Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee888194-90c3-3e9f-99f5-0ce880b7b581.roa
File:                     ee888194-90c3-3e9f-99f5-0ce880b7b581.roa (raw, json)
Hash identifier:          nlCtv80pFa39YspB9sRcpb6Pkw65jAQAjI0XlgsFJjc=
Subject key identifier:   0E:C7:31:1C:25:5B:2B:48:B2:E3:98:39:F7:58:67:64:C1:FE:F8:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B540C8B07AFD72C2A710D5B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee888194-90c3-3e9f-99f5-0ce880b7b581.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     21313
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8b:07:af:d7:2c:2a:71:0d:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=bf5d6caf-f01f-451b-a30b-b6b05d2599e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cd:5e:ef:91:1c:4a:b0:44:2f:bd:45:0b:11:
                    69:bb:99:fe:f0:91:69:4c:fa:53:ab:f5:f5:98:f7:
                    59:a9:d1:0e:87:22:b5:86:14:66:dc:e7:75:30:0f:
                    8a:73:02:28:ab:b9:71:97:7f:da:83:45:b6:1f:a5:
                    16:79:31:62:9b:12:39:f5:06:02:0b:72:f0:88:5c:
                    34:e4:62:86:0f:a6:c4:2a:ba:af:e1:61:4a:a8:f7:
                    08:4c:b0:d5:b7:ee:b4:c1:31:b5:a6:3b:e4:ad:38:
                    9d:82:ce:44:49:db:3c:61:d4:0c:21:6e:f0:5c:05:
                    e8:f6:89:3b:8e:5d:3c:8a:bc:21:33:eb:a6:51:ef:
                    80:a6:2a:6a:6a:b8:84:f6:02:60:57:97:c8:4c:31:
                    73:17:d9:70:a1:d2:40:93:d1:77:12:68:6c:eb:79:
                    17:35:6c:42:ca:cc:19:2e:3a:02:8d:f5:27:26:2c:
                    02:32:63:8e:37:31:6f:60:42:64:18:ed:2b:39:22:
                    07:21:c0:5a:1b:ae:4d:b1:8f:a4:7d:38:36:0f:5c:
                    c9:65:aa:ae:3f:0c:27:61:2f:95:0a:30:7d:85:e4:
                    f8:9e:a1:b0:cf:7b:b1:d2:97:7c:0b:24:7f:29:08:
                    90:a2:b1:86:8f:26:4d:a6:61:3f:dc:49:fe:f0:2a:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:31:1C:25:5B:2B:48:B2:E3:98:39:F7:58:67:64:C1:FE:F8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee888194-90c3-3e9f-99f5-0ce880b7b581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6d:f8:69:3f:79:4c:13:df:b3:e7:74:84:aa:96:db:99:fa:
         64:2b:c1:52:2d:ec:c5:14:a4:95:3e:78:ea:22:1a:d3:0e:c7:
         21:7f:3e:7c:28:08:03:ce:f5:8e:38:ac:c1:ff:0f:01:33:32:
         94:48:32:d4:17:92:0d:ca:f3:45:23:7e:d0:78:68:e8:ee:be:
         f1:ba:95:08:69:7c:3f:64:47:0c:94:41:fa:0b:74:f0:88:c8:
         3e:27:7b:1b:f8:a9:51:ed:49:a8:c9:d0:aa:2a:1d:ea:17:00:
         6a:e4:f7:11:5a:89:9e:f2:ce:8b:87:46:7c:f1:ac:a4:a1:cc:
         e6:57:de:5b:1c:6b:db:3f:fb:f0:c0:7d:86:01:15:8b:a2:26:
         d3:7e:45:cb:95:7e:3b:fa:0c:e2:2f:24:7f:5c:df:ce:e0:d1:
         4c:a0:de:06:c1:36:e3:87:76:0d:31:81:15:ea:95:b9:e4:d6:
         6b:c0:85:63:ba:a0:1b:16:0f:2d:9a:dd:ef:0a:43:37:b0:76:
         d6:99:a6:2c:0a:c8:1d:b9:62:37:95:ef:73:c0:6f:66:e2:b8:
         39:7e:e7:06:b9:29:7f:54:a4:b4:86:14:fb:d6:1f:4e:18:c9:
         67:53:02:20:ec:83:26:65:6b:1b:8b:46:3a:3d:f0:cc:a7:10:
         2b:86:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:51 2025 by rpki-client