Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa
File:                     3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa (raw, json)
Hash identifier:          WghXNnCttFtXUJJpY0X87xwIY0XoBvG00/CV9hFqXhc=
Subject key identifier:   8B:6E:A0:AF:FE:1B:C3:9B:30:24:5A:A8:24:66:C2:14:F0:11:01:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB26D43A648F1DB193BCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396560
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:26:d4:3a:64:8f:1d:b1:93:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=57f4fd22-7418-455f-84c2-ff4029e7904c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:23:4b:f8:6f:64:02:c8:26:25:2e:07:5e:
                    59:d4:a7:12:ba:cb:d9:7b:35:28:97:d2:cf:1c:bf:
                    c8:62:cc:68:3b:de:2b:8d:d8:46:0f:aa:fa:de:c5:
                    e2:f7:04:b7:74:21:fa:db:87:5f:4c:59:e6:7d:52:
                    70:d0:f9:9b:d7:17:d0:32:cb:bc:bb:da:bb:60:ea:
                    81:78:a0:e7:05:82:d2:8b:f4:c1:87:40:d5:66:49:
                    a8:e4:5b:8c:90:c5:31:58:54:41:a7:30:ea:9a:8f:
                    49:2c:1c:83:ba:8c:81:7d:a1:6f:72:91:e9:6e:82:
                    61:2a:03:1d:c3:48:28:98:86:fa:5f:7e:39:6f:4a:
                    cf:3a:d9:b6:1f:61:a9:65:a8:df:e7:bf:67:3b:6f:
                    c4:55:c3:dd:95:7b:b0:23:fa:6d:25:81:a1:63:eb:
                    76:1c:a5:fb:85:00:e5:fb:9e:dd:ed:d1:4a:84:22:
                    82:13:52:c1:da:96:d3:00:65:6f:ff:9f:1c:62:14:
                    a5:25:fa:a7:01:31:16:50:60:46:91:9d:a2:56:2b:
                    39:9f:7d:49:e1:c2:52:d2:43:3d:d8:1c:4f:1e:35:
                    c2:5d:29:82:03:d9:1a:58:5c:b6:6d:ac:7e:74:63:
                    3e:48:5b:08:ef:bc:07:b9:04:28:80:62:79:a4:92:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:A0:AF:FE:1B:C3:9B:30:24:5A:A8:24:66:C2:14:F0:11:01:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b64aa48-cfa6-341f-b61e-c2f44a48ff0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:64:35:22:f3:eb:91:5f:4a:bc:dc:a3:b1:9f:64:fd:4d:40:
         51:5c:20:df:2d:df:d3:ff:3f:ab:33:4c:a7:5e:2c:bc:32:ef:
         51:14:3b:42:21:fc:72:84:16:5d:80:83:36:d1:74:db:85:2b:
         2f:8a:8a:30:44:f2:c5:b5:bf:bb:f8:e8:7e:17:50:41:21:f9:
         14:b1:d5:a2:e0:7c:54:b7:7e:1f:d4:34:17:c2:8e:a4:5e:20:
         03:d4:d2:cb:13:ea:a1:a6:52:99:38:86:df:2f:36:bc:d4:7c:
         cb:5b:ca:ac:1f:0d:c8:1c:ef:02:f9:96:38:00:f7:d0:d4:87:
         62:48:2b:7d:6c:ae:d8:0e:f1:f6:b4:3a:49:75:29:d2:54:15:
         a4:ba:b0:27:ac:90:02:84:66:05:1a:f6:f0:e0:69:cc:64:13:
         71:5f:4f:7a:42:cb:07:7c:8f:75:72:7a:e9:4b:1f:69:97:f4:
         82:5a:c6:ce:8b:00:76:a8:8c:ee:c7:ae:bc:82:49:9d:cb:3f:
         3d:8a:cd:82:bb:f5:89:2f:17:5c:cf:4e:2f:ca:ce:31:28:7a:
         af:df:8f:b9:b4:c9:79:6c:3c:06:f7:08:c7:ef:bd:77:6e:b8:
         4d:00:b5:35:6c:c7:58:b9:84:2d:d9:15:9b:57:64:e0:b2:88:
         7e:a3:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:13:35 2025 by rpki-client