Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0be1780-5f56-3f11-9c02-82afcb676e54.roa
File:                     d0be1780-5f56-3f11-9c02-82afcb676e54.roa (raw, json)
Hash identifier:          HzSZ5wV+Z2eihiPKmKtJ3sXE2+qHx4nRUWi5+Nd9W3Y=
Subject key identifier:   67:14:37:B2:D8:D4:6C:40:F2:39:B6:D9:90:E6:D3:7F:35:63:7C:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DAA92AC577DDF21F7C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0be1780-5f56-3f11-9c02-82afcb676e54.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396592
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:da:a9:2a:c5:77:dd:f2:1f:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d97b42b0-8ddf-4485-bd99-d44c3ea56480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:58:2f:59:75:ef:f8:30:a5:01:80:5f:8f:
                    e3:24:e0:26:97:a7:1b:a8:4c:7c:c8:cf:8d:d2:b0:
                    0e:41:f3:da:f2:e0:a3:6a:2c:60:54:06:20:5d:cc:
                    0f:ce:26:5f:05:59:36:96:81:44:6b:6e:1b:66:41:
                    96:e4:2d:0e:92:dd:72:e9:10:51:68:21:a8:76:a5:
                    13:9e:60:3e:8f:86:c8:e5:95:65:18:c6:48:c8:13:
                    ca:72:47:16:46:b8:90:aa:33:d5:02:6b:7e:3b:a5:
                    67:99:45:d1:9f:01:d3:16:b2:bd:c5:44:21:24:d0:
                    ff:31:5b:bd:4f:90:60:6d:11:35:ae:ea:62:80:5a:
                    ba:ba:1d:aa:51:5b:f9:4d:e0:09:e2:d2:8a:3c:f5:
                    ab:b9:8b:75:94:2d:ae:c5:ea:d2:5f:48:84:17:fc:
                    6e:8d:07:e4:a9:f3:ff:d4:0b:69:3b:a2:ab:1c:85:
                    d2:3f:22:3e:80:91:71:6c:4b:20:18:76:41:7c:2b:
                    e4:d7:81:46:58:c5:07:30:4e:ef:cd:33:95:30:6a:
                    e7:87:fd:63:25:50:21:5c:10:84:05:1f:2a:73:d5:
                    e5:61:06:96:9d:a1:6a:50:8e:a5:4d:78:e0:62:c6:
                    2e:1e:5c:8b:09:6a:0d:f7:3b:70:88:ee:1b:89:b4:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:14:37:B2:D8:D4:6C:40:F2:39:B6:D9:90:E6:D3:7F:35:63:7C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0be1780-5f56-3f11-9c02-82afcb676e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e0:65:0c:6e:46:bf:89:76:a8:38:84:35:c2:d7:ee:60:54:
         eb:f7:9c:9b:17:72:80:04:96:13:b1:e4:33:bd:7a:2c:2b:de:
         db:07:d6:fc:86:a8:67:98:b2:4b:aa:66:cf:bf:f7:56:94:d3:
         7e:e5:93:a1:da:a6:74:ef:68:65:dc:0b:1a:3a:d5:d5:98:33:
         e0:74:a1:77:b0:64:75:33:c8:aa:e8:4f:e7:57:47:84:0a:98:
         01:45:67:5e:f4:af:ee:94:f2:fa:85:67:12:40:f4:fd:1f:6d:
         e3:e1:ef:0f:d8:9e:b2:58:d7:8a:1f:ab:5f:5c:4d:45:89:db:
         f1:bc:78:ca:b5:f3:ad:47:7c:63:bb:bb:a9:b3:68:7f:98:8b:
         a7:5f:0d:b7:da:89:ec:df:de:0b:27:8a:92:2d:c1:26:cb:00:
         d1:71:48:c5:6d:98:95:1c:ca:08:9f:3c:c5:d6:a7:d9:3f:04:
         5d:4c:28:df:a4:5a:45:0d:24:13:d8:fc:40:1d:a1:b4:63:89:
         f0:69:f2:66:76:24:03:0a:9b:5b:f9:7c:68:d3:2f:55:d4:0f:
         6b:cf:db:1b:49:0a:32:6e:e8:9d:81:ca:06:e6:20:fe:70:0c:
         e2:c8:c9:b1:8e:9c:ea:ef:fd:62:00:d1:8b:a0:78:02:24:ba:
         94:83:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:03 2025 by rpki-client