Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20fe2333-4de5-3fbe-b952-5f3ee57806ad.roa
File:                     20fe2333-4de5-3fbe-b952-5f3ee57806ad.roa (raw, json)
Hash identifier:          BOkEGp1PKLjhC8eRimTTHiDxeIO8uhso/IMcdgBVgjs=
Subject key identifier:   D3:2C:CC:CC:B0:C9:FF:10:37:B8:52:27:E7:EE:60:76:09:4A:13:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C091FD3328EC8BA564CFA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20fe2333-4de5-3fbe-b952-5f3ee57806ad.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396585
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:1f:d3:32:8e:c8:ba:56:4c:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=f27bf786-c885-472a-a0c7-eb8bd6d2828f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:e0:35:a2:d8:67:aa:0d:b9:91:13:fe:9c:
                    a7:9c:8d:6e:05:be:40:2e:3f:0d:74:00:b5:ee:3c:
                    7b:25:02:48:ee:13:c4:a1:fa:08:89:cc:77:7b:ee:
                    6d:d4:bd:7f:0d:a3:60:63:10:5f:45:54:34:a7:4b:
                    e4:08:51:08:81:6b:90:25:57:1a:d3:c3:49:d2:14:
                    a5:d9:d4:7e:63:a0:0f:59:85:15:24:b5:c2:16:81:
                    91:8a:55:17:fa:29:54:ec:8d:ed:fc:9c:27:0f:f0:
                    38:ad:ca:92:48:ab:5f:5f:81:44:f9:af:69:39:37:
                    1e:2d:8e:a6:98:3b:6c:ae:94:e3:42:27:5b:0b:b2:
                    14:7f:98:e9:a3:02:be:48:0c:93:9a:3d:72:3d:04:
                    76:df:e3:68:f0:48:96:85:aa:64:0f:df:8c:d9:ea:
                    b2:1d:17:97:39:fb:44:ec:e3:31:96:da:11:a0:9e:
                    d1:d9:56:9f:a5:4a:34:da:6b:e7:c8:4e:3a:7f:a6:
                    30:65:36:b8:5c:f3:c4:9a:86:03:6f:fe:de:45:78:
                    a3:03:77:d9:cc:a7:7b:65:d1:13:f1:f1:d2:0f:10:
                    d5:11:85:8a:5b:ae:ae:bd:65:65:03:1e:3b:18:9d:
                    85:81:0c:fb:1f:6a:37:1f:c5:af:91:15:3e:61:49:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:CC:CC:B0:C9:FF:10:37:B8:52:27:E7:EE:60:76:09:4A:13:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20fe2333-4de5-3fbe-b952-5f3ee57806ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:46:ab:a8:34:35:30:9e:6c:76:39:02:2f:23:78:f5:f8:d7:
         1e:8a:33:33:39:6a:aa:d8:a7:02:1c:41:5b:41:64:b8:70:98:
         a9:b3:78:42:ad:40:6a:7e:f1:e3:90:e9:61:a2:19:00:54:02:
         b1:39:14:68:d2:c1:50:99:53:fe:b5:b0:c6:13:54:cd:a5:54:
         b2:89:b4:6b:10:7e:34:43:cf:b3:73:61:8f:09:26:1c:65:9d:
         53:ff:99:bf:40:41:38:ab:b8:38:06:80:15:80:8b:ba:4c:0e:
         56:47:d3:61:ed:63:b5:92:b8:4e:04:83:49:83:a3:63:ec:ae:
         3e:f7:89:e1:97:4f:9c:6b:d4:c5:05:42:b6:31:c4:2e:20:a8:
         26:15:0d:c7:13:a0:c2:02:74:e2:1a:80:a1:82:28:2d:6d:65:
         74:b7:b0:f2:e0:77:01:ca:25:a5:49:3e:3a:ad:a1:96:7e:ea:
         bd:8e:84:d0:36:69:69:9c:ac:4f:d5:22:bb:a2:a4:87:0c:bd:
         d2:4f:28:9d:21:27:bd:31:eb:22:a6:57:72:2d:a7:10:63:eb:
         e3:8f:fd:15:73:8c:e7:7d:e4:62:46:f1:93:4a:5a:89:cb:5f:
         f2:0f:6c:36:dc:d8:ee:9f:da:23:00:85:85:eb:e3:9e:ba:e5:
         1d:88:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:57 2025 by rpki-client