Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df841435-b01e-3021-9dae-88fe7e7d92ef.roa
File:                     df841435-b01e-3021-9dae-88fe7e7d92ef.roa (raw, json)
Hash identifier:          DWCSgsFok/KaJJpl6GXnkOuOsd1nWT8kpbp93FWibgo=
Subject key identifier:   3C:2C:1A:BA:A4:2C:CD:BA:1E:5E:55:31:09:4A:BF:93:F2:FA:71:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A61FEFDA7E3A3B10C056E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df841435-b01e-3021-9dae-88fe7e7d92ef.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     396592
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:fe:fd:a7:e3:a3:b1:0c:05:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=9c723777-8b31-468d-9163-8b7362712648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:3b:9d:c9:5b:a1:61:09:0a:d6:5e:01:b1:
                    5a:9e:5b:8b:f7:d9:e8:0f:af:fa:94:10:e9:82:a4:
                    e2:49:5b:34:da:f8:34:fe:07:15:7b:ae:1f:63:fe:
                    d5:e0:24:9f:4a:4f:39:15:3a:3c:49:91:da:67:f6:
                    a4:1f:7d:a7:81:0c:2c:6c:ce:55:47:95:f3:c8:a3:
                    e2:1e:16:80:25:f6:b1:51:ee:e1:f4:c8:eb:b6:a5:
                    62:44:10:24:77:01:14:82:6f:9c:5f:d7:c4:e1:34:
                    af:93:c3:77:6d:ed:07:94:2d:e4:bf:33:e4:cc:2f:
                    0b:e7:1b:82:30:e6:5b:05:7d:ee:a6:77:4d:9f:dc:
                    a7:e2:b2:e6:f6:df:62:94:4e:19:b1:7f:38:58:57:
                    65:36:a0:04:89:a0:66:42:54:6b:60:db:66:f7:65:
                    2c:03:b7:af:d1:ee:0b:3e:79:dc:1f:72:09:49:17:
                    cd:30:fe:da:07:34:8c:12:79:c3:b9:70:5c:0c:85:
                    99:54:a1:db:0c:28:dc:c0:f9:c3:ea:c3:bb:35:41:
                    5f:2a:94:a1:57:ae:53:4b:b2:56:f6:97:0c:10:19:
                    dd:6a:f5:0a:85:00:9a:d0:bf:57:74:6e:ff:44:22:
                    b3:bc:38:d9:1e:a0:ba:65:b1:83:cf:58:91:14:93:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2C:1A:BA:A4:2C:CD:BA:1E:5E:55:31:09:4A:BF:93:F2:FA:71:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df841435-b01e-3021-9dae-88fe7e7d92ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b0:99:65:d8:08:af:fa:21:09:34:ce:bf:ce:c4:d9:67:75:
         e7:66:c9:d6:71:35:47:77:48:cf:18:57:79:de:3d:e2:d6:dd:
         6a:d5:1c:e7:03:d3:72:84:ae:d4:7d:95:48:d6:76:ca:bf:d0:
         f2:8a:3e:d7:cf:d2:c8:8a:39:95:a0:b8:0a:8d:5c:e4:2a:0a:
         9e:79:6e:ab:d6:6f:2a:a5:e4:13:8d:6c:4f:ed:fe:d6:67:ac:
         3f:d1:e7:ab:3f:29:f4:c2:36:01:27:62:4f:76:25:c1:30:21:
         c2:29:a9:2a:6a:85:74:86:a9:86:13:61:52:49:43:b3:88:ac:
         0d:9b:b1:aa:f7:1f:a2:5a:91:9a:b2:ea:59:ac:ce:20:4c:33:
         0a:1c:de:cd:60:c1:28:35:0c:0b:a9:21:24:98:7e:ec:3f:f2:
         07:74:1a:26:12:87:aa:39:c4:2d:86:ec:31:3f:e8:f1:7e:79:
         44:ca:e2:c2:4a:f7:86:36:3c:98:5d:45:a7:93:65:86:8b:eb:
         34:e0:cf:4c:bd:60:f3:a0:53:af:86:9f:70:c7:95:0a:7c:6f:
         b8:92:09:c4:06:d3:8e:61:c0:0d:39:5f:24:79:8b:77:7e:3a:
         ae:89:fa:09:75:a7:62:1d:2e:0f:fc:44:d3:3c:89:30:cd:1a:
         43:7c:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:00 2025 by rpki-client