Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed5f3b0-0ded-3dfa-804a-268911e295c1.roa
File:                     2ed5f3b0-0ded-3dfa-804a-268911e295c1.roa (raw, json)
Hash identifier:          pRupK0jnUDx2PQOzfE3Ax84O7egIavmMi8tuUSNADfQ=
Subject key identifier:   50:2A:43:B9:35:2F:33:89:7E:9E:8B:43:A7:80:74:E0:B6:32:F1:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D022F3ED46005C017860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed5f3b0-0ded-3dfa-804a-268911e295c1.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     10515
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d0:22:f3:ed:46:00:5c:01:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=c9649ea7-80d7-48bb-9ff2-efdf119482c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:e8:2c:05:3b:66:f2:91:93:b1:a6:87:12:
                    2c:32:11:c7:bc:dd:a1:21:25:bd:6f:00:f7:40:df:
                    85:97:47:4f:af:7c:7b:31:b8:68:03:12:0b:23:10:
                    9e:c6:e7:e9:77:73:96:15:c6:a7:f9:00:2a:17:ee:
                    c6:d1:29:54:38:bc:d7:e3:8b:9b:e1:fb:68:f1:15:
                    10:c3:b6:03:1f:a3:8c:cb:28:af:57:1d:2f:92:c3:
                    ae:84:91:97:c0:d3:f6:dd:d8:67:65:40:a7:94:e5:
                    b9:db:c6:3c:ba:23:11:50:ba:25:db:69:25:7c:1a:
                    85:47:2b:d5:9e:01:77:f2:a6:48:14:0b:6f:f2:b9:
                    14:47:ca:06:59:1d:56:6c:49:de:c0:94:c7:6e:b5:
                    4d:79:1e:3c:fc:1c:c3:a8:bd:ee:a9:08:e9:0a:0b:
                    63:f5:aa:7f:ac:22:7c:e3:99:7f:6a:98:eb:bf:4f:
                    60:ff:16:b7:22:b2:67:71:b9:11:46:57:16:06:12:
                    41:bf:13:a7:74:88:94:65:b5:20:eb:53:79:e1:da:
                    06:b8:73:ff:8f:d7:a6:c1:93:b3:2d:06:b8:71:cf:
                    7a:0e:58:8f:c4:a0:08:1f:83:bb:98:6f:75:c5:d2:
                    94:d3:33:1e:d2:b5:1c:eb:8f:c7:27:75:b7:39:59:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2A:43:B9:35:2F:33:89:7E:9E:8B:43:A7:80:74:E0:B6:32:F1:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ed5f3b0-0ded-3dfa-804a-268911e295c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:d2:fd:a5:ff:8c:d5:96:bd:c1:6f:cb:21:d9:71:0c:5c:
         db:52:d9:2f:39:f6:0a:49:2f:0a:6a:e9:aa:8c:9f:bf:ee:73:
         eb:53:95:c4:30:25:cd:ac:b7:43:76:fc:c5:37:6f:78:12:ac:
         f6:b4:a2:7d:5a:af:25:52:8d:8d:4f:87:38:dc:8e:73:47:7a:
         40:2b:c6:af:e3:4f:b2:c5:d3:37:cb:5b:52:c4:32:32:e7:69:
         a0:9c:b2:47:dd:4c:ea:bc:d4:55:5f:d4:40:ff:5a:48:78:5a:
         03:29:e4:c2:23:fb:61:c9:9a:6c:51:e4:37:c6:80:49:e5:13:
         8f:0d:6d:38:ad:fd:7b:05:cd:a7:e4:0b:05:2a:55:bc:17:33:
         54:45:06:e1:83:14:16:96:03:85:e9:7b:2e:88:b2:7b:51:ff:
         b5:55:6e:1b:08:c7:d9:2b:68:18:02:c9:c9:65:4b:52:19:44:
         4f:28:ec:57:21:63:95:95:99:5a:07:36:72:05:f0:56:2f:20:
         fd:01:af:e8:93:6b:c8:a0:e5:cb:b8:a9:00:a9:1c:ad:b0:05:
         0e:1d:d0:79:3a:fa:69:44:53:e4:6f:c9:bd:ed:7d:5b:f1:2b:
         cc:2a:bf:03:1f:cc:0d:27:72:b8:13:2d:ed:f3:fe:af:c4:9c:
         19:b1:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:54 2025 by rpki-client