Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d212a238-2cf5-3a12-94c9-9ec41160d545.roa
File:                     d212a238-2cf5-3a12-94c9-9ec41160d545.roa (raw, json)
Hash identifier:          26ddLuomCT5ljWdfQQ5Qi3uT6Wfy7EhXfh/oz0GQiII=
Subject key identifier:   FB:2E:CB:97:B0:8C:01:87:AD:4F:E3:6E:24:E1:9E:82:6C:79:DD:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1B1D534E3A92851673F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d212a238-2cf5-3a12-94c9-9ec41160d545.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396561
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b1:d5:34:e3:a9:28:51:67:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=0e4670bf-dc65-4ecc-b33a-69d6178984a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:2d:5f:10:c7:9c:19:e2:7e:e5:11:2b:bb:
                    4a:c0:88:d3:17:43:e6:7c:3a:cc:f2:1d:dd:cc:e9:
                    d7:ab:89:52:58:44:9a:bf:bd:f5:91:91:2a:63:e4:
                    51:bf:41:af:d9:1a:fe:14:ae:e8:d8:ee:8c:03:31:
                    53:86:97:21:d5:5a:26:e5:a6:cf:c2:95:c5:44:f4:
                    e4:47:61:f7:66:a9:e6:d3:46:b5:01:b9:b1:0f:23:
                    c7:ef:d9:14:31:2e:30:2d:bd:f9:ca:e1:97:80:8d:
                    0d:aa:9f:9f:1d:72:b0:f6:8b:a1:6d:e7:29:73:49:
                    e8:2e:e2:9f:1d:8f:48:56:83:97:88:a0:aa:a6:55:
                    97:68:7a:26:6d:83:3d:03:a2:2b:29:90:62:a8:8c:
                    53:46:95:17:e0:1e:80:3e:5f:5c:a7:94:08:d8:19:
                    59:b7:dc:2d:e5:bf:a4:78:23:25:c9:d2:5c:06:91:
                    61:80:bb:76:2e:28:e0:0b:f4:5d:0d:c6:4c:77:e8:
                    d0:69:35:70:93:26:a9:bc:84:6d:59:15:46:f4:46:
                    8a:51:4e:88:97:e3:13:9d:16:3d:b5:29:af:81:7b:
                    6e:09:b3:74:cb:d1:88:71:18:16:f9:d3:c6:d5:48:
                    9e:c1:fb:ff:5a:d7:99:1f:ef:30:a6:f9:76:3e:32:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:CB:97:B0:8C:01:87:AD:4F:E3:6E:24:E1:9E:82:6C:79:DD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d212a238-2cf5-3a12-94c9-9ec41160d545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:b7:52:ca:b2:1a:ad:cc:18:e3:fa:b8:f2:3a:fb:37:04:
         8b:d3:23:68:1c:0c:c1:34:c5:ad:a6:46:fc:31:e0:ff:15:4e:
         41:17:d7:4e:6f:e1:15:2d:90:a4:88:bc:17:dd:76:0c:31:fb:
         97:a0:a0:28:5b:e4:e8:a8:14:55:5c:88:a6:0f:df:0f:1c:9b:
         93:8d:35:e3:e2:a3:24:e3:fb:34:e9:13:06:24:3f:bd:a1:bc:
         b3:9a:8c:6a:26:64:e8:46:05:dc:aa:d4:95:d2:18:c9:bd:4a:
         f4:ac:a5:c5:1c:05:13:45:f4:4c:69:97:8e:61:0e:61:f2:73:
         6b:43:e9:36:1f:2e:3d:2e:68:3f:3c:fd:f4:92:43:45:ff:d5:
         36:6c:e7:6a:84:99:ea:fa:7d:8f:1e:0d:a2:8c:1b:06:4f:e5:
         78:fe:cb:be:34:bb:7c:4a:be:fd:47:f1:79:60:bc:69:6c:c8:
         37:a5:ce:82:8c:64:6a:c7:8b:47:7a:43:1c:27:91:28:c8:75:
         a4:0f:01:a2:a6:28:32:82:81:d7:74:17:f9:18:2f:4d:96:0e:
         c6:64:5c:81:8c:8f:f5:37:27:07:0b:fa:62:24:ad:bd:b7:85:
         19:04:4f:bf:b5:4a:fd:02:3e:4d:4d:b2:c5:0d:ec:1c:ad:aa:
         08:1f:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:24 2025 by rpki-client