Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/348091e4-395e-3cb3-b6de-d71c527ad058.roa
File:                     348091e4-395e-3cb3-b6de-d71c527ad058.roa (raw, json)
Hash identifier:          cvv0pXqulM7tq8j6TCk+TQycXZRLivUKrZKXB9y0O7M=
Subject key identifier:   17:26:77:2B:F9:EC:B5:02:A5:80:10:C6:61:42:69:F5:62:E9:5C:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF2902E52110C1E76BBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/348091e4-395e-3cb3-b6de-d71c527ad058.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396608
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f2:90:2e:52:11:0c:1e:76:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=b088ee8b-01cc-4e5e-9317-d9f50b7d437a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:0e:69:ed:5f:ef:17:14:16:a6:45:43:f8:
                    27:6f:69:0e:81:30:5b:85:f0:c2:76:9b:13:17:41:
                    34:00:15:37:c2:13:63:4d:c6:90:e6:97:8c:88:bc:
                    54:13:bd:9e:de:13:11:54:8e:b7:80:99:d2:32:8d:
                    b7:a6:db:cb:f1:bf:e4:4b:07:97:a8:9c:74:c8:d7:
                    6a:4e:3f:41:b4:04:23:4c:d5:0e:92:dc:ee:f0:57:
                    21:45:47:07:71:a5:76:17:e8:36:27:88:34:5f:4f:
                    69:84:7c:06:89:95:d1:b2:6e:1b:1f:5b:35:e7:57:
                    dd:13:fc:af:69:10:50:4a:ff:13:9c:99:77:a3:66:
                    0a:3f:ee:31:07:b2:39:17:e7:af:42:8b:94:92:0c:
                    4c:7b:0f:85:dd:1d:b6:1a:ee:6f:a2:83:e8:2a:bb:
                    24:0b:d4:6e:f1:4e:49:66:cb:86:92:49:f8:07:49:
                    63:17:c7:88:4a:70:38:b5:58:ef:7d:96:d8:98:49:
                    0d:6f:da:6d:2e:f3:c1:b5:43:d7:05:fa:dc:f0:ae:
                    7d:cd:ef:c5:10:46:a2:70:38:f2:6d:7a:14:d8:87:
                    3d:36:a3:d8:5c:a3:6a:b6:df:ca:2c:9d:e1:db:8b:
                    5e:49:cc:81:68:78:c9:88:74:67:8e:96:74:c7:d2:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:77:2B:F9:EC:B5:02:A5:80:10:C6:61:42:69:F5:62:E9:5C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/348091e4-395e-3cb3-b6de-d71c527ad058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8f:62:f8:9d:70:d4:26:f1:14:54:82:e1:da:95:bb:58:6e:
         9a:77:c2:aa:e5:b5:8e:cf:94:4c:ec:a9:69:a4:e2:c7:43:5c:
         12:d8:cc:2e:2f:7b:e3:f8:52:39:b5:c2:77:1e:c8:90:14:ee:
         5c:e0:0e:1b:df:dc:cb:3b:0d:60:d4:76:21:58:b4:8b:96:a6:
         f2:a8:2c:b1:db:59:d1:dc:a8:2c:4b:df:3f:2b:35:fa:a6:fd:
         9c:c2:54:49:bd:89:a1:16:f9:cc:bb:39:81:37:06:77:42:b0:
         66:8d:8e:14:f6:62:f3:d3:f6:ee:e4:14:95:81:10:9f:7d:49:
         1c:48:9c:db:d8:f2:dd:cd:65:c3:2f:d1:8d:66:f5:21:3f:90:
         64:f8:ce:5a:c7:57:7e:25:0a:49:ad:ac:ca:f1:71:e6:3e:4d:
         a7:d4:17:45:33:a8:14:c5:8b:4a:7b:92:cc:a7:02:3f:15:97:
         b4:80:69:60:c9:10:c5:95:30:5c:3c:3c:2f:06:3e:65:53:8c:
         de:ee:7b:2e:16:8a:5d:7d:0b:fd:9f:b2:78:31:fa:7c:25:4a:
         9b:2f:9d:36:13:be:53:f8:4e:73:ca:bb:42:e6:3e:c2:7c:55:
         d9:ad:cc:fb:09:85:db:2d:ae:1c:55:3a:b1:da:d9:12:80:47:
         23:29:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:24 2025 by rpki-client