Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e17c0e1b-6d46-36d6-98c8-2313ce4ff6af.roa
File:                     e17c0e1b-6d46-36d6-98c8-2313ce4ff6af.roa (raw, json)
Hash identifier:          JgpzQy9Wxxpedfp9B1sM5mgd2SxzGD/P81MMLFxyt2s=
Subject key identifier:   B5:C1:B7:F3:E3:02:99:0E:2F:C6:B7:EE:F7:24:F2:E9:DE:B9:13:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B89631DC853F006B25940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e17c0e1b-6d46-36d6-98c8-2313ce4ff6af.roa
Signing time:             Wed 20 Aug 2025 14:36:52 +0000
ROA not before:           Wed 20 Aug 2025 14:36:52 +0000
ROA not after:            Tue 18 Nov 2025 15:36:52 +0000
asID:                     396582
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:89:63:1d:c8:53:f0:06:b2:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:52 2025 GMT
            Not After : Nov 18 15:36:52 2025 GMT
        Subject: CN=f6c97c79-ee73-44c8-bd93-e30ce4d2e508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:ef:96:1c:60:d6:d5:ec:03:dd:15:a1:70:
                    d6:34:6c:79:21:10:9a:58:44:25:c5:1e:0c:29:ad:
                    a3:1a:f1:c2:3c:55:13:0e:04:72:21:f3:45:e6:4c:
                    40:f6:2b:10:f6:9c:81:98:8a:79:0f:d8:8d:3b:1e:
                    78:23:60:a6:b2:c4:1e:1b:bd:0a:b8:a2:dc:01:ed:
                    f5:84:5d:a5:96:a1:8d:89:ac:e3:6b:7a:39:2a:ea:
                    5a:6a:80:f3:65:24:1f:ee:3e:69:d5:a4:e6:37:32:
                    f6:c5:36:24:a0:7b:66:dd:63:f4:bf:17:9e:18:92:
                    35:aa:68:fa:8f:03:53:d2:ca:c8:c6:d4:9e:84:dc:
                    eb:b9:e9:11:04:1a:7e:9a:cf:40:c1:a8:25:c2:42:
                    03:9b:7b:8c:8d:03:18:41:95:ad:f2:90:44:d3:49:
                    78:8e:87:c2:8f:e5:75:1d:1a:d8:8f:4b:98:29:76:
                    c2:bd:63:66:c7:bd:4b:cf:45:9f:22:07:9e:9f:d2:
                    33:4e:4f:27:86:8f:eb:04:72:ba:53:dc:dd:2a:1c:
                    8e:56:46:c4:7d:34:05:03:c5:83:c2:3b:18:0c:0e:
                    ed:be:f0:8b:7a:8b:b1:e8:d7:e5:8d:41:0c:ce:fb:
                    2e:a5:52:69:4b:b4:39:ed:f9:cd:bc:c1:b5:02:d2:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C1:B7:F3:E3:02:99:0E:2F:C6:B7:EE:F7:24:F2:E9:DE:B9:13:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e17c0e1b-6d46-36d6-98c8-2313ce4ff6af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:8f:30:b7:ee:1f:7e:fb:f0:23:de:e2:ca:78:2d:50:2f:
         45:7a:3f:6b:74:43:73:64:f5:fb:29:23:b7:a9:7b:b8:9b:ab:
         f1:6f:90:cc:c7:88:ef:5b:6f:f2:bc:62:39:c2:8b:b5:54:d5:
         96:2b:cc:fb:fe:7b:b8:1b:79:b5:84:33:85:f5:56:99:5d:5b:
         6e:b4:5f:44:90:72:ad:55:53:d8:17:0d:8a:73:23:d4:c2:9e:
         aa:57:19:a2:44:6a:22:af:c3:39:1f:62:a2:a4:8b:c1:0d:f9:
         77:58:76:9a:64:35:14:c2:2d:da:29:40:ad:a0:f3:b6:b0:55:
         9f:49:e4:96:c0:1b:eb:be:58:e9:9f:6b:f2:19:cf:bd:0c:04:
         5e:7f:22:d8:3e:81:49:5f:de:22:de:3e:4e:b7:5a:48:5d:36:
         86:d2:cd:3f:c4:17:f4:6b:a6:37:9d:29:6c:5b:3b:9a:15:08:
         00:62:95:10:04:ec:47:be:91:78:86:21:e4:c7:0d:17:06:af:
         1b:2d:53:78:20:57:c6:20:4d:85:e4:7b:50:1f:bf:80:a1:cf:
         ee:41:41:41:19:1a:67:75:74:be:06:12:46:c6:3f:11:7a:ae:
         45:90:27:25:d0:b9:c5:7f:c7:a1:b3:fa:5f:57:f9:b9:e0:42:
         c7:d8:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:11 2025 by rpki-client