Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2e4e507-73ce-338c-9d12-e5e8d15d84d6.roa
File:                     e2e4e507-73ce-338c-9d12-e5e8d15d84d6.roa (raw, json)
Hash identifier:          JqN4yHjpMs1B1I8gRurHaGLC+lkF9FpVvT5qYrTy4BI=
Subject key identifier:   E1:DA:0D:92:67:34:56:E0:CA:0B:74:DC:AA:40:F9:80:87:F9:38:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F0F23DCE02AD1ACCC3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2e4e507-73ce-338c-9d12-e5e8d15d84d6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396602
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f0:f2:3d:ce:02:ad:1a:cc:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=97c2bf48-c327-4d87-9e29-1129527b606b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:35:0b:94:6d:b6:f8:5d:05:a4:9c:de:19:
                    8f:10:64:f2:f8:b6:03:5f:75:4f:71:d3:ed:1d:bb:
                    9d:d7:40:66:c8:c3:75:ed:a5:99:51:97:72:c1:21:
                    3f:21:19:5c:fd:c8:f9:c1:fe:31:f7:cf:42:9d:a9:
                    66:8e:10:62:20:5e:a2:cc:61:95:48:78:2f:6a:b3:
                    1d:3f:50:dc:35:4c:ee:d4:10:c2:d5:de:44:e5:06:
                    f4:02:a7:c2:32:6a:8a:d3:f0:f4:53:13:76:27:63:
                    42:01:4f:ca:66:67:05:1b:64:84:ad:3f:6f:b7:38:
                    88:49:79:59:47:c8:13:1a:dd:0c:0c:0b:66:fa:54:
                    3f:bf:2e:0c:4a:a5:f3:61:04:58:ba:a5:40:cb:a4:
                    e5:72:c3:e3:49:01:ac:5c:ba:da:40:d7:ae:86:a9:
                    75:60:df:39:d9:21:ef:12:19:b1:50:7c:a2:c8:96:
                    48:2f:86:bb:b8:64:af:0d:0b:34:43:8d:70:84:3c:
                    7d:0f:41:ba:86:ad:0c:7a:4a:68:dc:2d:62:5b:4c:
                    60:01:ea:60:a9:8a:02:e7:b4:a5:11:4a:30:3a:1d:
                    40:eb:52:63:d0:e7:e6:33:59:aa:6a:41:d0:db:c3:
                    f1:19:a4:20:5a:84:2f:f9:aa:10:0d:ec:70:8a:2a:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:0D:92:67:34:56:E0:CA:0B:74:DC:AA:40:F9:80:87:F9:38:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2e4e507-73ce-338c-9d12-e5e8d15d84d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:f2:a0:10:00:34:8f:92:fb:3c:de:7f:e9:57:0d:c0:84:
         2a:62:8e:b5:86:8c:f2:f6:7c:75:00:e7:f5:80:12:02:62:fa:
         5c:a9:88:f4:af:d6:2e:f2:da:55:f4:b6:77:28:c9:88:00:f3:
         21:70:db:8f:ad:bc:03:d6:a5:63:85:4f:fb:83:07:13:8b:fa:
         6a:d2:9c:5c:eb:ca:e1:c7:2c:c3:26:aa:86:96:56:f3:87:59:
         fe:05:84:85:4e:bf:f7:a6:a7:88:8f:00:ce:78:04:f2:fc:8d:
         4d:57:5b:2d:95:1d:3c:0e:80:34:7d:8e:f4:a2:3c:84:79:df:
         af:c7:4a:26:49:d5:f2:3a:07:d8:ad:de:12:6e:d2:ab:7f:89:
         03:b6:a6:64:bd:dd:67:6f:9b:e5:ca:9e:0c:33:24:87:57:ae:
         c4:78:a0:b0:17:31:19:c2:e3:f5:b8:59:bb:5e:55:47:f4:b2:
         de:3c:a7:20:57:63:61:de:9b:f4:98:8b:da:4c:bf:65:af:93:
         2f:f6:cc:45:a8:21:cb:0f:ab:91:4a:14:fd:0f:ed:16:e0:62:
         27:76:83:ab:8b:43:8b:8a:7d:07:e0:14:0c:2d:bb:6a:62:83:
         84:d7:80:6c:b7:db:5c:27:38:35:33:dd:9e:43:e6:31:3b:14:
         b5:54:e9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:43 2025 by rpki-client