Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/150844da-b9be-3c2e-9013-7bb26e09a415.roa
File:                     150844da-b9be-3c2e-9013-7bb26e09a415.roa (raw, json)
Hash identifier:          HiD/4hd2Z9wMGxz9ILogTSvHTb1F/ujFdiHmeIBKuKg=
Subject key identifier:   DC:6F:B5:47:83:32:16:B1:91:C8:97:66:FD:0D:E5:0D:82:5F:7C:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F71BF1F1362F13283B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/150844da-b9be-3c2e-9013-7bb26e09a415.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396608
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f7:1b:f1:f1:36:2f:13:28:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=a66ec628-29bb-4d45-849e-1ef6404f9f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:cc:9c:07:3a:ba:cb:63:48:10:05:54:66:
                    eb:aa:e8:be:25:84:9f:97:c2:bf:b0:72:12:69:15:
                    91:c2:de:93:66:b5:bd:a6:86:e9:fe:d8:dc:90:ed:
                    ec:ef:85:ff:04:47:44:ef:ae:14:bd:2e:28:31:51:
                    af:22:bf:57:0c:96:c6:a5:76:af:f7:d5:59:c7:8c:
                    75:73:c5:47:60:89:d9:81:1b:59:fd:c3:d3:2b:52:
                    f7:df:04:c5:7a:f1:dc:44:33:28:a8:d2:17:3a:64:
                    2a:a6:2f:7c:56:ce:0e:0a:86:d2:d9:d7:f8:10:17:
                    b1:46:c9:8a:ef:4f:a1:66:50:70:e0:95:10:eb:c4:
                    09:73:e7:75:c7:67:ab:98:0c:d1:1c:c1:fb:06:43:
                    ef:15:27:6e:1e:4f:34:5e:4a:fc:56:10:7b:a7:1c:
                    b4:79:cb:5e:23:4c:b2:78:70:d5:07:41:85:91:1a:
                    e1:a2:92:a4:11:60:37:1c:ee:99:98:b7:93:cb:08:
                    58:81:80:0c:0d:bb:cc:79:90:b0:b9:b1:28:d7:3e:
                    9d:9f:af:1f:b2:79:3a:d5:d4:a7:fb:9f:2b:52:6c:
                    93:c4:6e:56:dc:fb:97:4f:c9:82:06:1c:59:d6:65:
                    94:f8:59:0c:09:1c:21:c3:b9:cb:a6:01:49:d0:56:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6F:B5:47:83:32:16:B1:91:C8:97:66:FD:0D:E5:0D:82:5F:7C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/150844da-b9be-3c2e-9013-7bb26e09a415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:7c:e6:cf:6d:ff:f9:64:19:58:d3:a0:81:75:e2:8b:f1:
         3b:7a:3f:5b:a0:ab:8a:e7:46:41:d8:8b:c4:4d:ec:d3:48:f7:
         10:40:63:36:b2:e5:a5:27:cc:59:c3:8e:97:5f:c4:fc:26:98:
         a7:fe:a8:ee:08:c6:95:7e:26:f2:3e:a5:c3:f1:55:90:18:f1:
         70:82:df:f4:55:7d:b7:f9:bc:04:29:58:28:31:db:7a:db:da:
         96:c9:f9:a5:93:41:2e:15:95:d7:17:23:6a:76:1e:4f:65:7a:
         f0:94:e4:f5:77:18:ce:05:a3:a7:7c:3c:b0:56:da:40:8c:c0:
         37:3b:35:60:81:fa:ce:4b:f0:c4:36:62:2a:96:6a:e9:42:a8:
         78:1e:a9:af:d6:b8:2f:d3:21:20:50:30:15:fe:70:93:81:0d:
         00:56:b3:23:5c:fe:d6:d1:ee:93:a1:80:21:97:8e:48:8f:cb:
         5b:f1:e2:0a:2c:e5:3d:5a:29:3e:d0:f9:e1:25:b7:78:9c:e7:
         bf:62:43:9b:01:ab:86:f9:72:8b:42:e5:80:d8:52:16:0e:26:
         3d:ff:15:d2:0a:90:9f:74:02:e8:aa:c3:36:8d:9e:94:19:38:
         f8:f1:56:05:d5:43:be:25:29:5f:f2:0a:1d:11:fe:0e:f0:9f:
         45:65:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:48 2025 by rpki-client