Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11486401-2029-31be-87d3-e4560bee90a3.roa
File:                     11486401-2029-31be-87d3-e4560bee90a3.roa (raw, json)
Hash identifier:          k2PH+Ym/sQI8MLrV1WLHO2pkNdQJwVO/tFEGoXQwgGc=
Subject key identifier:   51:29:5D:98:F0:56:71:27:A5:07:09:0E:C3:68:AD:C0:EB:85:A9:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB073EC6A1405596023E88
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11486401-2029-31be-87d3-e4560bee90a3.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396611
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:07:3e:c6:a1:40:55:96:02:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=756506e9-e226-431a-be12-be656538752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:e4:ec:cf:0f:24:4d:0c:be:06:b0:84:f7:
                    cc:33:25:cd:c2:1d:bc:ba:32:52:af:89:10:e5:44:
                    37:14:77:bc:a5:a8:3c:2e:d0:b6:d3:68:ab:0f:95:
                    1a:19:17:cb:35:36:1a:e1:ee:28:dc:e1:c3:e6:c3:
                    78:e9:c6:c6:36:b4:a9:b7:8d:96:b1:9f:ce:47:2f:
                    10:7e:4b:15:1f:22:e7:55:c2:45:fd:b9:d5:bc:18:
                    f3:2d:24:ce:fd:de:bf:a1:bf:ba:ae:22:0a:6f:d0:
                    bf:ab:41:34:d8:9b:c6:13:54:a4:c8:74:e0:99:db:
                    64:8a:53:ce:a6:71:7d:64:ef:e9:e5:3d:5f:19:91:
                    08:b1:54:e3:a6:5c:17:ff:24:ad:3d:5f:77:66:b1:
                    0a:31:1e:2e:85:bd:3c:80:47:d2:a8:10:cd:4a:a4:
                    40:7e:02:d7:04:ea:08:6c:c2:de:46:9e:25:07:31:
                    c8:42:c2:8e:15:35:a5:ad:ce:9a:87:46:4d:d5:fb:
                    7c:1b:ac:0c:c6:ae:89:b4:5b:2e:08:c4:53:5e:d3:
                    54:da:c9:96:35:73:df:5e:d4:37:b0:de:15:58:63:
                    72:57:c1:5a:76:75:1c:61:cb:11:78:27:d9:78:c7:
                    34:2c:a1:e0:54:f8:2d:e7:32:bf:58:1e:a4:5f:09:
                    57:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:29:5D:98:F0:56:71:27:A5:07:09:0E:C3:68:AD:C0:EB:85:A9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11486401-2029-31be-87d3-e4560bee90a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:a0:79:7d:d5:08:3a:38:a1:3c:e8:1d:8c:b2:b2:d2:fa:
         e7:98:cb:d4:86:39:71:ee:34:4a:80:65:d5:35:0d:7a:1e:dc:
         46:51:6e:c6:1f:9f:3c:75:89:01:32:ed:bb:d8:c8:8c:82:be:
         d2:6a:2e:89:51:8d:0a:9e:5b:19:c0:cb:d8:cd:4f:98:a8:56:
         6e:48:58:bb:89:93:15:88:35:1b:84:7a:d6:c0:46:d8:37:ce:
         4d:c6:11:0d:ac:2d:92:12:0b:4f:c8:76:c4:a4:e1:36:7c:40:
         7d:37:9b:cd:ab:2b:9f:bc:85:b6:98:76:fa:9f:55:c2:69:7c:
         28:e4:b8:a0:29:d2:65:7a:90:9b:8f:b3:7a:2f:c3:35:40:33:
         22:fc:11:19:29:57:ed:82:8f:1f:19:79:9c:2e:53:65:54:c9:
         b6:42:1d:82:a3:0e:f9:67:90:77:ef:b1:23:15:ce:35:a1:99:
         44:72:af:c8:f5:fa:a6:2c:4a:73:06:54:d2:45:26:c0:57:9c:
         9a:2e:6f:1f:38:5e:cb:22:38:b0:48:2d:09:c6:e6:28:32:77:
         4a:b6:6d:7e:4d:3b:5f:1b:4c:18:f2:51:b4:26:e8:9e:8c:13:
         6c:02:6a:f8:44:dc:62:7e:fa:a7:22:6c:e2:76:38:22:23:98:
         bd:96:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:13:35 2025 by rpki-client