Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48745a94-99c4-3773-961c-105707f9eeea.roa
File:                     48745a94-99c4-3773-961c-105707f9eeea.roa (raw, json)
Hash identifier:          9Fy/gAdQCC3omj7T3JX+NXVk4avwbqunirHVrjWUCFU=
Subject key identifier:   18:EB:40:5F:F1:79:9D:FC:2F:07:4E:1D:F0:D1:2F:8C:78:12:E3:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C09223D35E6482DE23B3900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48745a94-99c4-3773-961c-105707f9eeea.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396569
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:22:3d:35:e6:48:2d:e2:3b:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5cf423c3-fd77-46c5-8ddd-a3c867f2fb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:0f:98:a3:f7:6b:ff:83:8e:eb:19:51:76:
                    a1:12:15:38:62:1e:44:6d:e8:4a:79:f1:2c:08:ba:
                    b7:2c:ef:12:b3:79:2c:59:e2:da:4a:41:f8:d6:6e:
                    bc:75:a8:19:f2:9a:aa:8e:fc:30:56:63:08:3b:68:
                    cb:ec:04:2e:92:cc:8e:c0:0f:ef:75:0e:d8:80:bd:
                    87:81:99:94:b0:14:09:37:46:3e:7b:fe:0d:b5:39:
                    5c:7e:02:2e:a6:be:22:69:28:e3:37:ef:da:32:da:
                    00:d4:08:6b:dd:c7:c4:a6:4d:36:2d:31:62:8d:de:
                    81:2a:9c:56:1a:34:28:3f:cc:cb:d2:9f:3f:22:93:
                    67:98:2d:d9:5b:ac:9b:f1:9d:8c:b0:11:1c:f8:68:
                    f4:e6:89:3d:e9:6c:22:78:77:c4:26:0a:da:f1:29:
                    56:82:eb:25:a5:ca:17:a0:11:dd:70:05:96:3b:84:
                    26:8b:44:ac:50:c9:d9:40:33:34:4b:d6:8e:e0:15:
                    1b:d1:b5:57:0b:9a:47:e4:a9:f6:91:f4:01:ab:82:
                    6d:79:60:9d:0c:6b:44:b6:59:6f:35:b0:39:68:15:
                    d3:62:69:3b:ba:a6:a8:25:bc:5f:15:e9:d4:9d:8c:
                    5e:fb:e6:95:3e:48:84:7d:e5:f9:af:20:f0:93:4f:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EB:40:5F:F1:79:9D:FC:2F:07:4E:1D:F0:D1:2F:8C:78:12:E3:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48745a94-99c4-3773-961c-105707f9eeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:72:f8:5a:fb:09:e4:fc:18:84:8f:cc:51:e1:67:e1:79:bb:
         2f:6d:1c:dc:0e:ef:1d:93:05:b7:f0:2f:d1:49:90:9e:c7:25:
         69:b6:ce:21:eb:19:31:2c:a1:6b:69:81:e7:07:db:21:d2:7a:
         ed:46:e8:e4:21:5d:8e:4b:c9:ad:44:ad:87:e6:24:a9:6c:22:
         a6:87:2a:5f:a9:3c:27:7b:c3:75:1a:3c:de:68:db:2d:95:16:
         50:bc:6f:5c:af:58:a8:b5:a3:43:b2:46:60:2a:c6:f2:4b:f2:
         4c:e4:20:ac:aa:69:07:12:ee:62:b0:03:e2:03:80:b9:3b:bd:
         97:61:ba:b8:cd:28:01:06:75:89:19:f2:2f:ca:4f:7f:46:e6:
         cc:3d:84:d5:57:d6:c5:2a:89:3e:6c:8f:45:e0:14:84:da:69:
         b4:a6:a3:0a:9c:12:42:12:98:92:d8:ab:2f:5d:3b:28:61:06:
         e5:e5:19:1a:5a:75:11:0c:da:a8:0b:99:5d:56:ab:d3:54:1e:
         b3:2b:c8:2d:55:ba:fd:65:d9:bb:18:e4:5a:0c:7f:02:c0:05:
         93:24:8f:7b:3c:11:97:05:d5:be:cb:b4:3a:88:e5:29:52:d2:
         35:ba:cc:ef:37:c5:da:b2:11:95:1d:8b:77:50:a4:7f:94:eb:
         5c:97:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:37 2025 by rpki-client