Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa
File:                     bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa (raw, json)
Hash identifier:          BOupUpBERCIiwDhtgY6HXjJwjdej72HLBgGAPFJwYeU=
Subject key identifier:   6C:4E:D1:50:AE:C5:4D:03:7A:32:8A:FA:B3:8B:78:42:AF:1B:35:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A36665A0F26845CDA200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     396612
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a3:66:65:a0:f2:68:45:cd:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=43e55626-81fc-4e2b-a3a3-3d04ed312929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:e1:17:5b:aa:10:f9:e2:0d:85:f9:71:e7:
                    13:e6:a3:42:dc:bc:76:58:6c:56:98:d4:ec:f6:b3:
                    ee:22:97:d7:07:69:5f:92:9e:48:36:78:1d:0d:a8:
                    84:d0:2c:b7:9d:81:ff:07:74:c1:82:0f:2d:56:1c:
                    56:3f:ac:d9:3c:8d:2d:54:bb:fc:7c:1f:ae:9b:07:
                    5c:28:c8:33:c9:30:1f:bf:70:10:bf:14:7f:a9:52:
                    5d:90:92:c2:20:ca:a8:f4:3d:51:2f:c1:ab:71:12:
                    22:ab:96:11:66:e8:99:84:93:be:ba:8a:8c:bd:bf:
                    3a:c0:69:9c:3b:a8:41:12:c4:13:eb:2a:aa:18:3b:
                    27:a4:1b:85:cf:02:54:ed:a6:7c:43:da:13:b9:a0:
                    40:46:9b:2b:5a:61:9b:c0:13:a9:a3:77:08:f4:a9:
                    62:c1:af:d1:9a:05:ff:15:54:6d:4e:d7:db:10:fa:
                    ba:71:d2:8b:cb:43:8d:66:ae:b6:86:51:63:f9:f5:
                    af:64:ec:51:b9:4f:cc:f7:e0:fb:9f:1b:62:66:68:
                    2c:cc:16:ed:3b:35:57:ab:2b:67:79:c7:8c:e2:83:
                    7a:3a:fd:ea:aa:24:9d:eb:6f:11:c0:5a:75:82:93:
                    80:5a:a9:f4:fb:ee:18:f1:4c:3c:96:e2:49:72:46:
                    40:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4E:D1:50:AE:C5:4D:03:7A:32:8A:FA:B3:8B:78:42:AF:1B:35:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:04:56:7a:d1:75:86:cc:61:75:8a:a7:ff:87:52:35:dc:d0:
         5c:af:55:0b:44:80:87:1a:a7:cc:a5:1e:96:c8:cc:b1:35:51:
         d8:3b:7c:dd:fa:65:4d:42:85:bc:c0:01:73:ff:6a:53:c3:24:
         03:2b:63:42:86:a8:82:35:a3:5e:57:de:1f:16:69:e0:04:59:
         ec:55:c6:df:a4:9c:0b:dc:96:cd:ee:e4:9f:5c:ea:5e:bf:f7:
         86:25:02:1f:f8:69:1b:35:86:f7:bd:d0:30:73:df:d3:d8:a1:
         a6:20:24:f0:dc:13:cd:5e:18:25:62:99:32:ad:86:93:b8:9f:
         32:32:55:1b:d9:7c:59:78:c2:b2:c6:d5:12:c2:7e:8e:08:ce:
         b4:21:48:f5:30:a2:f0:2b:cb:28:0e:27:45:75:49:7a:ea:e3:
         7c:16:a4:69:30:54:e9:ba:27:a5:42:ca:f5:42:2b:03:a3:6f:
         fb:e8:9f:91:67:cc:38:27:6a:1b:b2:bd:b0:19:b3:bb:09:01:
         b6:d5:d6:ff:5a:77:eb:5b:a2:3f:3c:0e:0d:3e:14:ad:00:7f:
         d5:54:e9:ab:17:e3:96:ee:27:ed:a8:d0:94:90:93:62:90:ab:
         d5:56:53:9e:16:0c:39:3b:b6:f5:79:31:0e:50:a5:b7:04:1a:
         5d:3e:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:03:51 2025 by rpki-client