Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48b7e4ab-9e66-3f59-8ce1-5cb332d55e8f.roa
File:                     48b7e4ab-9e66-3f59-8ce1-5cb332d55e8f.roa (raw, json)
Hash identifier:          2t41DHaqzgSOLXznWf4eD+n4zfjbbk3Dl4YDLPmyRRk=
Subject key identifier:   40:CD:FF:84:98:F9:CA:2F:2A:0F:2D:5F:7B:BA:6C:41:40:A1:93:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB14D29EFA4019C6B6D9480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48b7e4ab-9e66-3f59-8ce1-5cb332d55e8f.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396604
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:4d:29:ef:a4:01:9c:6b:6d:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=463034c7-f2fe-4a52-985e-0c8837ae8c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:dc:b8:8f:81:94:62:aa:3f:7f:cc:1e:8b:
                    a7:a9:16:b6:c6:d3:2b:9a:7e:0a:f5:39:80:fa:c1:
                    e2:3b:b9:f7:21:c4:db:7f:f4:c1:e2:2c:09:f8:9e:
                    77:cb:99:0f:17:ba:09:9e:e0:3e:3e:bf:eb:95:2f:
                    71:47:03:c5:42:64:a8:5f:8c:96:66:dc:3d:4d:a7:
                    d1:9e:00:21:90:d2:c9:a8:f5:b1:bc:11:e8:13:dc:
                    50:b2:89:82:2e:0d:a2:f0:28:e3:97:6f:63:7a:2c:
                    ef:89:fd:43:92:71:c9:5b:47:6a:89:45:78:81:cb:
                    eb:89:4a:78:cd:af:b3:0c:b2:c8:36:ee:e4:66:2b:
                    45:af:02:3d:31:89:da:5e:79:33:b5:25:e4:29:fd:
                    13:63:36:24:6c:ac:0a:68:26:b7:a3:d6:a4:4b:8a:
                    45:3a:f5:48:c0:d6:4a:cb:79:c0:c0:70:e5:79:9f:
                    43:8f:d5:6d:5d:cc:a3:8e:3f:58:6e:4a:a2:cf:41:
                    10:e8:73:e6:a9:c0:2e:fe:e3:00:cb:03:09:a8:7b:
                    08:f2:3d:c6:82:4b:bd:47:09:ed:6c:8f:4c:e0:f9:
                    74:c9:9e:04:f8:14:79:4b:e7:c3:f1:62:12:db:ce:
                    9b:3a:b0:14:60:2a:06:eb:6f:3e:6e:80:76:46:e0:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:FF:84:98:F9:CA:2F:2A:0F:2D:5F:7B:BA:6C:41:40:A1:93:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48b7e4ab-9e66-3f59-8ce1-5cb332d55e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:ac:c9:2e:8b:ff:b8:c2:d2:17:c1:24:c7:de:12:a3:39:
         2a:87:ad:22:6c:ae:d2:97:ec:c8:18:e5:ea:a6:5b:22:80:65:
         8e:27:f8:7d:ed:1c:fb:1d:49:31:07:2b:7c:73:96:c6:80:23:
         38:d9:4d:bd:12:cc:87:3b:7b:4c:90:83:61:64:91:68:90:e2:
         4c:e3:c0:70:cf:c8:7e:49:2f:ec:82:46:72:0c:fe:1e:4a:f1:
         39:b9:2d:38:ef:74:7d:d5:c2:bb:f8:cc:4c:b1:5a:cd:37:78:
         ab:82:cb:6b:82:64:79:c6:8c:bd:0d:13:4a:4e:80:b1:b4:9f:
         54:6a:9f:fe:1e:10:fe:ab:7a:ac:41:f1:78:93:b2:92:43:03:
         06:d9:1b:7e:1b:27:6a:5a:ac:42:8e:49:db:2c:a0:85:a5:67:
         f0:ca:de:c8:29:85:7d:51:14:26:53:f1:f9:23:ab:fe:d3:94:
         93:4e:8e:db:97:2b:eb:8c:7b:ac:e3:a0:e2:26:6e:66:eb:17:
         0a:7b:fc:ea:fe:9e:b9:3e:89:6a:9c:2f:0a:84:a2:a4:fd:45:
         18:64:10:4a:2f:37:cd:5d:cc:17:96:1c:13:f2:ef:db:8a:45:
         14:68:01:9e:10:4a:57:5d:07:66:e7:57:37:49:6b:a3:47:42:
         42:01:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:52 2025 by rpki-client