Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa
File:                     25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa (raw, json)
Hash identifier:          QmXwRjBPKf9JVNWeZq77IkiJWdjAMRuo8VtR0GO8jxI=
Subject key identifier:   A0:0B:49:41:9A:3A:7F:7E:C8:62:95:36:B9:92:69:FF:A5:72:D3:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2BA243AF6C1A380A1F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396581
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:2b:a2:43:af:6c:1a:38:0a:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7fd01178-e11e-4393-9883-4f1d2d3d23b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:29:84:26:ee:ce:c6:32:d2:65:81:f6:89:
                    33:33:01:ce:86:08:92:f8:98:d8:92:e9:26:47:3d:
                    6d:9a:a1:63:48:19:d7:96:26:8c:e3:ba:10:b3:ba:
                    26:4a:39:16:5a:0c:95:b3:9b:2d:8b:fd:06:b4:d5:
                    84:26:05:1e:89:e1:7b:dc:dc:18:05:b1:3b:7a:cb:
                    8d:20:02:1f:bb:07:da:04:24:0d:c5:91:fa:ab:f6:
                    2b:9b:e8:57:a5:f2:36:9e:95:ea:95:eb:dc:4c:cf:
                    24:21:89:bc:90:79:56:52:d4:3f:2c:37:a1:f8:b1:
                    7c:eb:c3:5c:ec:ae:cf:da:3d:22:aa:4c:5f:d1:a6:
                    d7:8f:f6:8c:af:50:2f:d6:00:0b:36:b2:74:46:af:
                    f8:7d:a0:4a:79:29:0e:95:68:e8:91:8b:ab:a1:6e:
                    cd:9a:35:d4:85:9b:fd:2d:c8:2f:26:c3:ad:b2:f8:
                    7d:ca:6b:83:22:d5:9d:c0:95:60:a0:c5:6c:6f:61:
                    0a:06:5d:5e:b7:2f:38:7a:dc:83:e0:3b:7d:58:82:
                    6d:5e:4e:37:32:ce:6d:67:85:15:50:38:38:5f:b0:
                    2d:71:15:e7:88:06:48:1c:53:5f:4e:de:97:10:31:
                    65:37:05:1c:6a:a3:3d:31:a6:47:44:be:20:71:0b:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:49:41:9A:3A:7F:7E:C8:62:95:36:B9:92:69:FF:A5:72:D3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25ed12d6-8e91-3169-ab0f-9b18f875b48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:45:34:cd:cc:70:de:7e:3e:f4:85:70:a4:4e:5e:bd:0e:
         85:64:2f:cb:ac:70:bf:58:b5:98:72:4f:62:63:a4:e7:4d:bc:
         a2:d1:0f:f7:b0:9e:ba:19:b7:c7:31:5a:b4:64:ae:e5:f4:11:
         28:ae:c5:82:eb:74:50:f8:82:fb:d5:ec:cf:b1:a9:d1:02:9a:
         b0:97:f0:aa:9f:60:49:2f:e2:ff:93:b2:bc:a6:1c:2f:31:c7:
         f9:10:49:53:d5:d1:4c:ee:d6:63:65:3a:ef:dd:a6:2d:6b:bd:
         67:47:ea:7f:d0:2a:c4:9d:29:13:5c:06:95:5d:73:b9:d9:2f:
         c6:34:0c:5c:ce:54:97:89:51:81:cd:56:49:e3:7d:05:3b:4a:
         1a:f4:88:4e:08:ff:30:25:15:f7:2a:ed:95:ae:de:af:d3:78:
         ce:01:c7:4c:ad:7d:51:20:cb:f7:04:e4:a1:8e:47:53:d8:21:
         cd:96:a1:e9:3f:0b:b0:c0:a8:90:e8:70:12:cc:9a:b7:81:80:
         25:1a:b1:97:90:63:13:ae:81:19:dd:29:3f:18:49:3c:70:d7:
         b7:bf:1c:ec:fe:22:2e:d5:41:4a:d1:91:45:f7:79:42:67:c2:
         c3:62:ab:38:0c:04:f8:14:03:18:0e:bb:c4:f5:45:cf:48:48:
         91:2b:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:06 2025 by rpki-client