Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa
File:                     19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa (raw, json)
Hash identifier:          g7Z2pz4p9nwXAeR9loR6MZtKfaXXdwgHkoR62nab3Hs=
Subject key identifier:   16:FC:69:5E:38:A3:05:25:8C:91:CA:E1:53:33:D1:91:1C:DD:4B:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1F812119B43C9F116480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     211369
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1f:81:21:19:b4:3c:9f:11:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f1e70d1c-61fe-4bd0-aeae-8760342d4338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:91:4b:2e:8b:52:59:18:de:59:35:bf:09:
                    ad:fe:70:95:cb:09:c6:86:13:8c:f5:9e:b0:18:3e:
                    96:11:e3:67:d5:21:1f:0d:63:57:ff:68:37:4f:0c:
                    ac:83:93:47:7b:c4:f7:1f:e5:1b:67:e8:0d:50:57:
                    8e:7f:71:b7:2e:67:2f:ef:66:49:cf:f3:c2:b6:95:
                    de:df:48:21:bc:5c:09:14:06:09:f7:ac:57:73:df:
                    34:a4:7a:36:a0:f2:37:eb:3d:f0:fe:40:79:5a:f1:
                    2c:52:23:54:fd:10:f6:0b:f3:c1:11:09:a4:43:81:
                    ef:88:66:5c:18:47:c2:b2:f3:0e:2b:6f:c7:06:e3:
                    70:34:e0:d8:c2:de:99:38:77:d0:a1:f5:bd:4b:45:
                    e0:4b:93:ff:3f:21:8d:1e:3b:0f:40:0d:90:90:2c:
                    5c:13:1a:bf:38:15:33:2d:f5:6c:71:5f:59:aa:54:
                    92:8a:bd:7b:bf:c0:ef:72:d6:da:9a:c0:aa:e2:d4:
                    7d:f7:80:78:1c:61:b9:3d:ea:2a:47:ff:62:99:d7:
                    f4:0c:de:21:e7:ae:7c:6f:86:12:9b:07:f3:17:61:
                    be:bc:d9:ab:b5:05:20:25:4a:62:6b:76:48:cf:d8:
                    7b:be:61:d5:17:24:13:f2:4e:97:38:e7:92:33:f2:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:69:5E:38:A3:05:25:8C:91:CA:E1:53:33:D1:91:1C:DD:4B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ed48b3-c938-3837-93b6-bd4e35c7e0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fc:fa:c4:63:6b:e0:0c:99:d0:d1:6e:45:b4:6c:09:af:80:
         a9:bd:ba:fd:df:4b:32:d5:d5:f5:d0:ce:ce:08:a7:c3:74:30:
         4a:07:b1:ad:8b:a0:5f:4b:76:f7:6e:65:cb:90:d1:c9:4a:b5:
         ec:7c:22:3b:97:cc:0d:ee:bd:4d:60:b1:12:83:d6:23:c4:6b:
         d5:68:d1:ac:f7:ef:f9:c3:9a:7a:5b:68:43:25:ec:67:7d:71:
         8b:59:c8:a3:b9:33:77:41:92:c9:6a:3c:d8:fd:0b:1e:5f:13:
         39:32:47:48:79:fd:79:41:13:88:b5:5d:a3:03:5a:18:47:33:
         8e:68:97:7c:53:6d:9f:e7:8c:54:b8:cb:26:2b:9c:13:f7:c6:
         77:b9:ab:fe:02:5c:7b:ee:bf:92:3d:3b:35:4b:1e:29:d6:6b:
         12:6d:dc:4f:95:10:fb:70:e6:74:44:f8:11:33:17:76:0e:9f:
         99:03:87:71:f6:bd:e7:6e:9b:b7:71:e5:0e:43:ae:40:16:4d:
         3a:c9:24:4c:6d:76:36:f1:20:bd:ef:d7:2e:9f:5a:aa:4a:7a:
         3c:72:a2:22:41:79:db:81:43:21:3b:22:07:c2:ae:d2:d3:b2:
         a7:f2:42:35:38:5d:27:e1:05:08:bf:e2:93:ed:99:1d:5e:07:
         4e:bd:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:46:42 2025 by rpki-client