Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae930a6a-542f-3690-b488-689ef316d220.roa
File:                     ae930a6a-542f-3690-b488-689ef316d220.roa (raw, json)
Hash identifier:          A/BRfaGv/XBR1eK/zdE2X2UFlGF0spCpbMJhaJR1mv0=
Subject key identifier:   6F:6C:D1:59:62:56:93:B9:F0:EF:A3:FE:0F:CD:30:85:19:68:C0:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC270CF336503BBB388BF87E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae930a6a-542f-3690-b488-689ef316d220.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     397209
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:cf:33:65:03:bb:b3:88:bf:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=31880c35-7705-49ae-b44a-b3f583f518ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:aa:0d:22:42:16:8b:d2:5f:37:e3:44:7c:
                    06:82:ef:f5:0c:4a:ee:35:10:a3:95:72:e9:5f:de:
                    e7:6e:e9:78:27:23:65:d9:0c:79:51:92:40:ae:76:
                    2a:8d:f1:78:b4:f8:f8:b8:e0:21:e9:72:c2:1a:b4:
                    7a:88:cc:0a:4b:70:ef:ea:09:f1:db:b1:cd:a8:ac:
                    dd:92:d8:a2:0e:88:c6:dc:6b:a1:63:61:0b:f6:e3:
                    d8:e0:c7:06:74:7f:56:c4:e2:4b:f9:a4:4a:ae:b5:
                    b3:40:e3:0e:83:43:26:a1:f8:ec:47:ed:4e:61:53:
                    a8:73:99:55:65:56:7d:24:0b:2d:3c:c9:51:88:99:
                    aa:b7:53:7c:2a:a7:7a:b0:23:dc:71:84:66:1a:ca:
                    9a:98:ab:61:5b:64:90:41:f7:85:18:6a:2e:20:98:
                    b6:2a:a5:4d:bd:2e:40:89:24:ce:5f:23:ac:71:0f:
                    04:d2:48:b1:a1:44:8f:ee:99:63:f3:d4:56:76:a7:
                    fb:7a:87:c6:8d:25:aa:b8:a5:86:a6:c1:6e:bf:d6:
                    e9:1b:bb:56:be:c9:d3:0e:a7:9c:e5:f5:e1:50:05:
                    f2:06:a5:d3:45:c6:7e:37:15:57:ec:bf:ac:3e:15:
                    1c:bf:c5:c3:e6:84:d8:10:3c:dd:6c:75:39:09:64:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:D1:59:62:56:93:B9:F0:EF:A3:FE:0F:CD:30:85:19:68:C0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae930a6a-542f-3690-b488-689ef316d220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:a1:cc:2d:ba:f7:ae:c7:f5:3d:ad:49:23:f3:67:51:7e:
         83:ac:9c:0d:1d:10:54:6a:60:7c:00:ad:90:ed:3d:b3:c8:ed:
         37:09:50:ae:aa:c3:96:35:ce:9c:a2:b4:cc:f6:7b:84:d0:a6:
         77:5d:ba:46:97:fa:c3:ee:21:e0:4b:3c:26:23:73:84:74:19:
         e2:57:1a:0c:c4:20:ad:88:fe:35:ce:a2:5a:79:3a:fd:4d:46:
         84:29:46:e0:fe:14:cd:f2:c7:27:ac:dc:2f:63:b9:06:98:09:
         ff:b1:6c:45:60:62:7b:a5:16:14:d7:3e:97:09:c9:7a:9f:f1:
         77:a6:e3:b6:1a:13:f3:49:70:63:ee:f9:65:aa:4b:c0:d0:73:
         c4:c0:30:38:03:f6:50:41:90:31:fc:df:74:6d:0a:6a:c4:e4:
         e3:b4:57:c7:ad:ca:35:0a:e1:ff:25:52:3d:80:88:2b:a0:46:
         39:7f:2a:5a:91:a6:36:59:6c:55:8a:a5:c7:62:96:e9:fe:1d:
         26:c2:a3:5a:2c:d1:73:03:00:7d:7d:0f:4e:0c:49:06:e9:92:
         e6:e5:48:14:a8:89:47:09:1b:1b:e3:7a:e2:50:b6:12:9d:ed:
         07:e5:47:df:1f:96:c0:63:57:94:00:d7:b1:e1:6b:74:18:4e:
         e6:a4:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:19:00 2025 by rpki-client