Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa
File:                     cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa (raw, json)
Hash identifier:          /HHY6D9n2oU+UloWjTVl3i54B1pJ63Bay8Wu9nr0a0w=
Subject key identifier:   1D:FD:D7:5E:BE:40:40:34:1E:E4:30:0B:97:0C:14:56:35:D4:24:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC10B60F82E08F7AF47BD0030
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     397207
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:60:f8:2e:08:f7:af:47:bd:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=cb8160a1-7c89-442e-a709-fc95e489416d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:fd:17:51:13:f8:2d:50:70:7e:79:3c:dc:
                    15:e0:60:5b:72:db:05:8e:f6:0d:12:37:a6:f9:2b:
                    0d:4c:da:58:76:6c:e4:75:60:98:bb:aa:11:c7:1b:
                    ea:68:16:0e:45:f0:d3:28:8d:12:cc:aa:4a:6a:a1:
                    f3:a4:d5:49:89:fc:73:78:1b:08:f0:08:c0:e7:0c:
                    6e:51:b6:3a:26:46:80:f7:71:5f:46:e7:b9:f0:ed:
                    b6:32:1e:02:bc:1f:b6:47:33:d6:f8:8d:79:e3:dc:
                    88:a6:98:24:54:b1:e6:21:34:b2:47:cd:e1:94:98:
                    08:88:fe:d7:17:ee:e2:ee:1f:34:55:32:29:2f:f6:
                    19:bd:d3:3d:60:3c:58:84:fe:da:97:a5:99:b2:d9:
                    d6:2d:a8:3b:24:10:1d:f3:7e:a0:b2:db:0b:3b:b5:
                    56:38:73:47:e3:69:d9:40:f2:95:6d:6b:15:4f:6c:
                    38:c4:ae:ad:6e:06:87:40:a9:b3:d5:c6:fb:ac:86:
                    10:ed:ba:9f:63:bc:e2:27:6e:8a:5e:47:a9:2d:d3:
                    d0:72:ed:cf:f5:c3:14:3b:5a:ce:21:a6:c7:84:81:
                    f7:5f:fe:3f:13:c4:09:85:c2:47:cf:f7:64:ed:20:
                    a3:c4:c6:e8:27:78:99:78:c3:ae:48:a9:e9:62:88:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:D7:5E:BE:40:40:34:1E:E4:30:0B:97:0C:14:56:35:D4:24:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd9b3345-edf3-3cfd-b65e-dc4200e52acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:90:ea:aa:0a:14:4d:2a:a6:47:11:19:89:66:7f:55:e4:30:
         2f:7a:ed:84:12:46:05:bd:67:2a:76:be:78:91:8e:9b:41:9f:
         19:53:95:f2:d6:44:0b:5d:24:d2:8f:b4:b2:ad:92:dd:c9:49:
         18:e3:df:ef:6a:d6:ce:17:dc:7a:d4:09:2a:a9:4c:70:96:6a:
         8d:60:f4:a3:0c:97:e9:2c:d2:90:78:f5:c8:19:2e:45:5c:9c:
         51:2b:92:5a:c1:74:4f:63:a1:d2:ea:6a:eb:31:5e:e1:08:fe:
         c2:93:a4:ab:2e:f4:69:71:49:f8:f1:22:6b:55:6e:61:65:cb:
         30:78:5d:69:db:ae:ac:3e:4b:1b:72:e6:fc:12:31:82:e6:ec:
         d2:50:fa:e3:51:85:c3:3c:b4:15:eb:1b:bc:18:b1:dd:b0:29:
         26:0f:8f:fc:b3:e2:c6:89:7a:17:a0:5d:2e:9e:d2:10:9c:5c:
         24:2f:2c:ac:99:56:96:65:04:9b:1b:4c:37:60:dc:a7:77:f0:
         35:2f:c7:50:ae:98:87:d1:f2:50:ad:71:b0:a0:a8:91:19:bc:
         59:30:68:75:63:87:d9:14:5d:0f:60:db:f9:96:a6:d0:12:3e:
         20:c9:65:7c:ce:74:dc:ea:0e:cb:06:fc:5a:e8:e0:1f:6d:cf:
         3b:9e:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:06 2025 by rpki-client