Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5197f8e-08da-3e34-8997-94e710768f0c.roa
File:                     b5197f8e-08da-3e34-8997-94e710768f0c.roa (raw, json)
Hash identifier:          OwfjQQFA6xTTTMAXoV87ANA3QxAj27Bs8M3Jh5OtQRE=
Subject key identifier:   20:A3:DD:C8:AE:90:FB:15:54:E6:7B:4A:FE:67:F6:F6:EA:F3:0A:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B03FBBB24E3970504980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5197f8e-08da-3e34-8997-94e710768f0c.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396588
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b0:3f:bb:b2:4e:39:70:50:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=d6af0965-3699-4cb9-a774-4fca54a81689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:dc:d2:36:1d:8e:2b:7c:61:39:d3:df:7b:
                    3d:1b:07:da:fb:6b:b6:db:45:bb:0f:f5:a1:ba:66:
                    26:df:67:50:6a:f9:29:ad:af:60:30:b7:58:bd:b2:
                    c1:8c:27:ef:54:09:da:e3:4e:a6:82:e6:d2:d3:03:
                    bd:51:7c:3f:94:72:4f:be:ae:b8:2a:46:2a:b7:a0:
                    b5:e1:cc:d8:fc:d0:38:5f:dc:6f:e2:11:57:71:27:
                    f1:b0:e5:13:d8:a5:fd:f7:2c:9f:27:9b:cc:43:21:
                    1c:55:df:79:09:fd:87:40:bf:e1:ac:cc:aa:79:e9:
                    32:db:fd:bc:1e:a4:a4:75:2a:be:4b:66:ad:af:de:
                    20:3c:d4:22:02:15:80:9e:40:76:22:d1:76:1a:02:
                    d3:6a:9a:b1:85:ec:f4:af:f8:ef:ac:b6:51:b5:ea:
                    fe:96:e2:7e:c5:cd:02:ba:74:1d:6e:ed:76:cf:dc:
                    2d:e0:2a:45:21:a9:5b:ac:a3:db:8e:ee:f8:7d:1a:
                    a2:9e:79:52:c8:86:91:a6:1b:bb:8c:f2:87:39:c1:
                    58:f0:33:63:80:35:bc:2c:2d:a1:14:45:67:31:26:
                    86:6b:38:11:a1:a9:92:ff:5f:21:7a:b1:d6:c2:1e:
                    62:8d:7d:c8:62:e9:40:5c:34:f2:6b:78:be:e0:ad:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A3:DD:C8:AE:90:FB:15:54:E6:7B:4A:FE:67:F6:F6:EA:F3:0A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5197f8e-08da-3e34-8997-94e710768f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:c6:42:cd:47:e2:dd:a1:64:d4:c8:3f:9b:f8:68:43:4b:
         7b:c6:01:fb:1b:d3:c2:eb:f3:a2:0e:98:ab:b9:3f:88:10:02:
         6e:64:17:b0:12:07:39:7a:45:25:c1:e5:61:1c:30:a7:ca:43:
         cb:7b:67:00:3c:15:68:13:f0:17:d2:62:ca:d1:11:cd:cb:f2:
         fa:ff:95:5b:84:29:8e:40:65:d5:d9:d6:50:ea:54:e0:14:92:
         bf:de:bf:06:04:01:e1:0c:53:33:43:1f:c3:67:7b:ed:9c:e7:
         8b:2b:8f:b6:39:e6:39:0d:84:aa:30:2b:23:60:31:1c:94:6c:
         2a:25:9a:22:50:f3:86:1e:5d:82:32:07:ac:39:e4:a3:eb:7a:
         e4:8e:d6:c9:8e:4f:58:f0:56:6d:a1:28:2b:03:b5:43:61:de:
         2c:5f:cf:4f:21:92:d3:60:d9:1b:ca:22:23:a5:ca:27:e5:d7:
         0c:a8:0e:bd:5d:65:fd:5f:70:42:f8:f6:f0:0b:33:99:5a:f7:
         7f:b2:63:06:08:1d:3a:52:5b:81:82:c0:76:2f:09:50:bb:26:
         a3:7a:99:2c:03:53:2b:84:88:59:ca:75:3a:96:6b:4a:e9:e9:
         e1:88:e3:84:64:63:4b:70:4e:a0:d0:24:06:63:80:ff:0c:23:
         9b:55:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:05:57 2025 by rpki-client