Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa
File:                     2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa (raw, json)
Hash identifier:          3OrG8LJ4OAVxH0Yv0aqtdv1DyNuFd4WuVtl44uFaqOQ=
Subject key identifier:   96:CD:FD:F6:FF:00:55:E4:C1:25:CD:EB:5A:73:88:E6:18:10:89:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C091381402908CAAD5E8200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396543
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:13:81:40:29:08:ca:ad:5e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=9daee71b-d2ba-42f4-b874-b814ca462367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:f4:96:e3:ac:f9:00:92:90:54:94:bb:ca:
                    7b:1b:c9:02:21:9c:70:4c:15:d9:05:81:6a:b8:35:
                    9d:f4:bc:bc:7f:bd:d2:99:43:e4:55:7b:17:b6:b1:
                    55:1d:ae:b0:b7:10:d6:9d:2d:66:fb:59:7a:1c:8f:
                    e1:27:e7:88:f6:17:3f:7b:b4:f4:fe:fa:00:5d:94:
                    69:91:d9:2c:fa:94:97:05:de:df:63:b3:4d:13:49:
                    0f:19:f6:4b:81:cd:12:c1:c7:82:5c:c8:ab:1b:93:
                    7c:e9:78:58:95:0f:5b:a1:98:92:48:92:be:76:a6:
                    dd:5b:90:d0:ac:c4:f2:99:35:36:59:9c:2a:c3:aa:
                    5c:75:4d:a2:2c:60:a3:5f:bb:94:92:23:e9:7c:b2:
                    34:e3:6d:11:5f:21:0b:22:bf:71:d3:da:34:28:8c:
                    d1:2d:6d:69:85:96:15:e5:c5:f8:50:75:4d:27:a1:
                    65:e6:ee:55:5f:82:26:95:20:58:a7:fb:6b:3b:0a:
                    a7:71:02:b5:78:c2:9d:55:c6:f0:ad:8d:d0:40:7f:
                    36:bc:e7:23:b6:b3:8f:e6:8b:18:4d:f2:8a:f4:30:
                    bc:3e:23:ee:41:0f:32:96:ff:5b:1d:d9:5a:e1:64:
                    9d:85:63:2c:c8:4e:48:3e:15:75:4b:b1:7f:c2:76:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CD:FD:F6:FF:00:55:E4:C1:25:CD:EB:5A:73:88:E6:18:10:89:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2db0efca-9ba7-3f6f-a9e0-ce783a909460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:40:fc:1f:62:07:28:61:19:06:d2:49:da:a4:94:38:28:
         13:44:a0:a4:9a:24:cc:08:b6:c7:64:89:a9:1a:5f:05:f5:f6:
         8a:d9:9e:17:87:1a:a0:c7:57:46:6d:e8:8b:01:22:29:6d:c1:
         f8:88:3d:06:19:db:fd:72:80:df:de:ec:30:df:82:1d:49:8a:
         5d:54:d9:93:6d:20:a7:6e:a0:e4:fb:32:f3:e5:dc:3b:b3:79:
         fd:46:e0:83:d1:f3:99:94:30:b9:82:77:b8:9b:8d:76:ec:58:
         f1:43:c1:d3:b3:15:f5:de:d8:ad:73:0a:cb:14:76:1a:0d:7e:
         5d:ed:e1:79:1e:88:45:c4:1f:5d:87:1d:90:32:88:ab:f8:af:
         37:65:aa:0d:2e:07:10:5d:12:a2:6c:16:9c:d8:60:e9:49:2d:
         6a:fa:0a:d1:dd:fb:7b:84:9a:e8:0d:e5:e1:fd:d5:37:87:aa:
         0f:d0:c9:a8:b6:8a:3b:00:66:ce:4a:34:3b:d0:ef:a4:f3:ef:
         ae:ae:b5:63:62:43:eb:53:e2:82:39:f5:62:c5:ae:f7:db:b9:
         5b:e9:17:af:fa:3a:e0:13:e1:08:d8:ab:cd:47:05:2d:92:12:
         14:03:28:26:2d:83:a4:04:7e:d4:57:2c:b1:44:e0:b3:c7:0d:
         32:bd:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:45:55 2025 by rpki-client