Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76e5c1e-1ee1-3899-bdb2-7e27629e3821.roa
File:                     b76e5c1e-1ee1-3899-bdb2-7e27629e3821.roa (raw, json)
Hash identifier:          baI7s8UzEnEcwT2o02m5Jxbn1dQp6I3TZBX+XqoJPcE=
Subject key identifier:   6C:D1:F7:98:AC:AC:49:C8:69:6C:DF:B9:D0:5E:00:0B:2D:EC:1A:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D7436001715E8785BFDC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76e5c1e-1ee1-3899-bdb2-7e27629e3821.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     36626
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:43:60:01:71:5e:87:85:bf:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=6eabb6f9-3a85-44e5-b15d-55799eec781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:64:5e:ad:df:a8:e5:96:92:ab:25:1b:5b:
                    d2:84:c2:2a:aa:bd:cc:20:0f:6b:be:7f:48:13:27:
                    bc:8d:ae:6b:2b:10:60:8c:89:6f:37:12:97:18:04:
                    8f:af:0c:f2:78:e8:f2:05:0c:9a:6c:f2:10:2f:62:
                    20:46:da:26:eb:f2:68:ff:80:ca:98:9e:8e:70:f6:
                    52:fe:fd:c6:53:e6:6f:de:ee:df:91:13:8c:da:2f:
                    c9:1e:df:ee:c7:93:f1:26:9c:80:d3:a9:28:7b:10:
                    9f:4b:92:67:63:60:d6:fa:70:8a:45:a4:2a:1b:90:
                    27:2b:c1:a3:7b:8d:a9:d0:83:bb:f8:bd:13:98:dc:
                    3c:a2:2a:8e:6b:01:b6:71:5d:fe:d1:a9:e5:84:e9:
                    59:f0:4d:fb:6a:68:a5:0b:bf:fc:a1:62:f9:e8:1c:
                    81:6d:e2:ef:38:04:84:bb:8b:0a:44:92:a2:50:e6:
                    f1:2b:38:1f:a2:61:b3:b4:4a:0c:fa:0b:7b:88:1b:
                    f6:1e:79:b1:a9:f1:cb:a5:33:e9:87:cc:aa:06:95:
                    b9:6d:9f:d3:bc:53:74:8f:53:fc:fc:be:0b:dd:12:
                    9d:da:4a:dd:f4:3b:9d:6e:bc:37:4c:b5:8e:61:75:
                    e9:c8:d7:7d:14:7d:25:4d:2f:87:f7:1a:15:da:dc:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:F7:98:AC:AC:49:C8:69:6C:DF:B9:D0:5E:00:0B:2D:EC:1A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b76e5c1e-1ee1-3899-bdb2-7e27629e3821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2e:27:8e:2f:e3:ed:a8:e0:c9:ba:f1:f6:51:de:12:19:56:
         c2:ef:ca:5a:fa:3e:ea:14:eb:92:6d:38:c9:15:18:0d:e4:01:
         99:71:43:1b:06:22:01:9a:6b:ea:81:68:5d:ca:df:bd:43:78:
         e6:77:9b:c7:2a:ca:2c:34:85:30:7a:0d:ca:21:d8:4d:c7:02:
         3e:84:ed:a1:73:84:5e:14:ef:00:02:86:a5:bd:0a:e6:b1:f2:
         67:1b:3e:b8:e1:59:bc:4e:2b:ae:7b:14:06:b1:96:fb:05:cd:
         9e:03:89:bb:ad:52:0d:3e:96:10:03:f7:cf:5c:03:72:cd:de:
         c7:54:fd:41:16:f6:fa:6d:3d:c0:86:00:20:e9:0f:dc:9f:02:
         50:0e:d8:73:00:1e:01:6e:cd:ee:26:57:7a:63:b4:46:b8:f0:
         e5:18:7c:2e:d2:12:3b:82:6d:1e:fa:60:fd:00:02:e6:b5:e8:
         d3:fd:5f:da:c9:8a:14:3f:da:93:e7:34:99:63:ca:d1:c6:62:
         e2:c6:d4:c9:b4:7b:e1:1d:04:2a:bd:55:63:21:3b:99:26:a7:
         1f:15:77:bf:f4:c7:38:81:67:3c:2d:88:00:36:59:9b:0f:be:
         4f:65:1c:45:05:1b:16:ee:e3:53:57:20:ca:15:42:71:1c:3a:
         ca:46:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:48 2025 by rpki-client