Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d648839d-b4c7-3b33-95ad-617a30c9163c.roa
File:                     d648839d-b4c7-3b33-95ad-617a30c9163c.roa (raw, json)
Hash identifier:          OeP9KCdEUBouaq2g2T6hOkHN/oRvTWrQnsyJuKp84Yc=
Subject key identifier:   FD:98:38:1C:7F:76:A2:71:3F:1E:83:AA:C1:8F:93:80:42:F1:32:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B33F1ABF227E5A44E3E0717C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d648839d-b4c7-3b33-95ad-617a30c9163c.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     396606
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:ab:f2:27:e5:a4:4e:3e:07:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=f0cfef4c-287f-49c6-a01a-c72acdd63576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:bb:85:d8:c3:c8:76:11:1d:e5:21:26:d5:
                    b2:d3:3c:61:d9:04:45:aa:7e:1d:72:82:f7:64:cf:
                    ad:3e:53:b6:4a:b0:35:11:89:d2:7c:80:6d:1b:96:
                    d8:96:19:e7:bf:5c:fd:09:76:9b:1d:c8:8f:09:34:
                    9c:b0:a4:e2:44:86:e5:5d:7c:80:bf:0d:33:75:ba:
                    22:37:90:bc:0d:b8:ac:b1:3d:33:6b:3f:8c:71:4b:
                    8b:cc:10:df:4c:10:01:0a:ed:cd:b2:6d:4e:a7:e8:
                    5a:54:36:fb:5b:5c:d8:55:e3:6a:8d:72:b7:fa:76:
                    9b:2c:cc:43:8e:f4:8f:1e:de:e9:35:2f:ca:b4:66:
                    fb:22:9b:d5:58:30:ee:68:07:40:e6:c8:91:13:43:
                    f8:00:19:38:b0:0a:b7:b2:93:ee:5b:65:78:88:1c:
                    8e:2b:28:43:fa:b8:a2:a1:64:c1:3b:aa:aa:a0:87:
                    12:64:f2:a5:eb:58:6c:2c:f9:f3:95:88:a6:4e:a4:
                    9b:a5:2a:f4:2d:bb:b5:77:19:c6:f3:fb:0f:49:43:
                    4a:2f:82:06:6f:99:46:42:f5:12:81:8e:18:1a:7b:
                    36:d8:e4:39:2f:82:03:7a:b0:7b:7e:eb:56:e2:90:
                    90:ca:9c:31:8a:76:ff:a3:74:cc:67:27:6f:fb:63:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:98:38:1C:7F:76:A2:71:3F:1E:83:AA:C1:8F:93:80:42:F1:32:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d648839d-b4c7-3b33-95ad-617a30c9163c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:93:aa:57:71:e2:4d:71:fa:21:a5:5f:fc:f6:70:15:6f:37:
         a5:97:c4:79:75:76:51:3a:71:94:47:da:64:66:f4:86:9e:a3:
         9a:b7:f9:e2:fa:57:55:ce:9b:45:6c:5d:a0:b6:ef:59:ca:c1:
         52:00:f2:3c:1d:ca:cf:f4:03:3d:8b:50:c7:9e:e0:60:dd:5e:
         f5:7f:22:05:56:48:e2:5f:13:54:54:dc:c0:8a:12:dd:dd:06:
         0d:92:c4:f5:0b:1a:a0:1c:c5:73:ee:fe:0a:85:af:47:6b:b4:
         de:b5:62:b7:62:36:cf:4b:ae:7b:5e:b5:09:cc:0f:11:49:8d:
         e4:ce:32:2c:5a:34:93:0c:6f:13:60:d9:67:d2:86:7a:8c:dc:
         73:f8:fe:fc:2d:8c:1c:f0:fd:88:4d:f7:20:89:b9:8f:2b:58:
         80:23:db:96:77:53:d9:8f:b4:d5:d3:56:f4:71:40:3b:31:2b:
         01:f3:8b:d0:b8:89:23:e2:46:78:56:f2:3f:3e:1b:19:f0:7d:
         29:bc:a9:21:5a:d9:64:ff:c7:a1:d9:57:00:87:89:c4:21:ee:
         73:2b:46:11:9c:37:e9:b0:4c:ca:dd:fd:1b:d1:56:cf:4b:d2:
         d7:2c:fd:82:25:0e:98:67:5a:1c:4b:78:4e:8b:ec:b3:bb:a4:
         4b:b1:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:16 2025 by rpki-client