Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/088cdf11-f5d2-3a56-9122-241aa0a556fc.roa
File:                     088cdf11-f5d2-3a56-9122-241aa0a556fc.roa (raw, json)
Hash identifier:          ZvPfe3VztA63u4ldmGwM057dVxug36gW6FpLSCtlHwM=
Subject key identifier:   7F:C6:32:88:FD:89:F7:B7:89:9B:42:2A:8C:B2:5D:C4:4A:78:0F:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFC966A3232C21CA92980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/088cdf11-f5d2-3a56-9122-241aa0a556fc.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396585
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fc:96:6a:32:32:c2:1c:a9:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b6d923d4-a10d-4c0e-a548-eb1d38c3ff1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:0f:b6:9e:76:ea:37:34:98:55:e2:3d:6c:
                    52:a1:df:e0:b9:d6:fa:3c:0d:8f:68:f3:50:ef:2f:
                    49:89:30:8d:33:be:17:d0:1e:31:8a:bd:9f:f2:d8:
                    54:67:f6:bb:d1:11:18:3d:67:78:86:d4:ae:4b:83:
                    23:97:64:89:2d:a6:e8:be:4e:8f:11:e1:4d:3a:96:
                    cf:71:4f:c2:74:f9:b4:a6:c7:34:18:60:ff:cf:c6:
                    d9:fc:6e:55:6f:0b:eb:14:cb:b7:5d:72:53:e4:9e:
                    71:ec:43:ab:ee:f1:a4:e3:0e:2e:b6:f7:db:68:6d:
                    41:00:2d:87:a9:b5:77:4b:cb:74:31:de:79:45:23:
                    18:d1:0b:bb:99:3b:80:f7:a6:e1:7b:d0:bb:88:be:
                    6e:06:f4:2b:cb:1d:f9:b7:fc:f0:e0:f8:b9:69:f1:
                    4c:d9:0a:5f:a6:57:59:f7:e7:85:1d:67:9e:ff:f9:
                    c9:42:59:c6:e1:86:66:93:ef:8d:46:58:28:be:bd:
                    b9:3f:f5:96:15:0d:a5:fb:c7:e9:35:94:42:32:42:
                    4a:d8:72:ea:e1:b6:9c:99:ac:18:59:7b:3a:87:b3:
                    88:39:66:50:30:5b:2a:3e:db:9b:3b:29:5b:70:bf:
                    d0:46:2c:91:6f:05:ac:d8:60:2f:ef:42:03:e9:51:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C6:32:88:FD:89:F7:B7:89:9B:42:2A:8C:B2:5D:C4:4A:78:0F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/088cdf11-f5d2-3a56-9122-241aa0a556fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:ae:33:24:fb:ce:66:63:8a:fe:05:ea:82:29:d3:99:1a:
         b7:ba:41:8b:ef:1d:3b:1f:48:79:f7:ee:b3:31:04:7f:9e:4a:
         7a:cd:a1:03:8a:ad:f3:09:7a:46:e2:03:fe:57:4e:a6:8b:d2:
         f3:44:77:e9:39:42:b6:f7:ec:ef:3d:69:4c:6e:20:86:b3:57:
         ee:40:29:05:28:db:ce:23:9f:39:5d:24:fa:2b:0e:f1:d4:81:
         a6:f4:d6:24:36:ba:23:5d:e9:f4:1f:fd:54:9d:4d:72:88:8a:
         cc:2d:e6:cc:84:f2:95:b9:08:a0:f0:4e:dc:87:fc:4e:42:fb:
         eb:f0:95:57:f6:b6:4c:cd:11:a4:16:52:70:7e:29:6b:52:c4:
         69:6d:06:72:11:58:3c:2b:e2:d4:68:09:04:9b:76:6f:19:8c:
         7e:25:06:75:a5:04:51:c6:a0:9e:5f:bb:7d:4a:f8:d3:ca:79:
         64:07:d5:9b:5e:c8:02:30:a1:f2:8d:8b:18:0a:f5:77:50:c3:
         83:e9:38:72:33:da:60:f0:d3:9e:04:1d:86:3e:63:6a:45:63:
         5a:37:f5:1f:9d:44:e9:4d:17:a4:ee:54:d0:84:6a:48:94:4d:
         b8:c3:18:bb:76:f2:24:16:8a:93:e8:af:ff:d2:7b:d9:2a:8c:
         b4:70:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:15 2025 by rpki-client