Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2b859b9-e3f8-3b24-875f-21b51f8d9a39.roa
File:                     c2b859b9-e3f8-3b24-875f-21b51f8d9a39.roa (raw, json)
Hash identifier:          OehJGEt4mrPFcqalaefRvDU39SGFrrsiZbNkQl8FSt0=
Subject key identifier:   38:97:98:F0:EE:D3:BA:88:37:D6:BC:BB:94:AA:EF:F8:AB:26:51:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E773837009F5380B06FEF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2b859b9-e3f8-3b24-875f-21b51f8d9a39.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396553
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:38:37:00:9f:53:80:b0:6f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=060f0870-9231-473b-a452-0c0516ae49f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:ff:9a:06:75:a5:47:e0:60:9d:5f:97:ed:
                    5b:32:bb:ac:aa:c3:6c:2f:36:8f:75:e8:0b:e9:b7:
                    c4:4c:9e:1e:d0:5f:c6:48:dc:55:18:7d:0e:7f:85:
                    d7:4d:85:48:95:7a:0c:a4:51:52:6e:63:2f:95:96:
                    bf:d7:50:50:ae:4f:21:45:45:dc:47:79:be:f3:74:
                    e1:98:f0:42:4b:14:51:8c:5c:1f:15:c9:11:cd:a8:
                    53:e2:96:09:d4:2b:5c:ed:fb:18:ac:43:e6:f0:d8:
                    ab:7d:c5:a7:d1:e6:3c:0d:99:cc:8b:c0:fc:fd:31:
                    70:91:c0:53:81:49:64:76:9b:33:96:ba:ec:07:77:
                    fe:8d:b3:cc:5f:cf:a6:e0:32:04:fc:8b:9f:f5:cb:
                    10:f5:55:6a:3a:98:2a:1e:f5:fe:60:f3:3a:90:f8:
                    ba:e8:ff:b6:34:9f:09:58:ee:d2:60:00:5d:74:ed:
                    e1:14:92:71:fc:57:e1:9a:8f:7f:bc:70:a1:9f:ba:
                    fa:b2:e5:5b:05:23:68:ac:fe:ba:2d:0e:cd:97:a8:
                    e7:9c:c3:c2:3a:3b:a4:22:91:da:61:dd:77:82:80:
                    22:84:2b:ad:e3:5f:4f:a6:e0:14:62:2c:a4:da:43:
                    59:22:36:d9:e6:2d:59:0c:2d:05:3a:86:5b:52:ff:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:98:F0:EE:D3:BA:88:37:D6:BC:BB:94:AA:EF:F8:AB:26:51:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2b859b9-e3f8-3b24-875f-21b51f8d9a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:31:aa:c9:77:1b:2d:56:f2:05:c4:10:b7:81:7a:5c:cf:
         c9:22:40:c7:c8:6e:bc:49:88:51:07:9f:b5:e4:ec:9c:d0:47:
         28:48:22:ee:29:a8:2e:c4:56:4d:64:b9:09:52:6f:61:5c:72:
         37:16:85:b0:27:b1:71:50:c3:de:61:6a:7f:01:dc:e9:2c:c6:
         9d:ee:f7:e1:b5:5a:24:44:79:b3:76:b7:00:d8:5c:b6:64:f2:
         71:4c:38:92:ce:98:a6:35:75:dc:0d:12:fe:2a:a1:8e:c5:74:
         a9:97:88:39:05:5f:0a:28:d1:1d:83:d1:e0:93:d3:2e:d2:47:
         1e:59:bc:c9:27:d1:b7:8d:5d:44:1d:2b:ed:45:fb:9b:fe:89:
         08:a2:3a:e3:64:8a:93:49:ca:15:25:79:6d:6b:88:6a:81:ea:
         fa:4d:9d:53:b5:7b:e5:a5:bf:c9:25:83:f4:94:37:6d:55:55:
         ab:c3:e5:62:d5:ad:ed:da:d7:0d:07:7c:62:67:ab:e0:ba:de:
         83:26:a0:78:3f:a5:6e:44:0e:02:1a:2a:4c:9f:2f:a1:89:c7:
         be:00:8e:d6:9b:14:53:36:bf:22:63:0f:87:52:34:76:a9:c8:
         44:8a:f1:12:9f:92:e3:0e:3c:e5:cc:b1:24:ed:bf:da:47:4e:
         15:5a:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:20 2025 by rpki-client