Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f180f3f3-eca2-31fa-be4d-f72f53e407db.roa
File:                     f180f3f3-eca2-31fa-be4d-f72f53e407db.roa (raw, json)
Hash identifier:          Mh5LXvTRRnofRv/WL5+xBke6jEiTLwhDwdPZgtL0UyM=
Subject key identifier:   0E:2E:A9:1C:B5:7D:28:88:3E:64:85:AD:5E:8F:50:B2:A1:07:87:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A5FA23183257DABBD080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f180f3f3-eca2-31fa-be4d-f72f53e407db.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     20431
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a5:fa:23:18:32:57:da:bb:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=bce20ce3-4918-425f-987b-16aedb0e6687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:e5:2c:30:26:70:a7:47:64:12:11:1e:83:
                    86:f0:2b:0b:6c:0f:32:41:6d:44:bc:ee:c6:62:e0:
                    20:3f:0f:48:24:7a:93:21:ed:18:86:12:f3:03:63:
                    8e:08:df:6e:78:a2:a7:39:f3:9b:73:f7:b7:6f:12:
                    f3:8c:ab:ba:e6:c7:f8:ca:58:72:e8:27:c2:5f:a3:
                    dc:cf:3b:f6:72:d6:32:e0:9e:b6:f2:1e:18:e4:ef:
                    e8:e1:ef:d9:52:11:21:a1:d5:2a:60:b5:b2:8a:a1:
                    e9:2e:77:bd:35:e1:ab:74:3b:03:6f:2e:63:96:6c:
                    57:a6:79:61:5f:de:d5:a0:85:e3:bb:bf:64:ba:60:
                    06:70:7c:c5:c5:a6:e8:cc:0f:a8:67:a8:84:c6:f5:
                    9e:e5:53:2b:9b:31:b2:92:be:f8:ed:8c:06:ce:81:
                    48:c6:07:8c:65:8c:ca:3f:b9:3c:46:49:97:a2:d3:
                    80:12:ce:a2:08:60:d3:88:86:7d:7a:20:1d:8b:0d:
                    30:cb:42:70:3b:8a:60:ab:a3:a2:e9:44:f2:1d:71:
                    bf:79:42:63:12:78:1e:a0:28:1d:c5:3a:0d:96:54:
                    a6:32:70:36:f7:3e:93:8c:a8:55:d6:0d:65:d3:ed:
                    61:7f:b1:5f:8d:a7:e4:70:e1:9e:7d:cd:0f:80:dd:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2E:A9:1C:B5:7D:28:88:3E:64:85:AD:5E:8F:50:B2:A1:07:87:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f180f3f3-eca2-31fa-be4d-f72f53e407db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:cd:8b:b6:51:64:3a:9c:59:ed:ca:ce:d7:15:4e:fb:52:
         19:50:38:0b:53:90:23:0d:56:aa:a2:ab:4a:d8:89:b2:e2:94:
         b6:b4:d1:8c:16:d8:17:f7:a4:8e:93:84:e9:ef:60:8d:18:14:
         10:ba:bc:fa:53:36:46:5a:99:c6:08:ba:20:43:ea:29:f4:f1:
         9d:6b:fe:e1:a4:83:57:cf:e9:1f:b2:b7:09:98:17:7a:f1:53:
         2d:1f:c4:81:ca:14:c9:09:6e:da:35:0f:20:3c:34:75:26:f4:
         5b:64:b6:94:bf:b7:25:65:5f:09:47:75:f7:5a:9d:b1:12:62:
         9f:37:e7:aa:dd:d5:33:56:39:0d:2c:ee:da:38:1e:30:a6:50:
         0d:4f:88:19:9e:07:78:3f:7d:1a:2b:8a:4b:cb:3d:75:81:bb:
         5c:06:d9:68:2f:73:30:0d:69:96:35:81:58:fc:ba:7a:4e:b4:
         99:35:69:83:cb:72:a0:64:13:0e:0d:b9:0b:2d:74:e7:44:c7:
         5e:a4:d9:ed:62:a8:08:04:ef:eb:d6:ae:59:83:17:e9:8f:b8:
         d6:cb:1d:c1:68:57:42:4f:6b:ea:0a:b3:98:75:46:78:39:b0:
         f6:d0:8c:92:88:68:45:0d:ba:87:a9:27:ab:2f:3f:db:d6:f2:
         36:7d:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:37 2025 by rpki-client