Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40fb09b2-1207-3de7-9355-6516d5bdbcce.roa
File:                     40fb09b2-1207-3de7-9355-6516d5bdbcce.roa (raw, json)
Hash identifier:          69eTbOQ/D/SIr2lNu96Bd5lGNvlnaWv7NrXaLV4wipE=
Subject key identifier:   00:C3:DD:2C:34:19:B3:43:03:90:D3:9F:33:10:67:E1:09:D0:A1:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D632700A7916817B5D6E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40fb09b2-1207-3de7-9355-6516d5bdbcce.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396568
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d6:32:70:0a:79:16:81:7b:5d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=864322e6-c578-4c7c-ae7f-bb26e0b03677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:8f:d9:3f:68:fa:b6:1c:83:64:fe:b2:38:
                    9b:14:c2:be:ca:51:60:aa:53:2c:b3:a4:c4:b0:dd:
                    14:be:94:13:43:ca:df:7c:b5:01:0e:ad:c9:ed:68:
                    92:97:38:ea:b5:23:88:b8:8c:78:87:bc:bb:ee:4b:
                    1e:27:ea:aa:89:ff:c7:27:5c:1f:6b:97:24:cd:3e:
                    a9:c5:21:42:c3:ec:4a:ff:70:a3:3d:32:c0:2f:60:
                    86:58:5a:3c:07:8b:3a:20:33:3b:55:41:ba:7b:09:
                    aa:1e:e7:38:52:93:8d:e2:9a:bd:b5:04:f5:20:a0:
                    e5:44:5b:32:85:0b:d4:af:4e:6c:8f:c2:14:62:ac:
                    5d:e3:94:0c:e1:47:d4:2d:c6:a2:41:8b:96:d0:35:
                    38:18:f0:56:aa:fb:a7:76:b3:8e:e4:c7:f8:5d:84:
                    da:15:03:2d:f4:97:b1:75:2a:98:60:89:5b:72:49:
                    66:8d:58:7d:78:12:c5:4c:f3:18:2c:2f:c1:db:0b:
                    c9:1a:ec:dd:b2:a5:b4:01:ef:65:5b:67:8a:44:81:
                    72:d3:b1:e2:87:e7:a9:81:df:60:f1:78:9e:62:a9:
                    d0:bb:84:03:46:f1:88:6c:13:1e:ad:9f:e3:90:11:
                    67:a1:12:23:c0:8f:4a:46:57:c5:55:be:28:95:05:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C3:DD:2C:34:19:B3:43:03:90:D3:9F:33:10:67:E1:09:D0:A1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40fb09b2-1207-3de7-9355-6516d5bdbcce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0c:15:76:97:dc:65:18:c0:d4:0b:3d:77:fa:f1:30:dd:87:
         3a:45:d1:04:da:f6:4a:3b:a3:19:d7:c3:00:c8:2e:6c:e3:dd:
         a1:e5:ca:61:e6:05:c0:ab:cb:45:86:4a:45:15:12:3c:0a:7d:
         01:3c:dd:08:99:03:9e:a9:b7:fd:4c:25:ce:5b:76:a4:80:d8:
         88:18:42:f1:bb:26:51:a2:0b:18:68:f2:1f:0b:ff:50:45:da:
         95:81:10:c0:65:7b:bd:ea:05:cb:06:bf:60:ca:98:01:7f:44:
         db:8b:1a:d7:8b:71:56:19:d9:50:3d:41:b2:89:ea:0b:31:03:
         70:6e:04:31:b0:0b:44:3a:9f:7e:7f:6d:c5:30:48:a8:18:96:
         b1:67:31:32:15:2d:a2:ba:7c:eb:f1:ab:fd:a3:e6:38:86:8d:
         46:03:65:49:69:92:d4:53:05:1a:4b:2e:ea:56:2a:8e:e2:60:
         ae:f6:5f:15:02:68:80:c2:ed:a3:07:1f:73:15:32:68:f6:9c:
         e1:d5:57:3f:dc:ce:1a:2a:9d:da:b5:bc:0d:42:b9:15:dc:07:
         e7:48:b5:8a:81:d4:76:e5:4a:da:d3:02:c9:7d:e9:b9:72:4f:
         03:5b:15:88:89:ad:be:f8:8b:5e:80:78:e1:d5:12:71:62:9d:
         53:1c:80:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:23 2025 by rpki-client