Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
File:                     3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa (raw, json)
Hash identifier:          Y6n69s6yRFHNye16pWHvmmc5s5zwFENlG5hvtukWeq0=
Subject key identifier:   3E:D8:D8:9C:CD:99:03:3D:D7:76:1D:49:4B:67:2F:29:89:94:EF:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492CB241A8AEF4BFC68EED9D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     397197
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:41:a8:ae:f4:bf:c6:8e:ed:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=54ea324d-0cd1-4894-b733-85f2a9caf5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:a8:10:f2:b1:87:75:90:74:16:8d:90:1b:
                    e0:77:e3:6c:1b:85:57:11:aa:1b:6c:26:2d:1a:2f:
                    5b:f0:5d:b1:0d:3f:55:26:49:e6:4b:4c:c3:5f:4a:
                    65:1d:b9:51:7a:42:40:c3:03:1c:73:df:c5:2f:ac:
                    02:58:87:d5:88:ba:ff:96:37:ef:f0:f1:4b:7a:2d:
                    86:8b:f2:f3:8d:6b:52:c7:f7:49:d5:0c:13:cc:83:
                    b1:cd:52:ae:19:ab:3a:7f:fa:65:79:8c:6b:1e:fd:
                    e8:c4:13:34:cd:cf:fb:f8:a8:6a:35:1b:b4:9a:d1:
                    9b:42:36:6a:05:37:af:e7:86:9d:af:2b:dc:58:35:
                    02:73:cc:2c:91:5e:b1:83:f4:c6:3e:20:9c:6a:85:
                    6f:40:a4:07:89:fc:18:86:b1:90:7c:42:77:d7:13:
                    60:c7:b9:70:7c:a9:d0:d4:5b:ad:90:85:fc:5f:5f:
                    da:11:bf:66:bf:bc:6a:1a:c4:18:0c:2a:af:f3:18:
                    19:e5:55:86:33:2c:4c:25:6b:fb:43:de:c7:3a:b5:
                    8a:20:ca:5b:0d:66:81:ff:6a:ef:5f:fa:3a:1b:28:
                    fd:00:cf:93:3a:da:2d:59:aa:0c:4b:7b:fc:f4:cf:
                    ae:d3:76:54:d9:c9:61:10:c3:a3:f7:51:84:69:27:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D8:D8:9C:CD:99:03:3D:D7:76:1D:49:4B:67:2F:29:89:94:EF:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afea061-aa6c-3640-8d75-8d7ea093f7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f7:c7:2f:fb:de:6e:ff:82:ef:a7:7d:23:a2:9f:1e:2d:cc:
         ac:71:92:ad:e4:35:c5:96:c9:15:a1:43:79:91:ff:92:63:bc:
         b7:91:a2:68:f2:d4:88:e4:45:9d:14:60:ee:80:c0:d9:bf:0a:
         2c:9a:8a:49:1f:18:aa:26:d5:ad:43:f6:e4:49:bf:fb:d3:3a:
         94:3f:e7:da:be:7f:0f:60:d4:66:56:a9:9d:ed:07:20:a1:e2:
         fc:09:8a:23:39:53:3d:15:e5:cc:be:e1:b9:7d:80:50:d7:e0:
         11:f5:ca:de:1e:b0:9a:1c:99:5b:7f:11:7f:7d:29:1c:21:c3:
         e0:88:75:85:66:84:77:06:ca:50:1c:e6:18:21:5e:bf:33:b0:
         74:3b:89:cd:33:6a:1e:d8:5a:7b:06:25:a9:45:14:d5:6c:4b:
         11:96:93:62:b5:fa:af:8e:21:46:0a:a2:c7:ee:3a:e9:03:73:
         d8:68:5c:a3:f2:79:5f:23:e3:c9:aa:06:b5:33:1e:e8:9c:a8:
         72:08:6f:86:45:86:66:ba:1c:1c:5d:29:97:42:33:b0:7e:1b:
         d4:3b:0f:33:05:8e:f5:58:07:f9:09:74:f5:16:6a:ab:50:6a:
         d9:4a:89:48:8b:ec:19:3a:f7:22:fd:38:cb:69:2a:c5:56:34:
         c9:93:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:55 2025 by rpki-client