Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec219623-8677-3d60-8d75-5f2686aa8b6d.roa
File:                     ec219623-8677-3d60-8d75-5f2686aa8b6d.roa (raw, json)
Hash identifier:          DfMw9NowPRaHod9DS8hG+HEK0dYa4hsvYi0PU1l9Ui8=
Subject key identifier:   83:99:98:4B:85:22:0B:8B:12:C5:75:53:58:20:57:1B:D6:1D:74:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F93B7CEB0FCCAB178140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec219623-8677-3d60-8d75-5f2686aa8b6d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397200
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f9:3b:7c:eb:0f:cc:ab:17:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2404865a-3ce2-49e5-8ebf-c71389f45c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:68:bb:fd:fa:c6:b8:14:c4:e0:58:2d:df:
                    77:0f:a6:b4:54:7f:f4:c5:bd:02:a9:fb:71:a4:82:
                    f5:62:d0:5d:48:b8:a9:55:38:35:20:95:23:56:63:
                    b1:10:5d:ac:77:d5:62:81:6a:be:00:bb:28:d1:e8:
                    30:6b:b4:f8:02:cc:e1:0c:a1:c1:b3:ef:34:87:d4:
                    4b:88:c1:11:a4:76:16:da:bf:e5:50:c7:8e:5d:4c:
                    a1:c9:99:a3:65:99:c0:9e:53:41:62:a8:d6:15:d8:
                    ea:d4:23:74:3f:50:bd:70:c8:0e:a5:e7:44:97:d1:
                    26:56:49:85:45:1e:b9:8f:ac:55:00:05:7d:c6:a6:
                    59:a4:15:b9:48:31:a7:81:53:b2:6a:7f:79:1d:d3:
                    32:b0:e3:82:e4:1e:97:74:ca:7e:a3:5b:31:7a:cc:
                    5f:bd:d2:a3:4c:cc:1e:80:33:24:ba:9e:2f:18:94:
                    d4:e0:50:8d:e4:b8:28:f3:78:ff:c5:39:db:94:a7:
                    8e:2b:ce:33:75:81:b3:b8:a1:26:4d:34:97:26:ae:
                    05:a1:93:47:bc:ef:72:11:24:e1:e2:70:2a:8f:d0:
                    57:82:18:29:2c:e3:8d:44:90:59:34:65:33:63:dc:
                    18:e8:c8:76:85:1f:27:93:8c:b0:c7:c1:b2:7e:75:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:98:4B:85:22:0B:8B:12:C5:75:53:58:20:57:1B:D6:1D:74:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec219623-8677-3d60-8d75-5f2686aa8b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:38:d6:12:9a:e7:2a:e1:74:bd:30:d5:ee:a6:ce:c1:d1:f4:
         a4:2a:d9:c8:7d:27:2b:cb:00:3c:7e:dc:b4:08:41:2a:0e:a9:
         11:d4:f6:9e:ea:12:42:93:10:4e:6f:31:25:ff:49:e5:fe:61:
         32:b3:ff:e3:1d:9e:3a:20:1c:78:8c:d0:10:ca:82:8e:69:96:
         93:5f:e5:95:b6:b5:7e:9e:21:92:3c:65:62:f7:60:e1:88:5b:
         6b:a9:d9:5c:7c:a4:2a:6d:47:d2:38:5c:d2:8c:63:fc:8f:7f:
         fd:3a:7c:ae:8e:e3:94:9c:ed:01:d1:c1:cf:2a:bd:fe:14:70:
         f2:b3:02:76:2d:85:6e:fc:d2:b0:fa:ef:e2:9a:37:da:f6:e9:
         8e:a5:c2:3f:46:dd:a9:d1:ea:6d:23:de:85:7d:61:ae:de:be:
         db:ac:44:b3:58:28:8f:7d:0b:91:8a:17:2d:01:9b:40:a4:d3:
         2e:51:f0:41:da:c2:ec:5d:66:3d:6a:1d:6f:c9:cb:f2:98:48:
         90:7e:b7:73:a4:b1:ad:a5:95:66:8b:59:6f:e2:ec:e2:67:3e:
         66:89:ca:cd:3e:6a:b9:5d:79:1d:3a:32:63:9a:85:ff:b1:b2:
         b1:3b:39:7d:ae:6b:f6:92:72:83:4c:af:4c:cc:5f:5b:e0:c4:
         8e:08:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:34 2025 by rpki-client