Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/088f6c51-aefc-3244-97c6-b824c67ecf68.roa
File:                     088f6c51-aefc-3244-97c6-b824c67ecf68.roa (raw, json)
Hash identifier:          RAU+C5661W5d5rFUWklkZzVlDR/pEKjZpNcr+U8KKCs=
Subject key identifier:   9B:13:15:3D:2D:82:CB:C1:1D:B7:BB:82:03:34:90:18:76:32:B0:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843BEB69C7A6E8392B5DE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/088f6c51-aefc-3244-97c6-b824c67ecf68.roa
Signing time:             Thu 30 Jan 2025 13:46:15 +0000
ROA not before:           Thu 30 Jan 2025 13:46:15 +0000
ROA not after:            Wed 30 Apr 2025 12:46:15 +0000
asID:                     397199
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3b:eb:69:c7:a6:e8:39:2b:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:15 2025 GMT
            Not After : Apr 30 12:46:15 2025 GMT
        Subject: CN=25c43e3f-bcac-4a82-8ff0-8e0c08528b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:41:ad:66:3c:fd:fa:46:bd:e7:88:c9:7e:
                    e9:f8:ef:dd:c3:b6:29:d1:61:af:38:47:1d:6e:a7:
                    cf:d1:f0:34:8f:05:ae:d1:f3:fb:a3:df:ab:64:c3:
                    d3:e2:5c:b7:2b:b2:0c:ee:be:16:b7:b5:2e:fa:c5:
                    c8:64:d2:0b:67:de:90:e0:23:14:98:dc:4a:cb:a6:
                    6f:8e:14:35:22:76:fe:ac:07:ce:d0:89:94:7a:f4:
                    3c:8c:ba:bb:17:d9:5e:94:30:9d:a5:24:74:a9:63:
                    5a:1e:af:9b:6b:52:ed:4b:81:26:65:9b:4b:a2:80:
                    67:0d:54:91:53:68:0d:03:5a:0b:4b:8c:c8:71:cc:
                    55:42:fb:58:49:2e:51:25:e8:61:8a:51:1f:0a:cb:
                    92:39:c1:95:42:23:bd:64:83:88:49:16:5a:b9:16:
                    89:c2:94:75:0d:48:df:cf:da:42:d2:8e:29:d9:18:
                    34:72:c7:47:e2:6a:e6:81:94:e0:41:e3:74:43:22:
                    bf:35:76:42:d6:92:c3:ee:23:2c:bd:15:72:99:aa:
                    8c:33:f7:5d:aa:d2:9e:14:41:15:f8:7e:3e:0c:94:
                    00:b8:ab:4a:e6:2a:1e:8e:8b:a1:6d:9b:ef:6a:7f:
                    3e:39:74:68:c7:51:28:2d:9e:46:c5:73:2c:72:32:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:15:3D:2D:82:CB:C1:1D:B7:BB:82:03:34:90:18:76:32:B0:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/088f6c51-aefc-3244-97c6-b824c67ecf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:3f:88:ad:0c:88:d2:37:c8:0d:ea:48:eb:b5:80:dd:d5:
         1e:f9:04:d1:49:6b:59:55:fc:a8:8a:f3:9a:1f:d1:b5:31:7f:
         63:38:17:0d:dc:39:9a:2a:6a:ec:35:65:ce:24:c4:7a:5f:6d:
         ee:42:9d:50:69:7c:c7:7b:dc:e0:d4:7e:f1:7f:88:80:ef:6c:
         18:d0:46:90:cd:49:4e:3e:e3:73:87:3e:e7:b4:0a:2b:cd:27:
         49:9c:c6:42:a3:30:c3:4c:2e:7f:ad:a3:11:71:67:92:59:a4:
         d2:a8:f6:85:19:9a:68:f5:cc:91:d7:0f:3d:4e:aa:d6:de:69:
         60:e2:81:6b:3c:fc:e4:78:7f:c3:6d:c6:c9:b6:6a:27:2f:ab:
         ab:09:8f:9b:ec:5c:68:44:1a:a6:71:69:a3:c3:17:53:88:30:
         d9:1e:d4:2c:80:24:c5:40:c6:61:a8:97:95:49:67:6c:16:5b:
         88:8f:9d:d6:76:da:a7:43:47:cb:01:53:fb:0c:b7:18:c5:37:
         e6:e7:84:b6:35:f2:a4:c2:d1:6b:40:57:48:cf:f4:b2:b9:9d:
         28:74:82:30:1a:01:e1:19:13:38:ab:28:12:bc:1b:09:52:fe:
         eb:56:9b:f6:73:ed:d5:51:7a:d7:cd:89:20:81:49:c3:a9:8f:
         ab:57:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:59 2025 by rpki-client