Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2abae-c366-3e16-a231-fda4f232655a.roa
File:                     ffa2abae-c366-3e16-a231-fda4f232655a.roa (raw, json)
Hash identifier:          sHtL4HORH7nQafZaQkBI7J3+0wz3cvbGw1D+HLJ5aWI=
Subject key identifier:   B8:92:CF:88:C2:CC:96:CE:BD:E9:4E:C0:AF:84:78:38:CC:E5:68:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E440E6050445AC32FE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2abae-c366-3e16-a231-fda4f232655a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36624
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e4:40:e6:05:04:45:ac:32:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=19ea84c9-b157-47b4-a5ee-8f92a89a3210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5e:67:d3:9b:00:ec:42:eb:ea:3f:82:25:3d:
                    ca:3f:b4:be:bd:88:20:12:ec:39:79:81:90:55:b5:
                    1d:ef:8c:de:69:1c:c1:8f:79:ec:69:12:5b:f2:7a:
                    f3:f1:06:72:81:6e:23:6b:cd:b1:ac:b4:26:1e:f5:
                    1f:f0:11:fe:84:f5:e4:5c:d6:5b:09:6b:69:e1:8e:
                    ec:34:0e:9e:91:2e:ac:ff:2d:f3:20:75:7d:bb:da:
                    45:7e:0a:ff:da:ad:73:aa:b3:62:78:df:ea:1e:f3:
                    0e:6c:79:4e:ff:37:6a:57:1a:bb:a9:b0:dd:17:bf:
                    69:1d:bc:a9:da:d6:28:d0:bb:87:95:27:62:84:4b:
                    f1:92:0f:96:44:73:60:c6:0f:4e:dd:cc:aa:6e:c8:
                    89:b7:38:a3:80:96:8e:a8:a8:5f:e1:c9:9b:4a:6b:
                    b6:c0:a0:70:23:16:ee:3d:cc:07:2d:f0:4f:17:1e:
                    a2:98:09:5c:98:75:de:db:11:78:3b:39:7e:c6:2c:
                    cd:3b:74:c6:85:14:50:d8:f4:57:d0:23:bb:e8:1a:
                    ef:17:bf:74:a9:ef:14:bf:74:9a:95:d0:83:8a:21:
                    2b:cf:b9:ae:78:fa:57:c3:66:96:e8:48:fa:de:be:
                    65:ec:22:67:81:3a:40:65:0e:3f:e3:64:70:f9:16:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:CF:88:C2:CC:96:CE:BD:E9:4E:C0:AF:84:78:38:CC:E5:68:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2abae-c366-3e16-a231-fda4f232655a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3a:1c:38:68:9f:90:a8:fb:bb:d6:27:f6:2f:11:dc:b6:68:
         ad:c8:0f:53:67:54:a8:a4:f4:71:b6:b6:0f:98:9c:47:dc:41:
         c3:55:3b:9b:07:78:9c:9f:77:07:fc:42:9e:86:7a:0a:fb:00:
         88:d8:66:77:20:7a:37:3e:73:84:81:fd:d9:42:96:17:4e:5f:
         86:3d:7f:b4:4b:4f:f5:06:6a:be:34:67:a9:4a:cb:d6:78:cb:
         28:8b:35:54:2b:8e:a9:23:75:a6:89:8a:0e:8c:7c:61:51:da:
         81:69:3a:cb:57:0a:26:a4:df:d2:6b:85:cb:ba:d3:61:cf:19:
         e8:89:e5:4d:a4:81:90:ca:70:b1:d1:a6:dd:31:d7:d0:1a:5b:
         7f:ae:41:96:1f:d7:36:66:79:d6:b3:cc:19:8d:af:5c:99:96:
         03:88:75:03:86:d9:89:f0:40:f0:d4:8a:f3:fb:e8:bf:75:cb:
         e3:83:26:f0:e8:4d:27:2a:db:43:e4:7e:a0:e4:06:0d:a4:7a:
         ad:d2:a5:63:54:42:1c:64:42:c8:fc:e3:19:20:11:fa:e3:d5:
         b7:54:57:6f:79:32:2a:43:31:75:80:4e:b6:a5:61:da:26:49:
         d9:95:ac:5f:4c:4f:47:62:1e:57:84:3b:66:de:db:8e:e8:86:
         ef:98:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:44 2025 by rpki-client