Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6f7cb8e-aa01-3254-b481-9054d02626b3.roa
File:                     c6f7cb8e-aa01-3254-b481-9054d02626b3.roa (raw, json)
Hash identifier:          oZ5RDiyCEs1VXRenwI6NRGQ9O5FeCZGLLb60Oc0Ebnw=
Subject key identifier:   F4:F3:72:E9:F0:1F:9C:DC:71:38:F9:78:12:1E:1B:E7:34:20:B1:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E7738D5CB7C69565BEE21C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6f7cb8e-aa01-3254-b481-9054d02626b3.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396576
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:38:d5:cb:7c:69:56:5b:ee:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=9a701614-3ca4-4f99-81ec-7051fe362c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:c3:bc:bf:19:be:f4:78:11:4c:fd:90:09:
                    c9:cd:35:9f:57:15:cc:60:fd:ef:d5:97:ea:67:b1:
                    1d:10:cc:9c:3e:af:07:ff:83:2a:ad:11:89:6e:e8:
                    cb:12:b9:1c:4b:42:45:e5:fd:de:b7:ca:c5:6b:41:
                    17:74:cf:82:17:61:d9:cd:21:bf:2d:d2:61:2c:66:
                    43:35:66:a6:81:c4:bf:d7:62:8e:0c:92:ab:21:35:
                    3a:39:76:74:a2:98:f4:a6:23:0d:1c:1a:9f:02:4c:
                    72:ea:b4:b2:e5:2d:98:7c:f2:07:48:fb:7b:ad:8a:
                    79:1f:7e:ee:55:28:d4:76:e8:46:a2:cf:50:fc:3f:
                    b0:7b:cf:18:dd:a0:fd:fe:70:b6:bc:8a:c7:8b:30:
                    32:c4:ca:57:7d:4f:b0:5f:0e:59:e3:3b:92:90:9f:
                    bc:55:dd:52:52:96:55:fe:97:9a:cf:fb:de:20:55:
                    39:c7:2c:c7:a1:01:65:fc:ef:84:92:c6:a5:bf:00:
                    ca:cf:81:18:f7:83:b8:4b:c1:4b:37:05:45:f8:b5:
                    ec:d7:c5:d0:c0:33:36:3c:6f:ae:26:aa:a7:77:7a:
                    d3:a0:40:0e:77:8b:e5:18:18:12:c9:c0:d0:89:6d:
                    d7:96:5f:4c:40:d1:5a:5a:00:fa:bf:46:ae:19:13:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:72:E9:F0:1F:9C:DC:71:38:F9:78:12:1E:1B:E7:34:20:B1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6f7cb8e-aa01-3254-b481-9054d02626b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:27:87:44:9c:75:84:e2:08:02:87:d4:4f:61:15:1a:3e:79:
         26:fc:fa:06:c0:ff:0c:53:1c:d7:df:3e:42:4b:02:e3:31:9d:
         22:aa:51:8c:0d:84:5b:62:89:88:8d:05:dd:d6:3a:b4:86:c9:
         26:bb:75:36:f0:94:8f:5b:db:37:79:26:27:df:c0:9e:4a:8c:
         58:55:70:e6:95:97:b7:76:5d:fd:1e:06:c6:c0:4c:c3:25:6c:
         cd:59:d7:4a:cc:8c:12:4d:40:21:a3:e7:fc:ea:d0:3c:d6:2c:
         40:90:1f:3e:ce:bb:37:b3:0f:77:fc:44:fc:06:9c:6a:f2:e3:
         a4:0b:30:7c:c3:e5:a3:85:25:f5:ce:9b:1e:15:6f:54:97:f1:
         67:f6:4d:cb:ac:d4:29:fc:3d:44:91:d1:b7:f9:8f:0c:42:68:
         fe:83:32:0e:44:93:cd:e9:1c:d2:94:fc:66:1c:1f:7f:c5:49:
         69:b0:2c:ae:aa:fd:d8:a7:8a:ef:c8:55:78:38:75:24:b3:ca:
         74:43:88:b4:e7:f4:95:04:16:2c:64:0a:ca:02:0b:fe:f0:ff:
         3b:6c:cb:90:e7:a3:4a:83:dd:d1:0e:28:76:86:8e:b1:21:eb:
         07:d1:77:21:5f:4a:26:45:61:59:bb:fa:a9:61:0a:a4:52:97:
         dc:53:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:00 2025 by rpki-client