Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bf181d1-1a65-30f6-ae84-02394ac4c127.roa
File:                     6bf181d1-1a65-30f6-ae84-02394ac4c127.roa (raw, json)
Hash identifier:          DcUe5RMOUle8ZsxHuzm/ZT/utRzqY7yrZA6avHyCAds=
Subject key identifier:   7F:7D:48:AA:7F:99:E3:95:9E:F3:CC:4D:B5:65:E0:C7:91:41:79:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC10B61B080B7C1CCA34DE3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bf181d1-1a65-30f6-ae84-02394ac4c127.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     396577
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:61:b0:80:b7:c1:cc:a3:4d:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=752f728b-9296-45f7-996b-13747e675738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:16:1c:04:59:32:90:22:18:c2:38:1b:0c:
                    cc:a1:75:00:3b:55:e7:6d:25:79:14:40:f1:f1:ad:
                    32:f4:b2:cb:c2:71:45:71:f6:50:fa:e9:42:13:e8:
                    21:c5:56:ad:72:e2:c4:5c:d6:4e:60:37:1f:e6:33:
                    c4:05:d3:18:5d:10:8e:31:f6:2e:54:3c:18:28:a6:
                    3f:f0:7d:c0:eb:5f:4f:8b:83:5a:4d:c6:6c:6e:af:
                    93:6b:4c:61:4d:41:06:97:f6:c7:f0:15:65:76:2b:
                    3f:d9:48:31:19:c8:2a:8c:3b:ce:90:ea:b3:15:24:
                    80:7b:7e:43:91:9e:0f:16:f5:f7:25:04:da:c2:89:
                    2a:e8:59:2e:bb:3c:57:76:d5:9e:19:6f:0e:26:be:
                    6e:e2:61:22:4c:00:fe:50:bc:62:19:d0:a9:dd:97:
                    94:f3:4b:4d:bb:26:32:60:f9:a8:87:53:dd:2f:f6:
                    6b:2b:86:c1:7c:5f:86:bd:93:9e:ae:89:e1:9c:26:
                    bd:02:6c:e9:55:f7:34:cf:f1:28:9b:25:79:67:38:
                    18:f4:db:5a:46:3c:2c:4e:63:a5:e3:13:02:47:d2:
                    b8:ff:16:65:03:5e:a4:a0:99:b4:75:02:ee:44:f6:
                    07:cd:13:9b:5c:aa:e6:33:34:cd:4a:d0:ac:65:d0:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:48:AA:7F:99:E3:95:9E:F3:CC:4D:B5:65:E0:C7:91:41:79:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bf181d1-1a65-30f6-ae84-02394ac4c127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:75:31:08:50:3c:42:d2:d1:46:5f:08:1e:4f:b7:a7:55:
         c5:b4:79:26:37:88:8e:26:86:f7:02:86:60:da:55:56:4a:b3:
         fc:4d:e5:71:1a:aa:78:71:fe:98:4f:f1:f7:bd:2a:fb:bf:ce:
         97:ae:5e:c6:24:cf:11:6f:85:e3:20:fa:60:c1:95:a6:45:de:
         b5:8c:d8:1f:52:d2:28:4d:54:d6:df:fb:92:17:70:5b:77:41:
         9f:f9:46:9f:66:85:da:72:49:c7:9a:9a:80:20:7c:bf:88:97:
         12:b8:ba:42:45:c7:c3:f0:2c:96:b9:e8:cf:9a:7b:0a:7b:d5:
         89:b0:bb:3b:55:a4:36:f1:34:67:d1:cb:5a:b8:78:66:41:d3:
         b1:b1:67:38:9f:f5:b5:0c:60:f2:e5:5b:92:b8:68:f1:5c:a5:
         d2:56:5b:b8:f1:50:2b:7a:75:2d:b9:a0:e9:d0:5b:b5:8a:41:
         47:b6:0e:77:01:1f:48:f4:84:91:a5:e4:8e:c9:9a:dc:b0:25:
         e6:44:b3:0f:3b:25:00:24:39:6e:c1:89:49:6a:50:7d:fe:87:
         55:ce:c7:93:d5:59:04:b1:85:c6:eb:9e:59:23:2d:14:08:ea:
         9f:75:14:b6:08:fe:8d:44:46:f4:eb:88:0a:2b:cf:4b:89:e9:
         7c:41:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:05 2025 by rpki-client