Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1faa71e3-4d9c-3108-9305-6b134b314983.roa
File:                     1faa71e3-4d9c-3108-9305-6b134b314983.roa (raw, json)
Hash identifier:          8m51bylBCAok+sNgZG5GJcsJdHGTfbj+O3mKL5/zpZc=
Subject key identifier:   80:D9:A2:06:50:C4:29:6A:D6:10:28:5E:65:C2:22:9C:38:C8:68:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAF928C2E1BFC02AE36700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1faa71e3-4d9c-3108-9305-6b134b314983.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396605
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f9:28:c2:e1:bf:c0:2a:e3:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3420e934-9603-4aa5-8db9-feb2c27be871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:db:d7:e0:91:8d:e0:22:47:58:0c:dd:e2:
                    f8:72:bc:08:18:0d:c3:e8:11:4c:dc:6d:18:54:ee:
                    a7:64:0f:d5:f2:46:6f:98:22:7c:bf:2f:c7:6f:c9:
                    f6:46:3e:b7:cc:32:93:03:df:ab:fe:c8:48:b8:c0:
                    72:a0:b7:24:97:3b:fb:cf:02:60:66:20:b0:c2:24:
                    9a:20:46:7a:7f:fd:8a:5d:ef:59:c3:aa:e7:e6:0e:
                    3e:3e:3f:84:19:2b:bd:1e:3f:99:f3:64:fb:97:03:
                    38:dc:0d:ff:21:be:da:67:6d:ab:38:44:cc:d9:aa:
                    b3:17:81:19:e4:7e:fe:dc:4c:83:ca:c1:b5:7a:c8:
                    79:9f:b7:a2:b3:75:b4:ac:77:06:96:89:b6:e2:b9:
                    30:60:55:e8:77:f1:a5:a4:9b:c4:3d:0a:b6:bf:fa:
                    ab:03:08:b6:d4:4e:f3:81:ee:6b:29:bd:20:c6:87:
                    98:d3:be:5d:12:95:b9:e4:37:32:13:d7:09:0c:a0:
                    71:a5:6d:8a:dd:15:c2:b2:d9:08:73:ee:31:9b:94:
                    39:8f:81:7a:25:f9:b5:2e:dc:24:54:12:94:56:d3:
                    fc:a1:8f:b6:ce:a5:0c:f7:c5:bb:9d:0c:9b:ed:07:
                    d0:d5:26:31:a6:ca:ab:74:fd:8d:44:e7:45:5f:8a:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D9:A2:06:50:C4:29:6A:D6:10:28:5E:65:C2:22:9C:38:C8:68:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1faa71e3-4d9c-3108-9305-6b134b314983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e3:b7:43:74:8c:00:eb:38:34:3e:80:68:07:99:27:01:75:
         1c:4f:93:9f:c8:a8:31:95:a0:b7:d9:19:35:3d:b9:e4:65:43:
         e7:37:8b:df:c1:17:a3:38:49:9f:b4:b7:50:62:60:7d:85:8f:
         ce:ee:cf:8a:2b:35:3b:7b:77:15:95:1a:bc:d1:5e:cd:d4:0d:
         ca:61:88:da:c5:c4:7f:00:10:96:0a:13:39:1a:d0:39:4c:68:
         11:5b:6e:bd:61:42:84:6a:a0:37:20:ef:c3:11:03:4b:6e:2d:
         86:d7:30:82:69:12:c1:32:5c:8e:b9:de:a8:ef:c9:e6:8a:30:
         a1:39:76:b3:ca:31:c4:30:54:3e:39:0b:40:0b:fb:f9:3b:fa:
         2a:65:7d:f4:83:61:71:c6:73:f1:cc:94:88:ec:27:74:99:bc:
         50:15:24:19:a8:35:8c:be:3a:6e:e6:6c:9b:12:ac:b7:c2:1f:
         aa:c7:73:1f:fb:fb:ac:3e:98:ae:74:c8:be:58:bb:56:7c:f6:
         66:b4:8e:0f:58:88:05:73:76:71:ec:ff:4c:87:19:89:b9:98:
         1f:60:76:32:42:4f:7e:de:99:ab:3a:78:ec:9e:1f:d1:c5:16:
         13:f0:58:f3:ce:48:00:20:97:2e:74:3d:23:ce:e3:94:82:37:
         32:35:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:00 2025 by rpki-client