Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4702fa5e-1f42-3dea-8254-8ff19038e04d.roa
File:                     4702fa5e-1f42-3dea-8254-8ff19038e04d.roa (raw, json)
Hash identifier:          pjPnWJM65k0aiceLkB/BFyfAfQUMxf589HN8GGzqKCI=
Subject key identifier:   4F:40:13:F4:69:32:B4:15:43:7B:D9:18:F6:9C:FD:6E:ED:C3:43:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB26C14680C031B4EE4E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4702fa5e-1f42-3dea-8254-8ff19038e04d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396563
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:26:c1:46:80:c0:31:b4:ee:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3100a6b0-ce5c-4de2-b6ca-9f2fba2a5ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:3d:8b:42:ae:aa:68:c8:e6:68:9f:b8:68:
                    8b:d3:a4:9d:a6:ef:f8:73:ec:49:a4:3b:87:88:8c:
                    73:7c:57:e1:a2:b2:bf:25:26:80:f7:9d:05:df:75:
                    62:24:45:c3:5c:94:6b:45:2d:9c:3e:9e:f2:2d:b9:
                    46:64:c2:64:94:04:0f:2a:d7:d9:d5:73:9e:20:b8:
                    15:57:37:2b:fe:36:4b:c7:7c:d1:06:90:80:a1:19:
                    0b:fd:3a:ff:96:e9:a7:c6:c9:b9:6c:15:d4:08:9d:
                    71:08:84:69:25:0c:39:3a:be:f0:c6:bb:47:c8:54:
                    df:4a:b1:b2:56:00:ca:a0:d8:f5:77:a6:83:0c:55:
                    72:0b:7d:e4:40:24:7c:bd:4b:2d:0d:1a:bf:4f:0b:
                    a0:3d:cb:29:9c:18:a0:41:20:f9:bb:ec:26:41:0c:
                    20:cf:a5:09:a5:2f:c1:4b:2f:4f:2d:93:f7:2a:e9:
                    70:01:8f:d2:cb:3f:70:19:90:ce:c8:bc:16:36:9b:
                    06:bc:1b:a2:92:45:4f:c9:42:0a:88:9c:5d:06:f2:
                    99:cf:d8:b7:7b:6a:53:56:61:64:a7:09:07:d5:a1:
                    ea:fc:fc:72:74:4a:82:4d:43:87:f9:7a:e7:41:56:
                    b3:7a:6e:cd:16:a5:75:2c:d6:08:3f:3a:d6:3b:a3:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:40:13:F4:69:32:B4:15:43:7B:D9:18:F6:9C:FD:6E:ED:C3:43:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4702fa5e-1f42-3dea-8254-8ff19038e04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e0:b7:33:27:44:b8:af:64:b7:76:f5:e1:0d:ee:0d:55:0f:
         48:8e:a6:fa:eb:fc:5a:2b:a0:9f:05:87:a3:0f:85:d3:11:e3:
         cc:03:b6:09:ed:30:eb:f1:ed:a4:f7:2e:0a:43:3a:38:c2:ec:
         59:2b:b0:33:47:ef:4e:24:84:5c:a6:e7:34:a6:4d:8f:de:9d:
         03:9b:41:95:9b:6c:07:fd:59:20:59:00:fa:27:5b:81:6f:fd:
         e9:1c:38:85:58:e2:af:0e:cf:ec:77:31:75:aa:e6:08:db:9b:
         74:56:35:cd:f7:87:fa:46:a7:7b:75:53:61:11:e5:b9:01:e1:
         05:7b:c1:46:75:48:92:79:1a:62:1c:b5:59:bf:26:b4:df:32:
         7b:33:d2:7b:76:d3:e3:52:95:28:28:85:84:cb:c9:b6:46:51:
         f7:cd:9a:6b:59:24:88:4f:aa:0e:b9:8b:f4:01:c2:48:16:3b:
         9a:aa:e6:22:fc:bf:ca:00:d7:29:e2:7e:65:33:f7:27:3a:f1:
         7f:9b:80:d8:8b:7f:95:33:25:42:8e:35:a5:c7:7c:f7:52:1d:
         25:8e:0e:2d:16:29:5c:8a:c0:24:c8:79:ef:86:5a:b3:10:65:
         23:99:7e:85:fc:17:e5:8a:1a:d3:1c:07:15:24:aa:91:c6:10:
         e1:f0:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:39:48 2025 by rpki-client