Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da84040a-8943-3341-b422-a60071224972.roa
File:                     da84040a-8943-3341-b422-a60071224972.roa (raw, json)
Hash identifier:          jfE1FrKumq2QehZ8JXDie6kZ+jwCMgtBJPuYusgI1uY=
Subject key identifier:   F5:5E:28:8A:2B:A6:5B:2A:C9:21:47:25:AB:10:DF:31:C5:7D:41:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B94FEF02ECD0D88B0B280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da84040a-8943-3341-b422-a60071224972.roa
Signing time:             Wed 20 Aug 2025 14:36:58 +0000
ROA not before:           Wed 20 Aug 2025 14:36:58 +0000
ROA not after:            Tue 18 Nov 2025 15:36:58 +0000
asID:                     396592
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:94:fe:f0:2e:cd:0d:88:b0:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:58 2025 GMT
            Not After : Nov 18 15:36:58 2025 GMT
        Subject: CN=84d5be35-67a2-486e-bc5b-9b177d747ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:6b:9b:99:3f:8d:c1:5f:7e:5d:35:aa:27:
                    98:6d:f5:1e:88:5a:f3:5e:29:f0:85:29:5a:35:d4:
                    7a:d9:d5:cc:4f:e5:b5:4e:b4:c5:79:0e:5a:df:3d:
                    c7:ff:15:fb:6f:23:aa:44:b7:ee:66:87:2b:cd:ee:
                    29:e8:f2:e1:78:0d:5c:79:bd:bf:79:30:05:bf:8e:
                    90:d4:05:47:7a:20:f0:38:d5:0f:21:e3:bd:13:bd:
                    55:f4:bc:a8:55:2a:2d:b6:d0:8e:1e:bd:04:7c:19:
                    fd:2a:d5:5c:ea:b2:82:ac:aa:04:bc:31:ef:7f:7c:
                    c9:51:9c:2e:64:63:96:16:1a:84:6e:a9:10:3a:fa:
                    e9:cb:83:20:5a:55:0a:10:6f:46:e0:5e:f3:ca:31:
                    2b:e5:8e:c8:dc:91:fb:cf:6c:b9:78:cb:98:a7:20:
                    59:ac:e7:da:47:31:67:0b:64:b0:15:2a:f7:c2:3d:
                    11:be:29:11:d9:53:a0:77:f6:1c:3d:f8:4a:50:39:
                    30:1e:12:bf:de:5b:bf:0f:6e:c4:35:9c:ec:0d:57:
                    60:92:e6:a9:14:5f:54:fa:d2:36:cf:53:d7:4f:c1:
                    67:04:4c:0b:42:eb:98:2d:9c:7e:7d:a9:b9:79:35:
                    f1:2a:f5:d9:c8:4a:90:93:5a:fa:1f:fc:bb:06:4c:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5E:28:8A:2B:A6:5B:2A:C9:21:47:25:AB:10:DF:31:C5:7D:41:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da84040a-8943-3341-b422-a60071224972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:86:01:e7:24:d4:54:8a:84:ca:cc:fc:fe:93:d5:02:9a:67:
         8e:de:64:10:dd:39:bb:8b:72:0d:4e:3a:0a:b7:f1:6d:c8:5f:
         34:78:d0:91:b8:a5:33:73:70:d3:15:3e:f5:1d:3c:1f:38:1a:
         37:09:e4:2e:e0:60:bb:ce:a8:c6:95:c8:88:5b:7a:10:ca:66:
         f1:79:b1:6a:95:5b:ca:bc:c0:4b:f4:ca:4e:51:86:c2:3c:e2:
         f9:df:b1:5d:03:cd:0d:12:03:31:12:14:5f:29:39:ad:00:68:
         b6:a3:60:fc:1f:74:03:01:9c:52:61:52:84:6c:41:3d:8f:30:
         b1:0e:50:a8:24:19:62:0c:35:b2:c5:6b:69:f9:7e:c6:36:f7:
         a3:36:1c:2d:b4:d6:81:6d:c2:8c:00:39:70:3c:d3:e6:24:ab:
         aa:b0:16:7f:ce:4b:88:85:85:b2:7d:bb:af:e1:ee:c3:d5:69:
         53:2c:3a:58:2a:55:14:48:77:f2:f6:20:4d:d0:bd:c5:67:34:
         5a:56:73:85:e2:9a:ed:5e:dd:cf:7c:81:8a:a2:ad:2e:52:05:
         ad:a7:5d:4a:e4:d4:4f:4f:eb:c2:c9:ff:ef:a6:3d:1a:fe:21:
         33:33:b9:f2:45:03:67:4e:0e:75:23:f7:50:c9:cb:26:ae:22:
         7c:18:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:57 2025 by rpki-client