Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b7ec866-00f3-3609-8143-34dc9cc2bd12.roa
File:                     4b7ec866-00f3-3609-8143-34dc9cc2bd12.roa (raw, json)
Hash identifier:          SoROm3ZExdsu1SaD0wx7rMb75W/65N0XYyFabGCMpzI=
Subject key identifier:   4A:A9:23:6C:6E:00:14:45:6B:A6:3A:CD:23:D2:6C:B0:78:60:5E:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C7E74B13D3FB339CE7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b7ec866-00f3-3609-8143-34dc9cc2bd12.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     36617
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:7e:74:b1:3d:3f:b3:39:ce:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=a237288e-9c5b-4ec4-b679-9e732f10b700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:c5:75:4b:91:28:5b:76:10:15:bc:e5:5f:
                    4d:62:2a:3e:64:56:19:8f:72:16:c9:4a:f3:85:57:
                    ea:fa:ec:11:ee:9b:98:35:47:01:92:2e:70:e3:fe:
                    7f:c8:86:60:a5:0f:da:8b:68:39:6e:39:45:c2:25:
                    51:cc:03:ec:1b:95:13:e3:5c:12:5d:50:cc:e5:37:
                    46:5d:18:9f:cf:d4:40:a6:ed:69:03:4c:e3:f7:56:
                    a5:6b:35:b8:67:10:68:e0:04:56:99:e4:1a:e6:b5:
                    e5:4d:0e:73:a3:28:cf:e3:a0:bf:42:1d:14:d6:f7:
                    4b:12:b0:cc:f9:3b:63:f5:39:b5:13:6a:30:5c:e3:
                    92:f3:79:31:05:17:f8:bb:27:59:c0:9f:6e:f9:a5:
                    7b:fb:44:30:89:7d:f0:02:09:e9:b0:e1:6d:78:f6:
                    6d:bb:da:8f:8f:0b:69:cc:51:5a:17:4d:7f:8d:e1:
                    e0:53:c9:fe:ab:d0:a8:b4:ad:8b:86:e6:60:7c:d9:
                    a9:8b:5f:97:8a:1a:48:7b:8f:3f:9a:a3:6f:ed:d8:
                    c3:30:7a:dd:d4:24:9d:c0:73:9f:be:6f:0f:50:6c:
                    b0:5f:76:c6:a0:c8:32:ff:6b:38:cb:b2:20:08:49:
                    90:3f:61:96:4c:7a:82:30:b1:5c:2b:40:0b:46:4e:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:23:6C:6E:00:14:45:6B:A6:3A:CD:23:D2:6C:B0:78:60:5E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b7ec866-00f3-3609-8143-34dc9cc2bd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:8c:47:c6:9e:5e:33:1b:bd:99:34:ef:90:34:09:73:44:
         87:42:d7:79:b2:3b:3b:04:ad:8a:b7:84:1b:9a:37:6c:c4:d2:
         f4:89:32:03:73:d9:de:ff:b2:56:96:6d:65:fe:f1:b6:05:82:
         6a:42:86:b4:a4:aa:58:41:ba:19:9c:03:9d:67:ea:6e:41:47:
         96:37:52:bc:1c:ea:c3:fc:f0:33:c7:e8:5f:39:a5:0a:92:f5:
         3e:2f:f2:5f:84:d5:63:46:d9:82:37:d7:60:f7:4d:75:c7:39:
         3c:52:d9:fc:bb:44:1e:4b:9e:e1:d3:15:6d:ae:37:a1:0d:32:
         26:61:ea:ff:eb:0b:eb:aa:7a:e5:76:87:77:53:79:aa:16:af:
         e2:6c:e6:55:68:46:24:79:05:cd:7c:23:3e:7c:15:22:da:39:
         3d:c5:d5:b5:c4:01:53:bf:a6:e2:78:21:5f:97:49:eb:f6:ef:
         54:b2:00:3f:a0:79:89:ac:34:61:21:18:2d:a9:1f:64:7b:14:
         47:0c:a7:ad:b3:4d:48:36:c1:c2:21:8b:06:db:f7:69:0c:d1:
         98:33:b9:97:ad:68:9a:4a:99:e4:0d:5f:ff:cf:1d:07:d2:2c:
         43:cf:80:bc:5e:97:cb:c1:71:2c:82:41:b6:7d:e2:82:1a:c7:
         37:7c:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:56 2025 by rpki-client