Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa
File:                     f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa (raw, json)
Hash identifier:          cvKSEBA8afdye9hKNdFGU48zAVZXFiX4aJ5/xKPmhfw=
Subject key identifier:   1D:B1:B9:83:B5:9B:13:45:92:5B:B4:20:52:66:EC:BA:22:6B:BA:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E07A519AF753DBD4C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396614
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e0:7a:51:9a:f7:53:db:d4:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=624f5ab2-2de8-457e-b6fa-0be8ff98c89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:81:11:c2:c1:83:aa:b0:bf:ac:b5:51:65:
                    00:01:02:56:0c:a8:0e:78:28:d5:27:08:89:ed:c6:
                    58:0a:5f:35:79:47:e7:4f:80:b2:da:71:12:d7:e1:
                    e0:85:57:c5:27:b3:95:a6:47:7d:89:ab:93:f6:48:
                    fb:1f:fd:c1:74:ff:0f:f7:93:a7:f9:02:cb:ba:7e:
                    5f:94:40:66:b3:aa:1a:8d:1b:99:a3:99:e2:96:2e:
                    8c:fa:6e:97:d0:cf:8d:57:16:d0:21:b1:49:e5:c0:
                    45:20:96:c5:3a:86:2b:45:3d:19:78:91:ef:e5:68:
                    34:3a:8b:aa:25:2b:2b:9c:66:64:e4:f9:a2:61:78:
                    b4:6c:7b:e2:11:71:12:b4:19:89:24:16:f2:6a:eb:
                    51:b6:83:75:19:e1:3d:02:04:95:4a:8e:21:c3:dd:
                    0f:d5:0b:aa:69:64:ba:84:94:0f:a1:5a:6c:a6:2a:
                    9c:20:8e:55:66:f3:f3:f8:31:c8:fa:59:f9:cd:b6:
                    54:5a:b6:cd:b7:d4:5c:6b:12:b6:36:e9:cb:18:c2:
                    5a:c6:14:21:d8:b9:99:9a:23:9b:f8:93:f5:3d:18:
                    a6:f8:f4:52:d0:ef:7f:b8:6c:77:90:76:ed:fa:6e:
                    b8:9f:f5:b8:93:2e:d8:cc:8e:95:a6:ff:be:14:7b:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B1:B9:83:B5:9B:13:45:92:5B:B4:20:52:66:EC:BA:22:6B:BA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:59:c6:6e:3a:46:5a:84:09:3c:d0:70:7c:75:c9:19:8a:
         6b:46:1f:40:25:cf:71:bf:6d:e4:6b:00:0f:41:96:e5:5d:fa:
         15:87:a0:a0:1a:11:c2:af:e8:28:42:f3:41:03:b0:07:da:31:
         d5:88:17:ee:cb:24:b5:2a:96:3f:2b:97:f0:a2:d5:09:f6:23:
         5e:01:c5:02:79:90:07:d7:2b:e1:fa:de:a7:59:c9:1a:d8:8a:
         bf:10:0c:3b:ec:f5:d7:87:72:07:40:1f:68:83:ff:29:b0:7b:
         43:08:d3:62:21:5f:60:a8:10:cb:b8:22:26:f4:8b:25:4b:2b:
         72:72:0d:16:78:03:28:be:a6:c5:29:c3:c1:d3:2c:fd:87:5a:
         1d:1a:b5:a3:b1:aa:27:f4:2e:d9:4e:6a:5b:21:ec:0e:a9:44:
         e2:6e:ac:e5:79:83:bf:ef:a5:6d:9d:a1:54:09:3f:a3:ae:a1:
         8a:a6:97:06:ae:46:7d:a5:eb:8d:47:9c:90:05:43:47:84:33:
         2f:5f:2d:02:4f:c3:83:cf:ba:ef:7f:c7:c5:c9:8b:e6:fa:89:
         12:91:52:18:a4:0a:bf:ea:ed:88:cc:15:a3:55:67:a2:90:4a:
         49:4b:05:a3:90:0b:e1:90:06:54:bc:d0:73:aa:5c:a2:c3:dc:
         65:18:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:04 2025 by rpki-client