Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a81e10-11c1-3796-a41f-ec2fa2c9e5a8.roa
File:                     f2a81e10-11c1-3796-a41f-ec2fa2c9e5a8.roa (raw, json)
Hash identifier:          ECXUfud+sUhpOODsS6Fh/ngywTkY+SD+gHG+UQBWWJs=
Subject key identifier:   00:95:38:16:29:4A:E4:18:D1:F1:9C:02:88:3C:06:95:1B:89:F5:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B8BD6E083E9E0F4CD2180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a81e10-11c1-3796-a41f-ec2fa2c9e5a8.roa
Signing time:             Wed 20 Aug 2025 14:36:54 +0000
ROA not before:           Wed 20 Aug 2025 14:36:54 +0000
ROA not after:            Tue 18 Nov 2025 15:36:54 +0000
asID:                     396609
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:8b:d6:e0:83:e9:e0:f4:cd:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:54 2025 GMT
            Not After : Nov 18 15:36:54 2025 GMT
        Subject: CN=fae654c8-af5d-4bb6-8d28-6c04664d5b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:8d:db:1e:70:49:0e:6d:7c:dd:a3:09:6d:
                    37:38:b7:31:ca:e6:de:79:61:fa:b2:7a:73:6a:d9:
                    11:2b:a7:af:6b:96:55:80:f0:32:1f:86:b4:37:a2:
                    73:86:6a:38:6f:e2:13:49:04:04:ff:4c:a5:d1:26:
                    1f:c2:8d:ac:07:51:c8:c0:d8:da:2e:40:35:5d:0b:
                    b3:2d:31:e2:ff:39:95:cb:5d:c3:43:b7:6b:79:96:
                    d0:62:79:3d:0f:72:11:d0:09:ff:9b:8b:60:30:44:
                    82:ab:a5:00:38:57:93:2f:66:4e:02:4c:dd:79:cd:
                    53:0b:6d:af:d9:bc:e2:cf:7b:4c:51:15:12:30:f9:
                    5f:86:62:68:2d:17:07:d9:46:20:be:2e:61:28:3e:
                    da:37:66:65:f3:ac:c5:43:39:9f:1e:1c:f8:a0:3e:
                    66:84:12:39:53:86:c8:70:0d:b9:85:7e:93:f1:0d:
                    25:2e:04:57:e3:92:5f:29:27:c5:45:a8:00:2f:32:
                    c3:31:c0:a0:b5:d4:a7:a2:40:ba:56:99:ee:15:c4:
                    aa:d5:64:af:37:18:c7:f0:fe:2b:7f:3d:ea:00:46:
                    ab:6a:9c:ec:69:7f:f9:6f:4c:07:62:86:d0:d0:01:
                    72:f0:c6:ba:67:c7:63:67:46:bd:9a:0e:04:b5:ac:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:95:38:16:29:4A:E4:18:D1:F1:9C:02:88:3C:06:95:1B:89:F5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a81e10-11c1-3796-a41f-ec2fa2c9e5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:d5:85:57:fe:d1:c0:c4:b5:ba:c5:29:cb:9b:77:f9:82:
         72:d9:40:84:61:94:b7:f1:eb:bf:9f:97:ad:c9:9b:61:56:4d:
         dd:ee:a9:45:49:90:f4:0e:ff:9b:8e:c4:7f:5b:aa:d2:75:f0:
         07:d4:24:6f:d6:23:75:34:77:d1:f6:3d:de:af:05:f9:ff:8e:
         89:d2:88:ee:b8:de:09:3d:54:02:b2:b5:05:1a:3b:8f:be:6a:
         e1:84:ff:7e:a5:57:01:32:f8:aa:2c:7e:71:56:6c:44:82:71:
         5b:4c:58:35:ec:c0:89:3e:69:9b:49:d5:60:5f:44:b0:93:b0:
         33:1c:56:b1:06:f9:c2:26:c4:c8:2d:c9:fc:a8:3c:9f:1c:cf:
         9e:0d:32:34:02:6a:b9:bb:71:fe:de:eb:24:71:ff:ee:be:e0:
         d7:0f:fe:ee:36:c7:94:c1:04:e4:5f:fe:af:03:dc:d0:e3:81:
         73:37:a3:eb:dc:97:ee:7d:73:36:d5:ad:ea:67:79:57:a0:92:
         89:44:8b:26:27:ea:98:ec:d6:37:2c:57:c8:a4:e5:ad:6f:65:
         b1:be:d1:c9:aa:f5:97:fe:52:02:28:1f:7d:51:8d:79:ec:e6:
         a0:99:ec:07:bf:4c:c9:cb:b9:3e:83:9b:05:83:94:3e:bf:55:
         87:b0:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:44 2025 by rpki-client