Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6e19e02-b99b-3a75-9714-7a62af267e15.roa
File:                     b6e19e02-b99b-3a75-9714-7a62af267e15.roa (raw, json)
Hash identifier:          dF+oMYiEs32tL3wpSW86oFPBYlyRxBwpyVSLdgFWgi8=
Subject key identifier:   85:6C:A5:60:6D:64:9F:7C:AC:36:01:33:B3:C1:89:88:0E:A0:D0:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61DAB4296949030E627710
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6e19e02-b99b-3a75-9714-7a62af267e15.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396563
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:da:b4:29:69:49:03:0e:62:77:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=1a095c6c-86de-42fd-aeb0-0c6d2bcc14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:dc:dc:2e:44:4f:d0:85:f4:aa:5e:a2:b2:
                    90:7c:09:ea:1d:37:ce:cb:ed:61:c6:05:f0:73:0c:
                    76:78:74:40:14:60:be:16:30:26:95:ff:01:49:9e:
                    9b:ea:78:51:02:75:6b:15:c7:67:a3:44:e1:2c:82:
                    30:57:c0:df:0c:58:0a:36:86:56:08:4e:01:18:a3:
                    95:01:c5:37:d8:89:71:ea:35:8d:eb:1c:67:0d:c1:
                    83:e3:88:a5:bb:a0:42:e9:ff:b5:c8:28:51:e4:67:
                    c4:40:8d:86:82:79:26:29:06:fd:84:c7:69:0a:7f:
                    16:69:46:50:21:e8:75:c6:1a:99:61:33:88:c7:55:
                    ea:29:2b:0c:1c:4d:98:04:08:cc:d4:68:9c:6f:13:
                    26:c3:2c:7b:56:03:1e:cf:ae:37:ab:36:b5:8c:b3:
                    86:e0:8d:9d:00:f3:0d:ef:83:4c:e9:61:46:86:7f:
                    46:e8:0b:49:7a:a9:8d:52:60:ac:15:a6:19:b4:b4:
                    e0:27:de:6e:94:c6:7f:5f:bc:69:0f:61:93:f9:f7:
                    68:79:91:72:12:df:cb:4b:02:94:e0:4d:41:6d:0f:
                    02:65:6e:69:45:ac:dc:e6:52:16:74:86:fe:c8:1e:
                    54:a7:db:7b:a1:f3:b6:66:eb:f2:19:78:49:5c:9c:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6C:A5:60:6D:64:9F:7C:AC:36:01:33:B3:C1:89:88:0E:A0:D0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6e19e02-b99b-3a75-9714-7a62af267e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:ea:a4:f6:d9:38:f9:76:7c:94:0b:94:b0:68:f5:db:91:
         ea:fe:d6:a0:ea:3c:66:e9:f5:4b:d6:4e:1a:9d:50:06:3a:1c:
         8d:24:3c:7a:de:30:5d:9f:81:36:70:b4:4c:63:6b:6e:b6:55:
         2d:00:f9:24:04:00:c3:ca:7f:94:c0:29:a5:9f:d0:18:65:ca:
         79:cd:d2:2c:3c:71:0f:a6:2c:d1:32:e6:e4:d5:86:7a:4f:86:
         2e:dd:92:69:b2:94:e5:9c:9f:28:2e:70:ad:99:15:aa:e0:75:
         f8:21:a8:c3:50:aa:91:ff:ed:09:60:f7:1c:30:85:03:67:42:
         af:ba:64:6d:8c:2a:e3:e9:3a:c9:4f:8a:68:85:01:8c:f0:7c:
         ae:3d:23:c2:b1:00:71:14:a2:bf:c3:e3:cc:fd:51:81:09:0b:
         8d:a3:b8:43:40:9b:11:cf:09:06:69:d1:d7:7f:43:7f:66:36:
         d5:96:fd:32:95:ff:39:70:bf:dc:4f:3a:5b:24:65:c8:1a:05:
         d2:50:87:3d:dc:86:71:ed:cb:a7:2f:70:e1:05:29:0d:65:57:
         74:1c:4a:eb:ab:c2:b6:07:d6:7c:8b:5b:59:9e:bb:d1:07:0e:
         e2:79:94:3b:2f:2f:04:61:5b:93:d7:c0:e6:67:88:67:c2:58:
         80:e6:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:00 2025 by rpki-client