Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa
File:                     0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa (raw, json)
Hash identifier:          2eFkBZT0MeIvT2CTTTYSoZQV27uZEDy2suBvndC8VbI=
Subject key identifier:   7B:D5:E3:F4:85:09:E3:19:F4:0B:76:7F:0E:14:39:AF:9B:46:43:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF758AA3D7A218BC0FDB6880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     25485
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:8a:a3:d7:a2:18:bc:0f:db:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=4718dc59-2123-46d2-993c-d9e37dfdf7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:73:31:48:d7:54:5d:ad:48:9f:be:24:3c:
                    60:c0:9a:f9:1e:67:f7:64:0f:32:e6:a1:81:a7:bd:
                    cb:67:9e:34:87:42:13:ea:34:6a:a1:c0:9d:da:4c:
                    57:f8:2e:3e:cd:1e:a1:b2:12:fe:64:e6:1c:01:1d:
                    f6:3b:7f:ef:c3:01:6a:cf:1f:5f:af:48:b3:e0:a3:
                    8c:2b:f0:bc:84:9b:e3:87:77:5b:f3:1c:48:cc:b5:
                    8b:93:d1:1a:93:7e:5d:0d:71:7e:51:0b:32:68:b0:
                    8d:a7:e0:48:ae:13:cf:ca:eb:d5:4d:d8:71:50:d1:
                    08:ba:38:ea:1d:99:4e:f1:8e:8b:25:f3:c2:fc:15:
                    27:3a:48:c2:0f:4b:2d:2e:3d:8c:e5:68:4b:9c:31:
                    2f:ff:2c:97:85:f3:36:d3:e6:b9:b4:92:e8:60:42:
                    e0:1d:e9:8a:f2:83:e7:3a:f3:b3:2e:01:f1:27:04:
                    7b:d9:3e:be:c5:e6:d7:23:5e:4e:ce:be:23:86:a9:
                    b5:73:92:2d:1b:24:b5:96:08:95:4c:63:e3:dd:9b:
                    5b:ab:74:05:4e:77:18:82:00:6d:73:e7:a1:a8:64:
                    e4:2a:65:3d:a0:72:ea:9d:27:3e:1e:18:46:e1:78:
                    e6:04:69:b7:9c:43:9a:ab:41:eb:64:5c:b6:e3:fe:
                    05:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:E3:F4:85:09:E3:19:F4:0B:76:7F:0E:14:39:AF:9B:46:43:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:ef:ae:94:e9:d3:3e:e9:b5:d8:9f:10:0c:f6:90:45:84:d5:
         0d:ca:5d:da:c0:68:21:e3:46:3c:db:40:66:c3:80:fb:9c:61:
         df:9c:91:04:7e:89:d6:64:b3:83:14:cb:3a:05:29:9e:a3:be:
         f9:50:7f:70:ab:fd:7b:b3:57:1a:e6:15:b4:45:1c:f9:0d:77:
         6a:f0:a2:82:cb:6e:83:2f:30:64:20:f1:40:17:29:65:0f:e3:
         94:ec:00:5a:f5:98:10:7b:6b:28:84:f6:fd:9c:73:16:28:5c:
         ce:47:e1:8b:bd:06:cc:0e:c6:61:8e:55:13:79:97:5e:e2:b0:
         76:ad:5c:e8:43:ca:33:50:97:93:c6:ce:9d:58:8e:ed:86:be:
         23:c3:65:f5:42:5e:79:df:75:7b:fa:3b:05:7c:0a:d2:86:5a:
         03:79:66:b3:34:45:f1:d5:a2:3e:2b:4f:93:5f:3f:b6:8a:db:
         0c:10:6b:2a:97:b1:40:87:27:90:18:2d:d3:ac:21:e6:6f:56:
         e8:5f:c4:a7:cf:3b:23:9d:15:a2:43:a2:ac:1c:f5:e3:83:e5:
         d2:d5:57:3d:11:07:1e:c5:72:12:e7:22:91:59:9b:ab:2a:d4:
         03:d5:16:9d:30:fa:6b:73:ea:dd:3b:3b:3a:c7:9d:20:e6:89:
         a0:eb:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:22 2025 by rpki-client