Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa
File:                     406b998d-1770-30ed-830d-b6462060a172.roa (raw, json)
Hash identifier:          ybCIVOavXERwqc+YOYlResk0WfarOK+Ot2fUItSoljo=
Subject key identifier:   A8:B7:CE:ED:73:91:77:7C:DE:90:30:14:A7:DD:26:D3:6D:F4:F1:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB676307239771EFC6C1A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396549
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:67:63:07:23:97:71:ef:c6:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=549eb530-f31b-4c11-870c-596805aadf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:6c:d1:ca:be:4d:31:2a:2b:bc:b1:91:e3:
                    ff:cb:ec:b8:99:bf:79:e4:dd:28:31:75:0a:08:e0:
                    1e:4f:7c:8d:19:3c:5a:a1:4b:89:bc:e6:a7:2a:67:
                    56:df:1a:69:e7:ca:e1:ea:ee:ee:fa:fe:d1:de:7c:
                    56:a8:ad:4e:bf:c4:d6:70:68:c3:d6:81:a8:be:0c:
                    07:46:16:34:b8:65:f6:0e:8e:a2:29:8e:ed:11:09:
                    00:87:3a:19:9b:f3:12:24:95:d6:73:4d:23:d3:f1:
                    8b:14:d9:be:25:2b:ff:ed:35:95:25:4e:f8:cc:6b:
                    bd:69:d1:ff:e9:ab:e8:a9:6f:6d:53:95:a3:38:b5:
                    df:03:f2:e9:d1:ed:5c:33:b9:37:7d:99:45:eb:4c:
                    a6:68:a6:e3:a9:a6:d7:c1:5d:f0:81:06:c7:14:3e:
                    37:9e:03:bf:2f:e5:88:f9:5d:6c:4b:fa:48:9e:78:
                    98:c0:d2:10:33:30:6b:a7:7e:58:ab:c1:22:aa:83:
                    11:42:d6:b6:52:d3:f7:22:87:6a:e3:0e:7a:56:1d:
                    fe:45:e3:6f:1e:8a:5b:84:af:bd:0d:ce:85:a4:ef:
                    10:b2:be:72:b3:9b:47:0a:22:d0:4f:f5:e9:98:a1:
                    fa:d4:9f:b2:9a:68:cc:68:03:a2:46:3c:3a:35:31:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B7:CE:ED:73:91:77:7C:DE:90:30:14:A7:DD:26:D3:6D:F4:F1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:ea:4d:97:73:a7:18:4e:6b:9f:d4:7f:1f:20:57:12:80:
         87:18:78:21:38:0f:79:4b:59:f6:3c:8f:24:6c:0e:88:ae:02:
         fb:eb:6d:cd:56:74:d5:38:db:c8:e7:00:a6:22:a6:ab:e6:e7:
         42:9e:ef:33:f0:7f:4e:dc:af:1f:dc:10:a9:f3:c6:2c:38:4a:
         88:ce:93:53:ef:54:75:c5:9a:09:0f:3b:3d:f3:06:d2:8c:e1:
         8f:5b:e6:9a:96:2d:3f:5f:ca:06:46:7e:af:3a:4a:e0:07:b9:
         84:ff:84:9b:52:79:ac:c9:bd:52:1c:89:7d:86:2d:38:dc:e7:
         32:8f:36:89:aa:6a:ce:04:3e:5f:e2:70:74:b8:13:38:08:9b:
         97:74:23:80:d6:a7:58:92:62:e4:5d:10:de:1d:ea:1d:49:a1:
         66:24:97:b1:d9:c1:14:87:57:1f:70:1c:9a:a8:b8:16:d4:e8:
         60:c8:e7:6b:11:d4:81:37:73:5e:98:1b:9a:2a:a8:1d:7e:57:
         a8:cf:90:76:f4:2f:eb:0d:e1:47:ae:72:e0:59:3b:e9:c9:99:
         37:58:56:e7:a9:83:44:11:5c:a7:14:d2:58:62:cb:5d:81:6b:
         95:a8:d9:f4:9e:7e:17:d7:53:02:e4:f3:3f:b2:f7:1c:26:e9:
         80:c0:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:28 2025 by rpki-client