Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa
File:                     0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa (raw, json)
Hash identifier:          hGodByPfi47zo/MJFYCYPYX+GTsK6y0ZDplO4jkiKOo=
Subject key identifier:   7D:35:DD:04:FB:D8:92:52:5F:15:BC:E4:E3:BE:B4:70:03:D8:AF:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2762D0769868C9CF6F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396615
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:27:62:d0:76:98:68:c9:cf:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ca56e319-c7a1-4385-91d5-395301c9fd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:30:96:c3:7d:45:62:38:3f:15:24:e2:29:
                    90:67:3d:ec:9e:4d:83:42:83:85:2f:7a:b4:e3:17:
                    45:7c:7c:69:75:cc:aa:ff:0d:cd:3b:c4:c3:10:5c:
                    4b:15:92:ba:9e:d4:38:f6:2f:2d:a0:bd:c1:09:f0:
                    ca:f1:7c:cb:15:a1:1d:50:ed:02:86:38:1f:fb:37:
                    3d:61:80:32:01:f6:3e:fc:29:66:23:77:5e:d1:05:
                    88:a5:0e:3f:bb:ff:9e:9b:8d:ce:17:93:50:fc:5d:
                    0d:61:f2:56:87:66:90:5a:f1:19:b8:b7:26:f3:4a:
                    12:30:d7:4b:ab:c5:ca:1c:1e:6a:a5:f9:da:bf:c4:
                    33:3b:c5:89:99:fd:14:71:71:0d:97:75:97:0e:42:
                    fb:af:48:c6:1f:f7:2e:ab:c5:87:a2:03:7f:29:da:
                    f3:f6:e4:79:7e:07:9c:b6:fb:82:d8:2c:3f:c7:4b:
                    88:5e:e3:0e:6e:43:b0:73:fb:47:f3:74:8f:c9:1d:
                    c3:c3:e7:25:df:91:13:df:2d:05:76:2e:d3:ff:76:
                    84:6c:6e:bb:2d:a5:ed:9c:3b:10:17:78:5a:f3:e9:
                    a3:b0:4f:a2:1c:de:ff:91:37:b1:d1:fe:de:b6:20:
                    b7:cf:64:72:fe:c3:70:df:2b:fc:d2:75:96:28:45:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:DD:04:FB:D8:92:52:5F:15:BC:E4:E3:BE:B4:70:03:D8:AF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0028fc2a-80e6-388e-ba1b-0f5c28ebdf22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:50:4a:00:de:c5:f8:57:34:ca:29:3d:f3:00:6e:2c:b7:26:
         0b:ac:98:3f:51:d1:8a:1e:18:9d:59:cf:fe:ec:91:5d:3f:fd:
         ee:35:43:c2:6b:8b:9d:98:cd:a6:44:61:ea:ea:18:2b:44:ef:
         d1:81:a6:85:7e:f1:93:5e:44:cb:65:9a:96:97:3c:91:8e:9a:
         68:96:3f:32:9a:17:78:08:32:ef:d9:6f:09:d5:a5:9f:9b:7f:
         ec:43:30:9a:14:e6:c5:d6:e0:d3:e4:ca:20:8e:4a:c3:9e:2e:
         29:6b:3b:15:be:b9:05:6c:4d:a4:0e:ec:f1:e5:a7:5a:f7:07:
         40:b4:93:2a:5a:29:0d:c1:39:59:6e:30:d4:b6:f2:7f:18:59:
         66:a6:c2:37:b4:86:5d:ce:14:00:8a:10:3f:31:6e:7d:f7:bf:
         f9:39:44:ce:7d:5e:0c:3c:91:d9:97:46:cd:63:7c:e1:97:5b:
         1f:cb:ed:97:e2:cb:28:99:bd:db:09:de:d3:55:28:95:ed:30:
         05:40:c7:4a:b6:85:06:37:98:13:a1:21:ba:d5:49:2d:98:33:
         ab:68:94:ff:a4:af:25:84:08:59:15:67:80:27:6a:bb:1e:5d:
         c5:cc:99:8f:06:6a:c8:d7:0a:5e:27:a6:13:d2:96:36:28:b0:
         cf:3c:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:36:24 2025 by rpki-client