Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa
File:                     3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa (raw, json)
Hash identifier:          h7Y0bGjga0gg+1uoRnC9xbQwlfBbBxdAGWv+DlCi+/k=
Subject key identifier:   33:2B:2D:3E:DA:A2:67:CC:95:45:DA:AB:C4:1C:17:D9:9E:17:B6:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492CB23F4AA1A9FFC842A820C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     396562
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:3f:4a:a1:a9:ff:c8:42:a8:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=f42b324b-f1c9-4a69-843c-3743444bade1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:44:37:bb:1f:22:ae:be:b8:5d:86:97:5d:
                    47:87:f1:d4:72:0d:ad:67:66:d3:6a:8c:2c:e5:e9:
                    58:0e:c7:3e:fb:65:61:53:84:75:08:e9:3b:1a:d7:
                    49:72:0b:00:41:36:ad:cd:e5:15:a6:ae:c2:95:b4:
                    a2:5e:36:3a:a5:04:a7:09:13:06:d4:e5:11:17:18:
                    91:9d:ea:33:a8:58:29:08:ee:48:cb:ab:51:d3:a8:
                    4e:a5:33:88:66:32:79:08:2c:2f:52:14:30:16:e4:
                    b2:d2:89:fe:b2:4f:18:e1:4d:ba:83:40:92:92:ea:
                    9c:1d:22:08:1b:86:fb:8b:2f:9e:07:c1:dd:0d:1c:
                    f3:0a:d4:56:6c:e0:0b:01:20:7f:aa:55:6e:61:88:
                    f0:79:7f:a0:69:32:3a:79:1d:d4:69:27:49:21:be:
                    e6:a7:42:78:45:11:20:47:f3:db:cd:d7:36:3e:c8:
                    1e:4d:e1:8e:d4:27:f1:9c:fc:17:d3:dd:cf:14:62:
                    ea:66:5c:fa:16:19:4c:04:f8:b0:3f:43:ec:52:ba:
                    45:e8:f8:fa:e0:33:67:e9:b5:2b:1f:d3:02:9d:01:
                    49:16:80:30:2d:76:b4:9c:68:a1:5f:f2:ad:99:77:
                    8f:12:17:22:13:a6:ca:78:fd:86:0c:4e:1d:60:d8:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:2D:3E:DA:A2:67:CC:95:45:DA:AB:C4:1C:17:D9:9E:17:B6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:b0:4f:56:46:7b:43:49:f3:0d:60:cd:53:25:6f:1a:9c:
         1c:98:50:3e:b1:19:a9:7f:a9:7c:e0:ec:a9:ac:72:60:18:10:
         26:f5:53:ed:4c:0d:e9:44:26:dd:8e:7e:3a:cd:96:3c:97:cb:
         a5:26:71:cb:e4:f5:e5:99:2f:3d:d1:b9:6a:d4:ee:e3:77:cb:
         f1:43:eb:25:4f:ff:d4:d0:b8:f1:93:b5:61:f9:09:35:2b:7e:
         0d:bc:52:5c:4f:26:86:8a:50:0e:0f:28:be:61:03:ba:66:33:
         cb:c9:52:12:1f:95:1c:d3:bd:59:6b:aa:58:37:49:38:fd:80:
         a8:b9:43:26:8d:82:85:5a:ed:65:b1:db:4d:79:4e:30:a3:6f:
         e6:a9:26:f7:0f:b7:69:2b:94:9a:4b:52:08:42:ca:f8:87:5c:
         d9:7a:e5:db:1f:31:79:e9:11:72:4a:4d:58:1b:25:a7:aa:d2:
         9e:75:2e:e1:4e:bc:e2:a8:f9:ea:80:47:2e:8d:f0:f7:d4:01:
         7f:fb:ed:06:1a:8d:3d:48:e7:87:4f:0d:6e:c3:42:f3:2a:32:
         07:b9:e6:97:a4:d2:e9:c6:a7:cc:8e:54:e8:1a:7e:d7:91:f7:
         72:5f:f8:e8:5f:51:67:37:da:7b:f8:d6:4c:ee:74:fd:75:a1:
         9b:6a:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:43 2025 by rpki-client