Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f72741f-a1b2-3dce-8f8f-9c0157e3123e.roa
File:                     4f72741f-a1b2-3dce-8f8f-9c0157e3123e.roa (raw, json)
Hash identifier:          s7Eb2a5UXVnaOJsEOpqs53/jJphkQiIwh3bOxegr5W4=
Subject key identifier:   C5:D6:54:09:B8:D6:5B:9B:45:9A:87:AE:E0:BB:96:5B:E4:7C:3C:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F58F5D60B4434BDECF1718
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f72741f-a1b2-3dce-8f8f-9c0157e3123e.roa
Signing time:             Thu 23 Jan 2025 13:38:25 +0000
ROA not before:           Thu 23 Jan 2025 13:38:25 +0000
ROA not after:            Wed 23 Apr 2025 12:38:25 +0000
asID:                     396596
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:8f:5d:60:b4:43:4b:de:cf:17:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:25 2025 GMT
            Not After : Apr 23 12:38:25 2025 GMT
        Subject: CN=fee6923c-c10e-451e-84b1-0c37202a73fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:cb:ca:53:42:c2:6e:e5:f7:dd:fc:a2:7a:
                    e9:de:7d:94:3e:ef:4d:b4:97:bd:ad:10:e2:a5:6b:
                    b7:41:93:cc:6f:ce:2f:13:38:db:c6:d2:5a:f4:63:
                    d3:aa:95:fe:5f:7f:c0:ff:b9:cf:1a:f6:eb:e6:21:
                    aa:9e:6a:5d:10:fe:10:c3:73:d0:50:da:f8:25:b5:
                    79:e7:2b:44:31:e6:5c:0e:7b:a1:b3:9d:40:fe:08:
                    0d:80:86:ee:11:6a:1a:06:d7:40:31:c6:40:9c:aa:
                    81:19:fb:fe:49:9d:f4:63:81:69:28:a7:ff:8f:6a:
                    84:35:92:f8:ca:e5:70:2f:51:4b:12:98:3d:1e:2b:
                    8a:d2:82:e4:c2:fd:f2:a7:c2:32:3e:f2:88:ba:77:
                    91:17:b2:9d:81:02:50:27:c9:a3:12:81:d0:a4:96:
                    72:4f:e0:23:89:74:3f:6a:19:e2:1e:42:fc:2b:84:
                    01:8f:bb:fc:11:47:e5:15:03:5c:ad:32:31:ab:27:
                    77:82:71:ef:a1:9f:05:8d:09:a8:1f:45:41:bb:41:
                    68:93:47:03:38:89:71:fa:48:ac:5b:c6:20:b6:75:
                    1a:2d:3c:b2:18:8c:a6:cb:b5:6f:5f:3d:90:94:4d:
                    9d:89:d0:66:1c:39:be:dc:47:f7:6c:4d:c5:e8:97:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D6:54:09:B8:D6:5B:9B:45:9A:87:AE:E0:BB:96:5B:E4:7C:3C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f72741f-a1b2-3dce-8f8f-9c0157e3123e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:da:8c:73:b6:13:2e:64:ec:e9:64:4b:70:d5:50:ff:83:
         43:81:fa:78:b9:ba:d1:cd:d0:57:91:0e:03:ef:9f:ad:43:1f:
         24:5a:b2:ca:1d:7d:96:29:79:9b:4e:42:f6:75:63:79:71:eb:
         da:15:e4:74:b3:7c:9f:78:13:c0:2f:8e:ed:14:84:4d:ea:fb:
         76:ef:21:ee:68:52:7e:48:46:bf:0c:cf:c9:60:f3:16:01:d7:
         fb:ce:73:01:04:a5:ba:69:4e:86:dd:3c:d2:c4:dd:0e:03:27:
         c8:2d:2d:fc:09:b8:68:b5:db:80:ae:ee:12:ae:7e:dc:a1:ef:
         dc:cd:5b:45:11:1b:72:4f:f0:85:79:1a:09:00:66:06:90:9e:
         3f:d5:08:e3:fd:48:bd:e4:e8:fb:cf:29:df:7d:3c:ae:f1:c5:
         2f:00:d4:d5:58:44:8b:11:11:01:e5:95:e5:70:64:e7:1b:ce:
         21:98:60:39:f9:ab:54:24:a6:bc:d5:66:2e:45:65:ff:82:e8:
         1f:11:9c:a8:26:ca:8f:99:0c:72:5c:2a:9f:3e:ae:04:dd:e1:
         b0:9d:e5:3b:9b:e4:2c:17:c8:27:b6:80:1e:55:14:36:ff:c3:
         cc:70:f3:2e:87:4d:d7:1f:87:96:29:06:8a:46:33:d6:f1:bb:
         c1:0d:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:51 2025 by rpki-client