Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eec4bd12-57a0-3c41-ac66-ae6ef1116412.roa
File:                     eec4bd12-57a0-3c41-ac66-ae6ef1116412.roa (raw, json)
Hash identifier:          2hnLw8kgFTXeey43PX7K/FuY0as0NP2Wd1Ku2PB+2nY=
Subject key identifier:   7C:0D:2E:EC:C2:8B:47:99:51:98:EE:C5:21:A8:7F:FD:55:9C:59:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6A620075DC994E7D02CADB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eec4bd12-57a0-3c41-ac66-ae6ef1116412.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     36628
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:00:75:dc:99:4e:7d:02:ca:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=3014c816-241b-4724-a20f-f13c704babc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:15:13:62:79:b5:66:33:c8:61:f3:24:d7:
                    7d:a8:36:b9:23:30:ef:fb:f4:90:de:0c:5c:51:37:
                    99:34:dd:06:ba:b5:72:a6:d0:2c:21:97:7d:27:d2:
                    9c:95:45:36:74:92:a7:16:01:da:10:30:81:0c:5f:
                    09:a2:08:f0:94:5c:86:fb:98:8f:14:82:94:8f:fe:
                    e6:52:71:91:26:2e:55:a9:5f:01:91:85:28:18:79:
                    4e:d9:43:ca:bb:fa:e5:f1:96:3a:e5:f5:b8:52:73:
                    d6:d5:9c:e2:38:ae:d0:8c:9d:b7:5f:f9:71:39:99:
                    58:98:b3:25:bf:86:1b:a3:c8:55:ed:3e:6e:8b:90:
                    aa:c9:39:c0:6b:28:8f:7b:d6:89:0d:0c:cb:89:6d:
                    b1:b7:c5:fa:00:12:20:c6:d1:63:04:a6:ab:5e:9d:
                    5a:cf:d6:34:af:65:0c:7b:59:38:6c:11:c4:92:09:
                    83:ad:90:5c:d4:21:6c:43:51:e1:73:25:6f:05:ad:
                    1a:35:45:ee:78:0f:99:38:e3:26:4c:16:f3:20:1d:
                    23:db:60:87:ce:cd:99:97:62:9a:16:65:45:95:5a:
                    62:83:3b:d9:ab:ce:75:fb:74:4c:c2:9a:53:bf:f9:
                    a0:de:b1:ec:cc:70:ab:ff:0a:a0:30:ac:78:2b:26:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:2E:EC:C2:8B:47:99:51:98:EE:C5:21:A8:7F:FD:55:9C:59:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eec4bd12-57a0-3c41-ac66-ae6ef1116412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:5e:92:71:f9:86:af:64:09:e3:46:b6:0c:4f:8c:51:e6:e3:
         9e:15:1e:a5:de:0e:94:e0:3d:fa:9a:ec:e3:98:52:ac:a9:da:
         df:cc:79:09:ee:be:3a:22:75:59:0b:2d:0c:9a:4f:d2:49:c4:
         16:81:1e:ff:99:15:85:a9:44:25:2e:36:6c:26:38:18:be:f9:
         d2:2a:c0:92:61:4e:95:6d:5e:ac:4f:50:ea:15:b1:77:36:0f:
         53:81:57:90:e4:87:03:d7:a5:a4:3e:ba:ed:30:50:0b:64:33:
         ce:ba:bb:a1:91:2d:5c:ba:55:4c:36:ae:d7:7f:37:c9:07:a7:
         c1:13:a8:22:5c:dc:87:1e:bb:1b:c5:ff:eb:c2:25:94:5d:e3:
         54:27:55:a0:b4:f1:7e:36:e7:61:1d:5d:06:ce:fc:5a:45:2d:
         19:da:2a:7f:93:13:75:19:67:03:9c:37:a6:b5:9e:7d:9e:35:
         0c:57:1f:67:05:b2:e0:7d:06:6c:f2:e7:6a:cf:4b:66:4c:2d:
         2e:45:32:5a:29:a8:4b:be:2a:f0:01:b7:a7:c4:cb:ad:cf:21:
         8b:7e:7b:e5:6b:af:47:7a:7d:e4:45:28:22:bf:25:74:9d:9c:
         da:66:a2:3c:7e:0e:7d:0a:f5:67:f2:8b:5b:33:66:42:69:0b:
         38:43:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:06 2025 by rpki-client