Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061448d7-c288-3a26-9950-bfcee45a23f9.roa
File:                     061448d7-c288-3a26-9950-bfcee45a23f9.roa (raw, json)
Hash identifier:          zW5Ae03JmzrBf12ZRHhkwtkbkJuR0xQbuZWTX+OhFbU=
Subject key identifier:   F6:3C:D2:AC:7A:45:10:48:95:9A:2C:7E:CD:F4:AD:30:08:9E:9E:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E6A00F65B8B88EC38448
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061448d7-c288-3a26-9950-bfcee45a23f9.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396574
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e6:a0:0f:65:b8:b8:8e:c3:84:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=8528a9e2-a443-410a-a710-d4f478426571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:6a:90:0d:67:91:98:45:fa:67:97:a2:cd:
                    f8:4a:1e:57:1b:e1:00:d6:44:44:1d:2a:f2:9d:ae:
                    d4:e7:cc:11:30:d5:5c:34:f8:e9:d4:23:41:cb:48:
                    fc:68:ca:66:dd:f7:0e:6e:c4:2f:87:80:96:58:73:
                    c0:c6:cf:92:95:c0:17:26:ab:e4:cd:e8:34:d9:66:
                    cc:69:5f:6a:fa:09:c3:33:bd:3e:d9:ca:2e:76:aa:
                    10:5f:7f:38:19:6b:4b:95:36:93:d1:19:c9:a0:f8:
                    68:19:98:8a:97:ba:ce:ac:32:78:14:1e:f6:8d:e5:
                    4e:2b:c5:b1:bc:43:24:b3:84:aa:96:89:28:c9:58:
                    f1:81:66:65:3e:1b:4d:23:fe:76:5b:3f:6b:ca:03:
                    b1:9c:59:90:58:71:26:f2:64:20:c1:4c:c5:bb:e8:
                    fd:e8:a3:d8:3b:37:31:c8:ea:6d:89:25:00:dd:c2:
                    1b:5c:bb:b3:bc:57:ce:f7:7f:7a:73:7e:3d:f8:68:
                    39:db:e3:5e:5c:39:94:43:f2:e6:5e:9e:dc:99:c6:
                    9e:cc:dc:79:e6:81:22:9f:4d:df:a2:b2:07:0c:0d:
                    09:49:f5:3d:a4:07:40:f7:9f:a4:b0:e2:fa:22:d0:
                    92:3e:81:e8:9e:04:c6:83:cc:8a:64:fe:9d:d1:fb:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3C:D2:AC:7A:45:10:48:95:9A:2C:7E:CD:F4:AD:30:08:9E:9E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061448d7-c288-3a26-9950-bfcee45a23f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:c1:0f:65:e7:45:cc:70:b6:67:bf:eb:27:ed:32:35:8d:
         8a:bf:bd:e9:6f:22:42:98:d0:e8:c2:97:14:2a:4b:61:9a:c0:
         a3:66:47:6a:4b:93:1b:85:f1:aa:db:02:f7:97:f2:85:a5:56:
         4a:fd:5b:76:a8:45:78:37:3b:c5:a0:54:57:a8:a7:5a:c3:50:
         c8:25:68:f6:2f:04:cf:e9:8a:cf:48:35:c7:15:a0:96:f1:cd:
         29:84:b2:40:22:b8:ef:08:b9:a6:fe:56:d1:09:62:8a:33:63:
         a3:5f:b6:45:db:75:d7:5a:6a:65:c3:b0:95:16:1b:49:de:84:
         45:8e:d0:47:61:70:7a:43:0c:94:41:ad:aa:81:ea:e9:f3:5b:
         bb:6e:cf:85:19:cb:90:1e:cc:ba:ee:37:c1:61:66:8e:19:6d:
         4b:c7:b9:e6:b9:20:fc:7c:73:36:5a:80:4f:57:81:77:f1:48:
         74:d8:ca:5f:88:18:8b:6a:d1:26:aa:78:6b:01:20:53:ba:c7:
         35:59:3b:11:1e:44:6a:e9:66:31:67:df:20:ec:ed:b4:30:1a:
         46:0f:76:f0:10:f0:09:d8:bd:07:5a:db:5a:61:5c:6e:3f:05:
         42:17:2d:67:71:18:2c:81:5e:c7:e7:03:e6:61:a4:97:bf:b9:
         64:47:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:20 2025 by rpki-client