Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa
File:                     d9dee4cd-e720-378c-ae57-f470d4345094.roa (raw, json)
Hash identifier:          zuPjfIXjTCwV31po+MOQKA6X/0auHNTzwNnDLj+sCEw=
Subject key identifier:   B5:65:78:D1:7D:C5:A1:A2:2B:80:BF:0D:34:A6:70:B3:EE:09:C2:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C86AEBDA2F889EF81B7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396576
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:86:ae:bd:a2:f8:89:ef:81:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=e1812146-8042-42fa-98ce-6270bcf8edf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:08:31:21:ab:9f:18:79:5d:0f:78:26:19:
                    5d:cf:e0:1a:be:cf:c6:cb:6f:6f:8a:91:06:bf:ad:
                    3c:b2:66:a3:c3:d5:bd:aa:41:35:cc:d9:ce:82:1f:
                    a4:61:12:3a:16:be:b3:82:28:32:07:48:3e:0d:04:
                    a7:9b:af:ae:97:20:3b:b8:45:5d:c1:49:53:d3:b1:
                    14:8f:0d:7e:5c:af:b2:12:19:ad:f8:90:d9:b3:d2:
                    85:70:bb:c4:85:9e:1d:ec:f9:5e:9a:c1:5d:8d:4b:
                    ef:92:74:ca:2c:32:f9:ce:32:59:d4:7a:5c:98:21:
                    f3:64:26:ee:d5:19:a8:e4:0e:82:60:da:3e:0c:4a:
                    00:b3:11:43:bc:11:5b:78:e1:64:2e:44:e8:bf:a9:
                    20:c3:37:39:7b:4f:bf:43:45:ac:07:e5:a4:00:af:
                    00:8e:8b:89:88:7a:bd:d7:34:4a:d9:3d:36:c2:7f:
                    44:ff:ad:62:ba:aa:c8:97:b8:ae:81:b1:ae:c4:b7:
                    d5:d4:f2:1c:e2:6b:48:ac:7a:02:bd:cb:a2:ce:b8:
                    25:1a:eb:6c:6b:77:43:49:96:dc:a0:02:de:36:7b:
                    39:94:0b:40:84:b5:df:dd:c4:07:3b:c8:bd:a3:d5:
                    88:08:8c:aa:22:4f:97:67:bf:c0:3e:cb:4f:38:7a:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:78:D1:7D:C5:A1:A2:2B:80:BF:0D:34:A6:70:B3:EE:09:C2:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9dee4cd-e720-378c-ae57-f470d4345094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:e2:9d:fb:6a:43:3b:f6:95:5a:a9:fc:2b:6d:18:c8:b1:
         d1:78:2b:25:e0:3d:fb:cb:e9:66:a3:9a:57:cc:47:cd:8f:74:
         38:36:5a:d8:0a:1a:e1:2c:d1:e4:a6:5f:f3:b8:5f:f4:0c:34:
         26:58:59:d6:fd:d9:17:3b:4e:12:dd:89:4b:47:99:bc:2c:e4:
         4e:2e:7c:22:76:83:79:47:ae:75:d4:c4:b3:9a:99:98:47:23:
         df:f2:98:89:89:de:e5:6b:09:48:d8:cf:0d:c9:cb:e3:9e:4d:
         40:32:ca:bf:86:99:4a:48:e3:e0:54:78:8e:28:9b:21:ce:a3:
         60:c4:1f:84:41:75:67:b2:03:ad:84:ba:78:94:ff:2b:74:51:
         78:53:94:4b:6f:93:d9:67:59:47:f9:81:07:d7:70:74:fe:de:
         08:64:f9:73:d3:12:a8:50:76:74:42:1c:f6:a0:3a:ee:6d:c0:
         2f:90:72:f8:79:32:19:b3:a6:03:e4:37:7b:11:17:e2:13:d7:
         6d:99:0e:d5:b1:96:63:99:39:16:f0:63:7f:ad:af:e7:eb:31:
         12:78:bd:94:62:b0:67:f5:0c:f8:9c:75:46:be:8f:4f:f7:4e:
         b1:03:5b:49:18:ff:81:37:18:cc:fa:86:48:69:c0:47:35:de:
         3d:b3:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:47:23 2025 by rpki-client