ef:e0:7a:66:8d:2f:fa:61:7f:36:93:bf:82:
         50:67:0a:2b:2d:61:7a:26:bd:dc:43:70:a5:04:85:db:81:4c:
         a5:3f:97:b1:60:3d:cc:ff:3e:16:09:d5:e8:a3:e9:52:4c:21:
         f0:8c:8a:12:d4:56:11:c3:d1:df:49:9a:f4:c9:a3:76:4f:c7:
         1f:2c:6b:9c:13:ef:71:54:36:6e:9f:05:7b:24:a6:d4:c9:a9:
         3b:31:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:49 2025 by rpki-client