Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea111c0a-a60b-3e03-af13-6a504d358b10.roa
File:                     ea111c0a-a60b-3e03-af13-6a504d358b10.roa (raw, json)
Hash identifier:          zSlge41HBOcvvSiXNGnCp+ZiB72VEvUsItmHxYtpQFY=
Subject key identifier:   15:C5:DC:79:C7:E4:C6:91:C8:35:D8:43:24:EA:DB:B0:5A:21:2A:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC5881F14AC5B16720B7100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea111c0a-a60b-3e03-af13-6a504d358b10.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396564
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:88:1f:14:ac:5b:16:72:0b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=86838116-1492-44cf-9c90-6aaa25713f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:6c:35:74:ad:cd:43:d0:7f:2c:b6:0c:f4:
                    81:1f:5a:4d:ec:15:a1:51:cb:83:d7:46:cf:ac:fd:
                    c0:f2:46:c7:63:e6:5d:f5:15:c8:29:48:f0:57:a6:
                    74:ed:cc:92:96:05:83:f9:e0:48:c6:15:da:99:3b:
                    7e:f7:bc:32:86:0b:6d:97:b5:89:d3:89:5d:cc:88:
                    7d:58:f7:7a:59:f5:b1:fc:d7:e9:73:40:7a:cb:14:
                    ae:da:68:43:41:9b:b0:c8:9c:88:56:13:cb:06:33:
                    0b:86:92:d7:de:84:99:8d:4f:93:6b:79:cd:96:9e:
                    a7:b1:29:6e:fc:b6:31:91:ee:8d:a7:9a:df:9f:f8:
                    33:fb:a3:14:ca:dc:d0:23:ab:b2:58:b6:cc:b5:99:
                    bc:5e:e1:11:16:fd:da:2e:af:b0:72:bc:e1:42:d2:
                    1b:81:9f:91:8c:fa:9e:22:c3:06:b7:97:1e:75:10:
                    14:d2:dd:d7:c0:de:38:78:63:f7:df:82:3a:6e:dd:
                    85:15:f8:d6:82:87:26:d7:27:48:2c:18:3d:33:60:
                    67:e0:21:51:27:59:b2:79:aa:eb:04:28:e9:29:52:
                    77:34:2d:da:21:6f:a3:14:32:77:b5:4c:84:fe:59:
                    37:2a:2d:cc:16:7f:3c:8c:e8:8b:89:eb:6c:9c:41:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:DC:79:C7:E4:C6:91:C8:35:D8:43:24:EA:DB:B0:5A:21:2A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea111c0a-a60b-3e03-af13-6a504d358b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:63:42:f5:0b:28:e0:6d:e5:5b:a0:79:dc:53:69:a8:50:22:
         cd:c8:7d:96:b6:bf:74:71:08:0b:b2:a3:bd:bc:28:8d:1e:bf:
         0b:81:0a:fd:cc:48:6f:90:28:ed:04:91:66:a1:96:c0:bb:39:
         71:c6:19:0f:d2:dc:c1:c0:3c:2d:cf:83:02:75:85:48:a8:6d:
         14:40:34:27:f7:40:92:6f:6d:33:f1:b9:ca:f5:cf:cf:67:3d:
         8f:2e:ff:8d:b8:28:82:4b:9d:f0:2a:00:08:7b:8a:de:17:0a:
         6d:cc:b5:98:5d:c1:39:1b:52:02:4d:0d:d1:7e:48:71:47:e9:
         a3:ac:43:4e:7a:53:8e:31:33:c1:a7:5b:2d:65:8a:2e:fd:ab:
         e7:f4:88:e3:3b:49:0c:0a:ab:34:a0:1d:9e:ed:91:a8:e4:97:
         27:c1:86:cc:54:9f:34:01:2f:62:c1:d7:1e:92:3b:11:1c:08:
         11:c4:39:51:4e:11:68:55:d3:96:f4:9c:d1:7a:6b:ff:81:0a:
         97:47:8a:bd:ba:36:32:56:97:5e:d7:63:f0:d4:b9:bd:5a:15:
         4d:6f:4e:f6:eb:3e:39:79:3d:14:e0:e2:a6:82:04:e9:11:d0:
         80:c2:a4:eb:82:98:f5:2d:5d:76:80:09:1e:db:5c:04:9d:15:
         53:7f:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:25 2025 by rpki-client