Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa
File:                     25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa (raw, json)
Hash identifier:          ACR6b1C4/qR74HfxIQvO7ig+QLOq5R9B5R8hOPFhEDU=
Subject key identifier:   33:2C:CC:C1:F0:4C:E0:6E:B5:3D:59:BE:2D:94:20:8D:17:1C:14:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F9F8323A1152FA212880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396581
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f9:f8:32:3a:11:52:fa:21:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=06de35cb-f446-4092-bb54-3ab94fbc3deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a8:10:44:b5:c7:53:39:4a:ab:e4:72:38:1f:
                    ac:48:58:e7:ff:19:e8:49:e8:f6:92:a4:80:cc:5e:
                    8b:46:b8:b3:87:50:35:2d:5a:25:73:d2:2e:b3:1e:
                    0e:fb:8e:e5:8f:2f:26:4d:93:0b:1c:12:29:d0:b5:
                    10:c1:bb:0e:ce:a9:6a:4e:fe:4d:2e:ed:44:67:04:
                    86:fd:a0:7d:32:41:a1:27:a7:b1:e0:0a:6b:2a:a1:
                    74:f6:fc:34:46:33:4a:11:e2:57:75:30:c9:3f:1f:
                    de:27:da:9d:b5:06:0e:0d:69:c2:d3:69:55:74:7f:
                    74:df:07:e9:ff:db:15:6a:0c:52:62:19:19:79:cc:
                    6a:f7:d0:1a:f8:9d:ee:53:bc:48:11:bb:35:0b:1d:
                    15:e7:c1:93:52:f7:d3:e1:4e:c0:58:79:8c:93:b8:
                    14:ee:17:5f:34:c0:43:72:7a:1f:ef:d0:f7:79:1d:
                    73:4d:30:03:58:8b:ce:7c:94:2a:08:66:7e:09:26:
                    dd:ca:e5:dd:0c:9e:fb:12:aa:f6:f0:ff:dc:5a:eb:
                    38:9d:8e:92:e1:9a:ec:70:ca:69:2a:cd:4e:dd:f3:
                    77:0d:f6:79:94:7a:74:39:ec:cc:dc:02:52:96:8b:
                    96:33:1b:22:0f:60:a3:7a:10:e0:7d:b6:12:2c:17:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:CC:C1:F0:4C:E0:6E:B5:3D:59:BE:2D:94:20:8D:17:1C:14:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:72:f8:eb:2b:b6:65:9f:e7:62:62:a8:c7:0d:c2:dd:dd:75:
         af:68:81:8c:52:5d:63:bd:c4:9c:d9:e7:b3:8d:67:37:e1:2d:
         32:10:71:64:21:92:4b:ad:64:9e:02:a8:c6:64:17:93:2b:10:
         57:f9:8b:82:82:c4:25:4d:28:6b:71:d9:ce:44:c4:f4:72:53:
         10:08:c7:3e:28:d6:fa:ca:0a:eb:57:79:1b:2f:35:15:d7:f8:
         80:54:4c:c4:9b:c1:0f:27:43:84:c3:2e:c0:1e:31:c8:55:ee:
         65:61:8c:b3:17:5a:a7:d5:14:ef:e8:e0:aa:40:58:00:cb:72:
         b3:42:68:a7:34:c3:34:5f:e2:ea:f0:60:b5:a4:10:14:58:2b:
         4d:c0:5a:98:a8:86:cc:6a:a5:5f:2f:c1:a5:f6:e4:b1:a2:d8:
         9e:21:64:6a:16:79:9b:f5:f5:fb:32:07:ec:5d:a1:67:2e:01:
         9b:b3:fa:71:1c:4f:f6:42:c8:84:0b:f8:72:1f:1c:8b:5d:e1:
         62:62:79:d0:37:c4:d9:7b:27:06:c8:71:28:58:f6:51:26:d7:
         66:ce:5d:a3:64:37:9c:f2:2e:ce:52:71:ec:ca:df:14:94:12:
         9a:fb:f1:07:fe:92:c4:88:47:3c:46:74:eb:95:79:95:83:f3:
         48:c0:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:54:10 2025 by rpki-client