Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc630c62-7ad7-35d3-82ff-bac9a54880f4.roa
File:                     dc630c62-7ad7-35d3-82ff-bac9a54880f4.roa (raw, json)
Hash identifier:          Vm658PSmRw+TSKW9FKnTLtXcdDclmM1fge36RcxJwyA=
Subject key identifier:   37:AE:A0:48:0C:BE:A1:31:E6:44:34:58:43:E4:3D:12:43:23:CE:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E97B5935536E9669F000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc630c62-7ad7-35d3-82ff-bac9a54880f4.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397208
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e9:7b:59:35:53:6e:96:69:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=39c11fe6-5081-421d-b667-a8a406f0b86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:77:41:8d:7d:b7:b3:53:d4:d9:31:eb:10:
                    ad:8f:a8:d1:02:19:51:2e:4c:ef:04:35:f5:8a:31:
                    d4:6f:d4:1e:99:99:74:e8:ad:6c:e7:df:c8:7e:d8:
                    e3:0a:87:00:0e:04:13:cb:0e:4d:60:e2:fe:b8:2c:
                    74:d5:fe:03:47:35:a9:5c:3b:3f:cb:f5:eb:7e:7f:
                    98:fd:0e:36:83:96:a8:07:fb:5c:27:e0:21:9c:5f:
                    88:54:70:b8:c6:c4:c1:f8:d7:1b:7d:c1:e3:53:5c:
                    8a:43:f1:cb:3d:cf:4a:f9:7d:32:50:fc:a0:56:4a:
                    08:9a:45:ba:d5:e9:bc:c9:08:01:35:93:ed:ec:48:
                    65:a7:5c:0a:2c:0c:7e:60:d7:06:4c:f3:88:17:53:
                    62:75:71:f8:47:5e:85:8e:0f:4a:03:b7:e7:30:b7:
                    28:21:42:e0:1b:25:02:11:71:38:1d:31:27:dc:d6:
                    d8:1f:0a:62:a3:ed:33:1b:a2:a6:e8:4a:93:13:4e:
                    91:49:85:31:f9:80:60:8e:fe:ec:a5:e0:25:38:04:
                    be:f0:b9:f6:b0:d6:af:84:ee:4d:22:59:1a:46:35:
                    52:c9:e1:0c:33:53:73:3e:56:fa:aa:67:04:86:8c:
                    13:c3:6a:f8:fa:6e:08:c1:a1:a6:8d:db:89:b3:4d:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AE:A0:48:0C:BE:A1:31:E6:44:34:58:43:E4:3D:12:43:23:CE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc630c62-7ad7-35d3-82ff-bac9a54880f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:03:f8:58:83:e6:1d:4e:f0:21:93:c6:82:fe:e0:b6:05:
         85:a7:d8:5c:ca:a0:3a:97:f5:31:f2:e9:cb:78:7c:e9:58:3a:
         bd:c6:4e:46:d6:be:79:f4:ba:0c:01:e6:fb:96:3a:38:75:5a:
         a2:cf:9b:74:55:31:54:37:a6:32:88:fe:b1:2b:1f:e4:3d:14:
         0d:e2:96:e4:dd:fe:ec:a4:6f:23:ec:8b:fc:25:a6:aa:d5:8a:
         8e:67:0d:05:12:f7:79:1c:8f:dd:d5:9c:ab:88:45:07:82:42:
         98:08:d1:47:cd:70:f8:ae:09:bc:e3:71:00:2d:4e:9f:66:a2:
         30:33:aa:cf:38:dc:dd:bd:73:f3:c0:e6:63:0b:05:b0:3e:86:
         98:5d:1f:8f:af:17:ef:9b:83:af:68:fc:42:a3:e5:3f:99:2d:
         1b:7a:61:cf:6f:f4:8f:04:37:77:87:4f:3a:4b:3b:9f:b5:30:
         e7:41:19:f5:6d:d0:f9:05:76:cb:21:ea:9e:16:7f:b2:b3:7e:
         3a:ae:eb:b8:85:fd:cb:45:aa:72:bb:e9:39:3a:dc:16:ca:92:
         0b:95:77:e2:0b:66:09:7a:bf:84:71:d0:c2:a1:58:e9:f5:6b:
         d3:99:d9:42:87:ce:f5:96:14:bc:90:e2:e2:c6:af:af:62:79:
         c1:47:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:53:57 2025 by rpki-client