Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa
File:                     eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa (raw, json)
Hash identifier:          8fgVsmMO/AIRpcxH4QcQnPW5DkmzagbA69DHYSmHBaQ=
Subject key identifier:   8C:6C:49:79:34:73:20:D7:84:7C:3B:5E:5E:DB:5E:FF:1B:AB:19:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FCA21E7E72779C879E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396549
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fc:a2:1e:7e:72:77:9c:87:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=666ed6a2-d814-4c90-a911-2b65c1415254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:ac:41:39:2f:b4:90:63:80:bb:c0:38:0a:
                    76:ee:da:a2:78:f3:c3:8b:71:e5:f7:f7:32:01:8e:
                    7c:49:b7:3d:65:a2:15:77:79:2d:90:f7:90:37:5a:
                    d6:42:2e:69:12:9b:3e:b1:a1:e5:59:9d:36:d2:d2:
                    15:d9:39:a8:84:29:36:60:65:14:31:71:a1:b4:d7:
                    bc:dc:52:fd:6e:8b:b0:75:69:6f:0b:50:c7:77:c3:
                    be:3d:8e:1e:60:3d:4e:0c:3b:1a:a5:6e:65:de:56:
                    7b:3a:43:f9:23:24:75:d6:ce:16:16:a1:fc:e9:65:
                    e0:69:3d:8c:b3:68:ce:4e:b1:15:a0:ae:8d:01:37:
                    05:e1:f5:f6:d2:b6:94:6f:21:67:40:90:2d:53:0e:
                    aa:8a:51:4d:49:81:4f:4e:30:39:9f:78:6f:b1:80:
                    fd:f7:c7:b9:99:9e:e3:09:5c:2e:47:cd:c3:22:cd:
                    5e:49:1c:f3:d7:8f:4e:07:f6:54:bb:e4:80:57:7e:
                    04:ee:29:3e:98:00:1e:93:9d:52:6d:f8:14:27:de:
                    ff:e7:f0:62:48:44:25:ac:99:f6:cd:94:09:e5:00:
                    0e:a3:e5:66:98:bc:1a:cd:c1:3b:e3:10:42:d6:8f:
                    7a:0a:a3:54:77:5d:ee:9c:f2:ae:3e:94:dc:37:35:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:49:79:34:73:20:D7:84:7C:3B:5E:5E:DB:5E:FF:1B:AB:19:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fe:79:60:c8:86:d5:f3:99:82:a9:da:34:26:7d:5a:00:a0:
         c3:01:64:bc:7e:45:44:f8:87:26:1f:c8:26:0f:de:df:e3:70:
         a1:0d:f1:9c:10:88:38:2c:2d:62:21:70:2c:9c:6b:8c:df:67:
         5a:d9:d5:26:a1:06:7e:0e:98:ca:dc:70:15:7b:9d:b5:93:22:
         14:cf:6d:84:80:ca:3e:83:ef:0a:75:86:86:af:0c:ba:6d:32:
         f3:56:ce:d3:73:48:3e:de:57:d7:d5:9c:93:99:7b:bb:96:0a:
         e1:88:a8:87:92:55:73:e4:85:5e:63:cc:4a:9e:fd:b4:4c:9d:
         06:91:54:72:89:cb:e6:22:a2:28:cd:05:f2:6a:0d:7e:c8:d1:
         e3:d2:0d:52:75:59:35:88:7e:83:68:a5:9c:f5:fd:a5:e5:89:
         0a:f0:5d:4c:67:d9:d1:cc:38:56:8c:dc:ce:e9:6e:2c:a6:e4:
         92:b3:99:41:db:de:d8:6c:6e:18:3f:97:7b:ee:28:fd:e2:17:
         12:60:f2:6f:35:d4:64:86:70:33:e1:75:fa:51:fc:4e:33:82:
         ba:00:8c:6e:c6:39:13:aa:0c:c2:e6:74:3a:b9:5b:b7:9a:08:
         99:de:ae:64:e6:b6:ed:1a:a5:ca:9c:79:53:c2:8f:7e:0e:a9:
         4a:19:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:02 2025 by rpki-client