Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
File:                     e126527e-e6e7-3b21-9475-99e27b03dade.roa (raw, json)
Hash identifier:          49HQhjkO7Q7SXHVr+ENa6HLOxaqyevOBT1/8bPxYH+4=
Subject key identifier:   21:3F:57:6D:47:F3:F0:07:8B:DD:5A:17:DD:D3:AF:26:AB:91:B9:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A6200BF91C755B6B6603500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     397197
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:00:bf:91:c7:55:b6:b6:60:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=1e2208ff-e49d-4709-a5a8-021ec27225d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:7e:8f:ac:8c:2a:b8:6c:5e:fb:b4:36:f6:
                    62:e3:f6:00:c4:80:bd:bf:18:85:f0:1e:9f:ae:b2:
                    64:1b:19:a9:04:d5:3c:69:69:0a:22:f4:a2:0c:44:
                    e0:74:3e:d6:1f:6a:74:27:a1:ab:16:c9:97:b2:b0:
                    55:36:08:3e:9b:2c:91:a7:df:ea:12:6f:7e:9d:d0:
                    b6:3d:56:27:db:1d:e8:38:86:26:a3:69:c1:c0:42:
                    85:dc:91:85:32:f6:b5:e3:25:7d:c8:b0:90:18:d2:
                    11:5a:33:d9:77:9b:f8:98:d3:d0:61:47:31:97:16:
                    b8:60:cf:bb:22:b9:4e:12:fb:76:91:73:1d:a7:71:
                    a3:de:78:21:1c:e6:f5:0c:ea:18:e8:15:d6:77:1b:
                    d4:8f:e2:bf:13:25:46:89:18:94:96:8f:18:dc:a5:
                    e8:73:8b:3b:17:57:a0:7e:6d:db:11:52:a7:b9:e8:
                    75:80:40:e4:93:e5:45:64:7c:b7:f3:ab:67:fe:b9:
                    58:cd:a0:35:9a:e9:81:72:af:65:2a:4f:7f:30:d4:
                    37:6c:0b:d6:ca:7d:0c:aa:97:01:3c:a8:9e:da:f1:
                    95:cf:dc:f3:71:42:34:13:f3:64:80:aa:54:4b:3b:
                    7e:a1:f0:21:6b:27:47:75:47:7b:42:d6:23:0b:4b:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3F:57:6D:47:F3:F0:07:8B:DD:5A:17:DD:D3:AF:26:AB:91:B9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e126527e-e6e7-3b21-9475-99e27b03dade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:94:4a:4d:2e:5c:66:2d:20:21:3a:55:77:f1:63:27:54:
         13:0e:c7:53:96:ad:27:6f:a1:cf:0a:29:1b:56:9a:32:0c:3a:
         62:40:53:7d:1e:c3:77:4e:cf:01:ad:0d:f2:e5:80:69:66:ed:
         64:5d:bf:3d:2e:42:94:fa:01:f4:01:7a:bb:88:18:88:87:ee:
         bb:44:0b:b8:98:60:07:16:e2:11:63:d7:b0:39:36:7d:c2:01:
         48:fe:5c:4c:68:10:2f:70:90:98:d2:02:21:8f:ae:62:1b:57:
         1d:43:4d:ef:af:de:c8:ef:88:68:a8:c2:4e:bd:18:2d:0e:7f:
         db:86:9e:6b:1f:2f:3a:49:47:fe:2a:4c:f8:1e:c7:d2:b0:ae:
         7c:32:ac:f9:a0:cc:85:04:8f:1e:10:15:54:f2:77:e0:86:0f:
         b3:1a:76:44:26:93:a6:89:ee:e5:9d:47:8c:f5:38:c6:c3:b9:
         dc:01:29:80:6d:b5:82:65:a7:9e:71:9b:41:03:38:8a:04:8d:
         45:95:89:6a:bc:d2:38:bc:83:c8:53:d0:62:a8:ab:d8:8a:67:
         9d:1a:b7:37:90:ed:51:db:16:31:47:b6:53:e2:59:f5:ed:08:
         88:b6:2c:47:1a:64:60:f2:1e:22:22:a6:d4:00:76:9f:29:08:
         d1:5a:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:29:37 2025 by rpki-client