Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
File:                     ec6a4160-ba41-3819-b792-defc017a5b48.roa (raw, json)
Hash identifier:          nUxK4hQsUFcgHXzkJDQX/wRfoIBATp3JT0Cu13YezOs=
Subject key identifier:   74:C3:7F:B1:D3:D1:7C:64:39:20:68:BC:E3:0A:26:8E:31:40:96:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C8824D02D824259E72E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     396581
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:88:24:d0:2d:82:42:59:e7:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=4d1b0a67-c405-4543-b496-b98095886e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:4c:c9:fd:11:7f:b5:49:73:2c:06:2b:da:
                    b7:e3:2c:89:8e:65:43:f8:17:62:bb:f6:fb:2b:44:
                    33:77:79:98:18:75:92:92:f8:fb:7e:d0:cd:f8:7c:
                    89:5a:9c:ef:ae:74:0b:81:93:df:b7:e1:02:89:0f:
                    df:8e:2a:a5:e8:b0:63:18:3c:fe:f6:a5:88:38:e2:
                    ce:16:0d:22:cb:da:e6:3e:57:df:01:04:51:e3:2d:
                    a1:e1:78:96:6e:4b:3c:36:8a:1d:bf:aa:a3:2e:55:
                    fd:19:c7:e0:5e:fc:82:7d:0c:b5:f7:9d:21:76:14:
                    e2:5f:4f:98:c7:b4:7a:03:5e:80:90:4f:92:3e:44:
                    5f:6a:98:7c:f0:0e:37:17:fe:76:96:28:4b:52:95:
                    0a:56:0e:67:99:91:b3:89:fe:1b:0b:48:f6:98:02:
                    21:90:d7:f8:81:fa:ef:74:d6:da:30:b4:a5:8d:64:
                    8d:b5:61:38:ca:ae:fc:c8:1b:d8:9d:30:1f:24:67:
                    02:83:e5:8f:b9:9d:3b:59:41:57:e4:6b:21:a3:7b:
                    85:7f:01:7e:eb:8a:06:57:53:3f:d5:1b:91:4e:fe:
                    75:00:ba:94:8d:0f:32:17:08:42:f0:75:25:fe:48:
                    3a:6f:d1:94:7e:fe:a4:a1:34:ce:ae:96:e3:8e:1f:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C3:7F:B1:D3:D1:7C:64:39:20:68:BC:E3:0A:26:8E:31:40:96:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:46:7a:9d:0f:3b:9a:64:25:98:b3:bb:44:3c:a0:03:26:
         69:7f:88:94:9c:fb:9e:23:7e:89:c3:33:bd:9f:2b:3f:2f:34:
         3b:27:77:ba:b4:78:8a:4d:43:16:d7:c0:ed:19:f2:cd:59:2e:
         d8:21:c0:f8:ce:3c:7d:57:a6:43:a1:d2:16:48:1e:71:cd:f8:
         d6:75:5e:94:6a:1b:38:c2:4e:cb:15:3b:1e:4e:90:72:0d:a8:
         8f:7d:45:89:03:fa:66:7d:00:cd:2f:14:96:7d:94:89:90:7d:
         a0:80:e2:5b:34:2f:ca:e6:bc:d9:d0:8d:d0:0a:d8:ff:e3:3c:
         99:e5:22:34:6a:8e:34:9a:1d:56:f1:bb:ef:6b:02:e9:b0:7e:
         4a:57:1d:3a:7f:9f:78:5e:f8:2e:8f:5b:c0:22:b4:ba:09:7a:
         10:b6:fa:7a:a1:0b:49:34:2f:8d:e3:af:2e:df:d6:50:5f:2d:
         b2:b5:ea:9a:02:6b:c5:c9:62:f5:0b:25:ce:64:03:2a:48:b9:
         60:65:d0:e6:d5:ce:5a:82:f0:87:cb:da:1c:14:0e:4a:62:86:
         44:47:4a:36:46:50:97:39:c7:b4:39:b0:60:c9:e2:02:78:1f:
         da:93:c7:c1:e7:09:d8:e5:7a:86:1f:f9:b3:d0:03:e7:f0:5b:
         6d:6e:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:28 2025 by rpki-client