Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38e31fda-526f-30c2-9b48-03057fcae279.roa
File:                     38e31fda-526f-30c2-9b48-03057fcae279.roa (raw, json)
Hash identifier:          KnpmGUzzWrnRuH4spi3+9jn8vrSxmRVUye0xl26l0N8=
Subject key identifier:   BF:76:5B:F8:9D:D6:FB:BB:F8:93:65:BE:42:92:39:28:FE:BB:5E:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC270D805D3275A9B86B45A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38e31fda-526f-30c2-9b48-03057fcae279.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     396572
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:d8:05:d3:27:5a:9b:86:b4:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=f1c9757e-5a64-413d-9342-5f8c4e33c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:57:f7:8a:48:46:0d:26:e1:d8:35:f5:a2:
                    5c:fe:c7:81:d4:4b:f9:4d:11:0f:3a:e7:12:c0:ec:
                    25:84:ae:71:fd:23:5a:90:6e:ae:14:c4:3c:e5:21:
                    36:a8:ed:65:2f:d5:0f:2a:c9:c2:00:dc:17:3e:09:
                    88:c9:e1:b2:a1:7e:d7:02:91:41:39:56:02:d0:86:
                    07:7c:cf:12:42:9e:48:11:4e:d0:2f:d4:8c:68:28:
                    59:45:b3:d1:05:94:55:f2:9b:2d:fa:8e:b4:45:2a:
                    0b:eb:71:1e:86:47:c4:cc:00:e5:93:b3:0e:75:4e:
                    b9:15:6c:a9:ab:96:f6:70:34:13:3d:12:a0:4f:7a:
                    0d:4a:43:5d:cc:bf:70:79:ac:5a:53:73:9e:75:15:
                    4c:b2:69:6e:c8:e7:79:39:16:b8:a8:28:a6:05:05:
                    d6:a4:ba:38:6c:38:55:ea:1d:2f:31:08:2d:ac:6a:
                    0e:fd:7c:1c:cc:c3:e7:45:93:97:82:fb:b1:6b:92:
                    d0:b3:b4:f9:36:f8:de:0f:5a:0d:7f:38:8a:b1:bb:
                    35:36:3b:3f:82:14:84:cc:70:39:b5:4d:b2:a6:cc:
                    07:c4:9f:32:f3:a5:14:24:28:c9:77:7e:03:11:dc:
                    09:9a:c8:cf:8b:cb:ad:9d:2f:86:8a:d0:ae:b1:88:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:5B:F8:9D:D6:FB:BB:F8:93:65:BE:42:92:39:28:FE:BB:5E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38e31fda-526f-30c2-9b48-03057fcae279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:a1:c1:87:7f:de:42:49:58:17:6b:20:7b:2b:28:f4:8f:
         c2:3f:d3:27:44:78:b3:ba:71:64:c2:57:c6:54:d3:7f:69:79:
         de:3e:52:56:d1:ac:51:26:64:26:00:df:41:e7:19:49:9b:6d:
         55:6c:c4:f7:d6:ee:ad:86:27:10:f8:bd:a8:1d:93:ac:8f:67:
         df:03:2f:bc:8f:f2:4d:5c:ef:33:dd:6e:88:cc:63:27:54:b6:
         68:01:70:82:63:c9:65:cd:13:e4:b2:cb:83:1b:2a:61:78:a6:
         3c:fd:2a:7f:98:c8:89:d5:4e:86:c1:e7:a5:fe:a4:88:9f:f6:
         31:31:f8:f9:5c:99:89:1c:4a:9c:9d:f4:0a:d9:2e:95:09:85:
         4c:ab:e3:a3:7c:76:8b:fa:c2:04:fe:cb:20:d1:72:1f:58:d2:
         a8:17:e6:aa:9f:f7:83:6b:f7:a2:01:c9:bd:d9:5b:32:e2:0e:
         7d:36:58:49:44:54:e0:3d:f0:41:eb:7f:3e:a7:9e:2a:86:16:
         c0:48:67:39:b0:1a:da:d1:83:fb:20:b3:69:32:58:d6:73:f0:
         1b:a3:f0:d4:4b:d0:cb:27:44:2e:a1:47:52:b1:a5:31:25:6a:
         a4:a3:f3:7b:60:60:e8:31:c0:f4:79:ee:99:24:9b:c9:09:69:
         1b:d2:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:10:12 2025 by rpki-client