Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/190028a8-8802-370c-a320-c0ca2cbe4be1.roa
File:                     190028a8-8802-370c-a320-c0ca2cbe4be1.roa (raw, json)
Hash identifier:          ftoe6XZgdJR5YvM//6MWtFO6cPnwj+hVGBW7kqQ0f10=
Subject key identifier:   4C:6C:F0:8F:99:5E:0F:DA:A3:5A:5E:DE:99:0B:00:E3:B1:E2:B5:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC10B637872066CA4B2AE2E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/190028a8-8802-370c-a320-c0ca2cbe4be1.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     396594
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:63:78:72:06:6c:a4:b2:ae:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=3a85eb95-80c8-4ea7-adb2-9e2caafbed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:d1:34:1c:0b:d5:c2:8f:d2:cd:1e:4a:0c:
                    13:6c:fa:19:80:c3:52:4f:71:3a:4b:37:0e:46:c8:
                    62:54:dc:7a:58:7b:de:d6:e4:30:47:52:49:c4:69:
                    86:88:05:9c:12:aa:04:31:c7:f4:c5:c0:60:02:cf:
                    53:11:b5:dc:28:52:17:82:3e:1b:77:ee:04:ba:c6:
                    94:ea:3d:90:64:c5:de:cf:0d:a1:f8:f3:05:28:c9:
                    72:72:a0:8d:10:a3:67:00:f1:92:ae:4f:cd:44:ac:
                    3a:5d:d1:03:e5:0c:c8:07:fb:e4:f7:90:0d:82:32:
                    34:71:88:1f:1c:a3:13:f3:a4:b7:bd:26:e8:e2:52:
                    56:d0:8b:5a:40:f8:5f:28:d9:a2:8e:e1:a8:dd:86:
                    16:2d:95:64:58:60:a0:2a:28:33:36:7a:7e:f1:ae:
                    d1:c6:96:6b:13:4e:37:61:48:10:8c:b1:75:ae:f8:
                    6b:51:b0:4a:d0:c4:8d:8e:53:3a:a5:93:c9:66:f8:
                    2c:1b:08:7c:b9:f9:90:18:39:10:1b:9b:26:91:4c:
                    2a:58:26:82:30:db:ec:e3:16:d7:37:93:08:7d:9a:
                    69:05:1f:0c:a8:a2:9c:7e:43:72:14:fd:64:af:a8:
                    00:27:92:6c:1b:df:d4:f8:10:0c:94:12:68:24:13:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:F0:8F:99:5E:0F:DA:A3:5A:5E:DE:99:0B:00:E3:B1:E2:B5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/190028a8-8802-370c-a320-c0ca2cbe4be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:90:88:f9:3d:8d:06:fd:60:d7:bd:73:60:e9:fe:05:db:10:
         d2:04:64:cb:f0:c8:f6:e2:09:79:5d:36:fb:2b:1d:74:4b:3d:
         a5:1e:a6:61:2f:5c:98:c9:93:57:f3:31:59:23:c1:fb:d6:20:
         79:b7:9d:37:c1:ba:5c:f9:e1:17:1d:e9:b3:08:55:94:8f:c6:
         7c:d8:61:58:a5:78:33:a5:85:5f:e5:dd:52:9f:49:2e:54:56:
         9b:fb:c2:51:20:cd:83:0e:f1:c6:83:8f:85:65:c9:04:da:ff:
         88:0f:12:67:c6:56:fc:38:df:94:96:b4:d7:de:37:60:9a:fa:
         45:f3:eb:95:4b:c8:74:16:b7:41:64:71:24:d7:92:b2:ea:c3:
         7a:af:e6:f5:b5:54:24:b8:ae:ec:7e:13:e4:49:3e:dd:73:bb:
         fd:a0:9f:a7:15:f6:6e:24:af:9d:f3:97:9b:97:29:95:d8:09:
         83:4c:fa:a0:b6:92:bf:ba:91:9c:a3:96:66:6e:cb:3c:4c:5a:
         20:29:a6:ee:30:97:59:b6:5e:79:e7:b3:40:58:49:5e:67:1f:
         07:e7:89:c1:f9:8c:a0:4d:fa:83:42:e6:42:09:1c:fd:4e:4b:
         2d:a4:fd:9e:a7:35:ce:4f:7d:ab:c6:51:38:28:e6:78:3d:48:
         14:ec:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:25 2025 by rpki-client