Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa
File:                     3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa (raw, json)
Hash identifier:          rzkrAV0fOzpBtNNn8J4iRUb3vXWKS/nnkUpi/3IWqXI=
Subject key identifier:   5B:A0:2D:C1:21:F5:1A:74:83:16:D2:B9:14:2F:45:53:28:4B:44:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C0921819CD6B14564978320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396562
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:21:81:9c:d6:b1:45:64:97:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5a7150ac-a71f-4c13-9ec3-62767dedebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:ca:19:d9:ca:e2:c8:b3:92:3e:d5:0b:68:
                    dc:37:63:19:92:20:0f:61:41:dd:dc:84:a3:f8:59:
                    39:7f:7a:e7:91:05:70:1b:84:1a:04:a8:10:c9:5a:
                    42:95:e2:22:93:00:7b:b9:91:ec:04:bf:4f:26:9f:
                    0e:4a:64:b1:5c:8a:4c:36:16:ce:c1:f6:a1:a5:47:
                    88:d2:e5:de:c5:27:34:0c:aa:60:4a:8f:f4:ca:00:
                    81:e5:05:a8:e4:60:8f:10:3d:90:9c:36:74:36:47:
                    1f:4e:bb:ae:95:59:31:a7:bd:69:0a:52:90:09:5b:
                    f3:b5:01:a7:21:d9:1d:36:01:de:94:ce:a9:c8:41:
                    ff:af:c4:f7:24:50:47:b1:db:28:35:5c:8e:b8:3a:
                    71:3c:f9:ec:46:33:6f:c6:e5:a0:82:2d:60:05:d3:
                    d2:44:1f:09:6d:3c:34:c7:8e:63:33:58:ad:d4:42:
                    30:be:bf:4a:97:fb:6f:11:77:e4:b4:a1:a3:ed:83:
                    67:cd:49:48:14:fb:f1:a4:cb:11:b6:4b:93:78:91:
                    38:e0:d4:de:1a:0a:4f:e2:7f:97:00:2a:46:c7:db:
                    da:11:3a:23:b8:0f:ad:60:1f:1a:a1:72:f1:13:26:
                    55:43:b9:ba:dd:c5:39:a2:64:0e:21:16:72:23:6b:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:2D:C1:21:F5:1A:74:83:16:D2:B9:14:2F:45:53:28:4B:44:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d0ea8ba-42c5-3020-b93a-3c2108bdffb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:fd:7e:80:3a:e6:dc:47:14:ce:6f:9c:85:5a:55:69:11:67:
         9e:fa:5c:8f:6a:94:d1:45:d8:cd:c3:9d:33:8f:cf:a4:c0:61:
         13:fd:fc:2a:42:f7:c6:6f:c2:c7:b5:67:34:bc:57:c6:85:36:
         5a:74:32:95:7a:25:a7:31:69:31:31:06:61:b4:57:54:99:72:
         23:32:e6:58:4c:db:5a:33:da:29:0f:09:cd:b0:ea:ad:8c:60:
         42:3a:5a:b2:7a:f1:d5:47:77:1d:92:f4:30:41:87:6a:03:bd:
         a7:bf:75:3c:41:5c:6b:c0:a5:38:33:16:22:c9:50:1c:b8:00:
         02:25:d7:d3:0f:dc:09:f4:43:d5:f8:3a:59:69:c9:95:81:a1:
         cc:4e:e6:8c:19:c5:5e:6d:7e:85:1b:57:40:db:6a:d6:1e:ec:
         37:e0:13:c6:c2:24:0f:74:65:c7:0c:57:91:54:34:01:1b:5d:
         0f:a1:ec:73:8b:02:09:6c:5a:d9:4b:09:f0:10:6e:2d:13:42:
         d2:82:d7:d5:c9:a2:02:89:70:5b:05:0f:7f:cc:17:0c:8c:e8:
         8e:e2:9a:6a:b8:01:70:5b:8b:86:b3:e1:ca:14:1d:83:76:83:
         6e:81:73:87:35:8f:e8:ba:a7:f7:dc:ec:4f:f0:cb:7d:19:ba:
         23:96:f7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:09 2025 by rpki-client