Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa
File:                     ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa (raw, json)
Hash identifier:          xOEOoo1kPWLV9SHeou8UCbR6rgBXVqld3Il8Ql3Le2E=
Subject key identifier:   AA:4E:28:C5:61:37:B2:21:06:E1:CF:7C:FD:BB:B1:DF:F5:20:67:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58DE5EC08A367ABA35680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     397200
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8d:e5:ec:08:a3:67:ab:a3:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0074c7c7-ba69-4d28-8aab-3e7497b1324a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ed:e3:99:03:a1:08:a9:b2:7c:7d:bc:b6:07:
                    7c:d6:fc:c0:86:1a:76:e8:df:7f:d3:17:ef:23:ba:
                    f2:d5:4f:4b:d7:2d:1d:06:96:88:99:16:18:da:82:
                    3b:11:b1:42:08:a3:42:5e:cb:da:23:67:9e:da:dd:
                    b3:73:01:20:97:ac:b8:d3:93:d3:78:74:38:77:39:
                    a9:ac:4d:29:be:1a:0a:02:56:a5:04:87:4e:0a:47:
                    df:60:9b:54:f4:c6:1f:fc:c9:8b:90:d0:15:2d:4c:
                    33:a4:c2:a4:5b:7d:1c:7d:db:85:bb:75:fc:86:bf:
                    be:c7:f5:38:a5:d9:02:2d:66:da:ea:33:65:5f:9a:
                    9d:4b:d2:bc:a1:e9:69:e9:ca:9c:e2:77:5f:7a:91:
                    8e:e7:a1:15:0d:7e:bb:f0:84:9a:0e:4b:8b:1c:f7:
                    62:3f:ae:a2:08:6b:19:d4:41:44:9f:02:1e:e1:95:
                    b7:51:bb:5d:c2:18:94:ed:01:b7:90:7f:90:65:47:
                    7f:cb:50:0c:cc:95:c4:81:39:70:40:8e:aa:63:a9:
                    03:e8:a2:65:71:ce:bd:6f:18:26:b4:40:9f:cb:73:
                    6d:ec:ab:70:c5:38:91:05:4c:96:65:c7:f9:13:0a:
                    90:c3:86:3e:95:23:da:83:9c:42:b2:60:4a:60:20:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:28:C5:61:37:B2:21:06:E1:CF:7C:FD:BB:B1:DF:F5:20:67:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ece8e64f-b1cc-39a8-bed9-b57e3112cb66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:32:e4:95:19:b0:75:6a:32:0a:25:97:51:6d:d5:00:30:18:
         56:b1:59:b3:30:53:98:76:56:a2:a9:4e:23:2f:61:42:96:48:
         ea:18:b9:f4:18:b2:ca:af:1f:6b:d2:8e:6c:85:43:d5:bb:c8:
         62:5a:a5:84:23:26:e7:e9:a8:53:9a:d9:4d:f0:01:09:14:23:
         f8:3d:f2:6e:32:68:31:71:49:5a:24:bd:5d:52:f3:ac:3b:ac:
         43:81:47:8b:2e:34:10:33:4b:f4:50:2b:e8:17:11:5b:1b:23:
         dc:ce:a9:57:97:07:82:10:c4:82:61:8e:10:2a:fe:18:0a:90:
         5c:80:ea:7b:86:56:53:87:ca:f1:57:1e:5d:29:2b:0f:b8:e0:
         65:d9:39:9c:d8:10:96:e4:a1:37:26:25:56:63:60:7f:56:3e:
         db:d1:4b:cf:f3:35:28:41:07:4f:46:ab:8a:49:c2:d7:cb:57:
         2c:b1:1c:ff:d0:1d:6f:48:18:18:6c:12:87:8f:6f:72:5f:10:
         e9:bd:51:7c:b0:d8:8a:54:ed:a0:30:eb:29:7a:2a:35:01:fa:
         f9:b3:b2:f0:8a:29:91:de:ba:f4:15:2d:55:90:03:dc:b3:11:
         b5:61:9f:9b:e5:17:09:e2:8b:c7:39:da:27:8e:f7:31:d1:c1:
         0e:e6:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:14 2025 by rpki-client