Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
File:                     c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa (raw, json)
Hash identifier:          greTztFfxEiaTTTeG1RUp3+yEVFIZfs9pUrEmOf/ROg=
Subject key identifier:   E2:8F:1A:DF:50:47:32:7B:F6:63:F6:97:00:19:15:E4:65:9E:62:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F7C3D85699DCE868A580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397200
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f7:c3:d8:56:99:dc:e8:68:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=0b15c4f8-0911-42c5-90fb-925b9b013279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:f1:5b:5d:32:e1:ee:e7:82:d4:e3:c1:be:
                    8f:e9:1f:66:af:9b:ad:cc:67:b3:96:49:0d:a1:38:
                    c7:df:86:41:7a:7a:91:25:e6:67:f4:19:83:0e:89:
                    5c:b8:cd:c2:48:f5:b7:37:3a:f3:3a:b1:c0:4d:8a:
                    63:ce:cb:b6:a1:59:91:99:41:2e:11:1a:2d:ae:6f:
                    0f:67:c0:7e:bb:ca:fb:ed:3a:61:43:29:e3:54:28:
                    20:fc:d9:a8:90:58:77:3d:ee:8b:85:8f:f6:d2:cb:
                    04:38:ec:b8:ac:c6:3a:85:81:a5:18:e5:09:e4:2d:
                    87:8b:7a:43:a2:f9:7a:3f:f8:09:c6:8d:23:5f:b1:
                    5a:52:9f:45:55:47:96:b9:6d:f5:a4:c7:85:22:65:
                    2c:ec:07:94:55:91:fa:94:78:ce:22:98:51:89:51:
                    cf:b9:e5:cd:b3:41:18:ef:51:b2:85:9e:ec:e6:5b:
                    ef:3b:b6:67:a8:72:cd:84:c1:07:42:1a:53:68:3d:
                    cb:be:e2:28:41:a1:0e:8e:9b:a0:9f:16:dd:bb:d9:
                    20:8a:16:ec:90:fa:da:5f:54:60:db:0d:a9:cc:9c:
                    9a:33:df:9f:56:64:5b:fe:1a:48:74:45:ba:a7:86:
                    1a:91:ef:b7:10:d9:bb:50:18:a1:79:e8:7f:9b:d4:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:1A:DF:50:47:32:7B:F6:63:F6:97:00:19:15:E4:65:9E:62:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8fa081a-a80b-3b73-970e-f272de3d0a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:7e:d3:4f:b1:a8:1f:ad:6a:9f:16:c8:85:83:bf:4a:56:
         c4:b9:66:1e:e5:63:ad:fe:a3:e1:52:c2:06:bc:b2:fa:14:e0:
         fe:6b:f9:3f:c2:4a:2c:95:e4:b1:0f:8e:0c:b8:8e:03:82:e5:
         b8:a6:18:ba:d0:df:28:88:cd:35:e6:05:c2:4a:65:90:f1:7c:
         bf:14:a4:8e:67:f2:d1:ce:a7:39:e9:86:ce:41:1c:d6:6b:64:
         f5:7b:50:bc:65:15:bf:ac:00:e5:93:ae:eb:fd:b0:22:b5:ca:
         84:9e:66:1e:b4:91:ff:be:10:62:72:6c:3a:88:5a:fc:d5:6f:
         f3:95:ae:a4:54:1a:ba:6d:4c:c4:f5:6c:0f:5f:36:12:25:8c:
         b2:9c:f1:bf:e4:06:a3:4a:4f:b4:ad:c5:c1:67:f2:1f:16:54:
         b5:88:a5:a5:b8:fa:0e:3f:ab:55:be:d4:29:2c:b6:ee:b4:76:
         2b:a9:24:b4:c9:92:8b:04:26:d0:b0:39:e3:a8:2f:01:45:c8:
         06:e4:3e:80:55:65:6e:7c:b9:ff:cb:c1:93:24:5c:aa:9b:32:
         8c:3b:79:55:74:83:1e:40:f0:9e:65:ac:64:0d:28:bf:cb:73:
         71:f3:91:88:84:99:56:e6:b5:81:01:98:68:5e:7d:31:74:10:
         93:9e:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:22 2025 by rpki-client