Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8501fc9-6d2b-3bb2-82f1-a490d11cc792.roa
File:                     e8501fc9-6d2b-3bb2-82f1-a490d11cc792.roa (raw, json)
Hash identifier:          5fGbDidFGzr39YC/o+qbkBl8ptU5i2bysa/zbOh4Q1Y=
Subject key identifier:   7F:56:6E:AA:76:3E:2D:D7:BB:A2:A0:72:CF:67:8B:6F:B0:FA:DD:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58BAF738F322890A88780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8501fc9-6d2b-3bb2-82f1-a490d11cc792.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396600
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8b:af:73:8f:32:28:90:a8:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5938ea4a-5914-41b5-9e4e-acf748ffd8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:cc:84:69:65:c5:20:5b:09:76:20:20:4e:
                    a8:38:d6:dc:a6:e2:5e:6e:5d:b8:28:a1:ce:7b:22:
                    68:d7:0c:e4:87:5a:9b:98:9f:4b:45:21:11:ca:30:
                    f9:7d:2e:30:50:61:5c:a6:e9:40:86:c0:3d:64:24:
                    b1:5c:29:f2:e9:d5:3e:15:87:3c:d2:3a:86:e7:95:
                    e1:fe:d0:5b:99:2e:a5:8a:73:9e:8d:ff:66:ad:0f:
                    ab:28:f7:76:86:e6:bb:5b:06:d8:02:15:d9:3f:0e:
                    e9:de:65:1f:9d:b6:b9:6d:07:a8:3b:bf:fb:90:73:
                    93:ea:fa:71:58:33:86:dd:f0:ac:f0:05:b4:f6:7a:
                    8b:16:c3:bc:ff:bc:a2:2b:29:a1:a7:a9:fd:e7:3c:
                    c6:8a:51:dd:81:b3:0a:3d:27:6e:e0:8b:cd:d8:8a:
                    db:fe:22:8e:d0:a9:d0:26:76:d7:95:1f:bc:0d:98:
                    a5:76:97:79:7a:bb:b0:21:f7:15:e5:08:a1:fd:29:
                    f7:42:c3:3e:4d:ae:e6:86:d5:3c:7f:37:09:1c:0c:
                    98:62:a5:00:71:ef:28:be:75:f4:76:59:eb:f5:52:
                    7c:9e:8c:68:3f:ca:9f:48:f5:6b:51:41:a5:05:41:
                    06:e6:51:9a:f9:33:e2:a4:21:83:4f:7c:0e:f9:3c:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:6E:AA:76:3E:2D:D7:BB:A2:A0:72:CF:67:8B:6F:B0:FA:DD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8501fc9-6d2b-3bb2-82f1-a490d11cc792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:c1:e5:71:54:1a:08:55:a2:d5:5a:8b:73:11:16:fe:ad:
         c3:ca:eb:68:05:3f:a9:8b:2c:f7:59:54:9b:c3:ca:ac:48:ac:
         c6:62:89:15:6d:d4:56:40:d6:8b:9f:76:9b:fb:b3:b9:ce:7e:
         50:fd:0d:8a:fc:7c:cf:7d:d5:36:1a:91:44:e0:e2:4b:a3:e3:
         8b:cc:25:ca:df:07:2e:d5:3a:45:b8:0a:47:c0:1f:f7:6c:6a:
         f9:03:73:56:56:2b:81:ac:89:9c:55:a6:17:95:79:ae:5c:15:
         3e:48:f3:8e:b4:dc:3c:bd:35:3e:fb:15:6d:ee:78:a6:df:f1:
         56:1a:f2:f8:34:0c:5b:de:e7:2a:8c:81:ff:df:eb:74:5c:54:
         68:e8:48:1d:bf:03:de:5c:d5:b0:25:e8:61:41:80:cf:a4:7d:
         2c:11:f3:4f:59:c1:5b:c0:a1:64:4d:d4:20:56:22:58:39:a8:
         c5:2d:39:03:20:d8:98:1b:6b:56:72:66:e2:f4:ae:1f:65:e3:
         5d:e8:97:be:cb:1b:42:0a:38:18:08:83:b4:2d:d2:b2:18:ad:
         53:71:c7:35:62:b7:6d:03:95:27:74:bd:31:d5:d2:49:f9:93:
         ce:d5:f8:4e:77:be:c1:8d:5d:a9:13:d6:6d:30:e6:2d:fe:4c:
         47:f2:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:53 2025 by rpki-client