Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa
File:                     0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa (raw, json)
Hash identifier:          ZIBrkPRjtPoALSVdBpZsOlIfAuW9d5F+uHJM0gjEJF8=
Subject key identifier:   1C:B5:02:2E:44:9A:ED:B5:46:6F:26:39:CE:A6:44:42:92:DA:0D:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F587691B1FCA01878800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396615
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f5:87:69:1b:1f:ca:01:87:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=78c3470d-cd9f-4e83-a963-b566d2356e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:44:17:94:dc:80:98:1c:c8:19:4b:a3:85:
                    b7:4e:98:9d:e7:c9:de:35:45:05:65:c2:bd:1b:e5:
                    a9:6a:9e:56:24:ac:52:93:17:3f:bc:a7:4c:06:4f:
                    87:30:c6:12:2f:0f:6b:48:71:06:a3:cf:59:be:da:
                    b3:b0:b0:a7:98:dc:3e:41:13:d7:47:20:9f:77:62:
                    01:13:f3:d5:aa:8b:2e:08:a3:c9:80:02:e2:45:99:
                    0a:d2:5d:71:74:b4:a7:5c:77:e7:9f:b2:2a:1d:b8:
                    18:ac:aa:22:78:02:d4:fc:ae:d0:40:b0:e9:33:bd:
                    b7:de:36:67:15:0e:ab:2e:07:36:bb:43:59:93:1c:
                    e5:cc:fb:2c:1a:e8:5d:11:25:0f:35:24:9f:c8:ab:
                    53:13:06:ef:5b:62:63:2d:0b:92:cf:f3:d4:03:e4:
                    91:a9:53:8e:56:15:17:b7:34:30:eb:47:da:92:7d:
                    cb:57:23:9b:44:0b:15:04:1d:79:f4:f2:e5:9f:69:
                    9f:b0:97:38:b4:90:eb:90:b3:0c:57:d7:69:80:9f:
                    e9:78:88:55:e5:2a:ec:c7:8e:28:10:d3:ba:b8:0a:
                    5c:38:e4:4a:f9:09:26:e3:f7:50:81:f2:27:4f:d6:
                    57:86:43:2f:06:d9:ac:80:5c:04:5c:ce:b1:8e:9d:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B5:02:2E:44:9A:ED:B5:46:6F:26:39:CE:A6:44:42:92:DA:0D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:b8:8f:72:cb:ab:78:d4:ef:23:8a:b5:47:09:af:60:80:
         0c:d0:e1:3c:28:03:ce:38:20:65:7e:93:62:aa:a0:ac:1b:53:
         c7:17:04:3c:9d:a3:4d:70:72:79:f6:4b:59:cc:53:51:1c:61:
         a1:74:8d:d1:25:10:7c:37:31:73:b8:fc:8e:8a:8d:7a:2f:2d:
         73:3d:ea:cf:97:33:80:4d:5a:54:45:1d:88:4d:45:27:1c:d7:
         3b:3b:35:fa:9a:1c:c9:b1:99:89:ac:29:7b:5a:e5:f6:07:5a:
         1a:33:16:f7:18:71:f1:73:39:30:16:31:22:63:68:f6:e8:b0:
         fd:cb:37:9e:ad:a8:6b:c1:3a:81:58:e9:3d:d9:22:09:12:f0:
         6f:6e:bf:6d:cf:1f:99:0e:c2:04:9e:a7:7c:fb:24:27:ed:f8:
         5a:99:17:2d:e9:1e:1e:38:e4:71:0c:97:2d:b3:4d:2e:8b:e0:
         98:45:c6:c1:e3:c5:e6:28:ab:f8:27:4f:cc:e0:ad:f3:e2:ad:
         78:63:43:a7:fb:5b:01:3d:9d:ee:95:23:f9:64:ca:5b:08:54:
         1a:a2:94:e3:00:5b:1b:ea:cf:47:00:08:e7:42:37:ea:e3:b9:
         5a:1c:e3:59:73:16:cb:27:9c:d7:4e:1d:66:81:11:09:01:a0:
         63:4b:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:08:03 2025 by rpki-client