Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0add173a-bc4d-34e9-977d-8b665ca8186f.roa
File:                     0add173a-bc4d-34e9-977d-8b665ca8186f.roa (raw, json)
Hash identifier:          6SGAMWGcqmIttiX8c3d8CSkiAKkBHLu7a0TNQkapTsg=
Subject key identifier:   DF:FD:FB:BE:B9:F6:BD:13:E0:FA:03:C9:F0:86:DE:01:67:92:A2:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB29136355C282C35085D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0add173a-bc4d-34e9-977d-8b665ca8186f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396542
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:29:13:63:55:c2:82:c3:50:85:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f3b3ecc0-89f6-407f-b9f4-3b595ca57c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:e9:9a:48:d3:b0:2a:06:f2:50:a7:92:05:
                    64:1c:d2:7a:31:c1:7a:d1:5b:b3:a7:64:18:31:d5:
                    f9:19:74:29:9a:7d:b1:9a:7c:46:6e:76:88:1d:35:
                    1a:72:d1:18:7e:cc:fd:f2:9f:98:dd:ea:93:07:9d:
                    07:37:76:0d:fa:17:df:16:34:51:9c:21:0f:f4:82:
                    ba:06:0c:68:0e:26:02:40:b9:6b:22:7b:8c:55:ba:
                    a7:72:c7:b5:43:e3:1f:9f:25:de:f9:28:57:35:1f:
                    2d:cd:70:d6:a8:bf:21:9c:61:9c:69:d0:9b:8c:bd:
                    52:8a:5f:ef:0b:bf:0f:bd:52:5b:4a:17:5b:bd:2e:
                    b9:e9:b8:b6:41:92:81:30:25:c1:40:1c:4c:2f:94:
                    b2:fa:e0:69:a5:0a:56:f2:ee:e4:68:8f:76:74:36:
                    86:d8:2e:ca:d0:09:2b:b1:28:b8:ef:ac:cf:60:43:
                    96:75:19:4f:cd:39:36:f4:77:74:bc:c4:7f:d1:97:
                    d5:e7:16:47:16:d0:8c:bd:ec:d5:06:be:97:c9:67:
                    05:ab:6b:bd:fd:9c:1a:ab:56:4a:e6:40:ef:81:19:
                    72:98:eb:fa:56:ea:f7:8d:9b:b9:49:bd:0a:e8:5d:
                    9f:cf:c0:e2:0a:90:2e:f3:d6:8a:b5:5c:fb:ac:1a:
                    ea:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:FB:BE:B9:F6:BD:13:E0:FA:03:C9:F0:86:DE:01:67:92:A2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0add173a-bc4d-34e9-977d-8b665ca8186f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:ea:43:05:ce:02:a1:c0:6a:13:c8:63:25:74:1b:38:f7:99:
         aa:4e:6f:3e:5a:f2:3b:b8:c8:bb:94:da:22:e3:b2:fa:59:da:
         2c:42:bc:ed:1f:d5:45:03:12:2d:95:42:56:e9:03:1c:c7:66:
         d8:f4:6d:b8:98:4e:5a:24:c9:df:24:09:7d:df:98:86:a6:56:
         b0:b2:f0:70:2b:c1:e7:b3:45:35:cf:3d:5b:c1:3f:06:19:39:
         0f:7e:d8:d2:bb:f5:52:b8:1f:ee:de:25:31:d8:81:c2:5c:23:
         b0:93:bf:da:fa:07:fa:a0:01:d6:ac:c0:cf:21:9f:5e:3e:cb:
         c4:0a:a8:1f:be:c2:d9:a1:4c:6e:7e:63:9c:e1:30:cd:0a:bc:
         10:19:7b:bf:fc:eb:10:1f:25:42:55:db:2c:07:0f:45:0b:22:
         60:4d:e9:43:7f:95:5e:cf:d0:c4:47:92:2e:a2:59:a2:e5:79:
         87:0c:cd:a1:f2:6d:0b:1a:51:77:0b:4f:e8:17:eb:45:7a:1f:
         51:9c:ee:38:af:00:1d:61:55:b8:b1:b7:75:11:3c:db:8f:d1:
         64:0b:2f:6f:cc:2b:50:a5:c2:c8:55:4c:62:d5:6e:c8:8a:88:
         c6:c2:bc:d9:2e:ea:e5:c7:96:22:27:3b:85:ec:d7:20:f3:07:
         48:60:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:56 2025 by rpki-client