Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52492439-c197-35e5-95fc-82d24b8fcff0.roa
File:                     52492439-c197-35e5-95fc-82d24b8fcff0.roa (raw, json)
Hash identifier:          XjtetyizlBFmPbmQ5Y2aVxPNpG8qQpQbBP/CZLvEQK0=
Subject key identifier:   3B:70:D9:58:71:B9:20:A7:D4:51:47:0E:C7:C9:2C:73:4E:B4:91:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB04B5E5371A7B633E3680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52492439-c197-35e5-95fc-82d24b8fcff0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396611
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:04:b5:e5:37:1a:7b:63:3e:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a44c491d-c265-4c82-96cb-73c5ab6c40f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:be:55:5f:e3:2f:ee:4e:fe:6a:d2:d7:65:
                    59:13:54:bd:58:37:56:2e:8a:a3:cf:16:e5:3b:d1:
                    90:60:98:f8:94:bb:81:10:de:58:72:7b:fd:f8:52:
                    3b:d4:75:ae:48:ca:0d:2a:4e:2b:3e:d1:ca:df:1d:
                    85:65:01:60:a8:ea:e6:61:76:2e:77:f8:1e:6e:61:
                    ec:55:44:7e:8b:82:cc:17:cd:a6:da:10:1b:58:46:
                    ce:94:ab:3d:a5:1e:e9:95:5b:e5:f9:02:02:97:be:
                    5f:5e:12:89:e5:e3:70:41:4f:46:0f:1d:3d:72:e2:
                    2f:42:fc:63:6b:df:25:2b:25:b6:8c:e5:07:36:e1:
                    48:2b:d1:b4:88:87:ce:e0:9e:b4:ce:a5:99:13:54:
                    db:0d:9a:bb:b8:b4:b8:18:55:43:3a:1e:6c:16:d8:
                    ed:e8:9b:68:45:60:2b:0c:22:b5:67:75:86:f2:ff:
                    a1:76:8c:3b:a0:fe:ce:0f:6a:7a:e6:07:07:e9:6f:
                    5d:44:1e:17:ef:7f:49:44:48:63:98:56:3c:d3:12:
                    4c:c9:ce:a8:ac:a7:20:8f:4b:bc:5a:55:11:e1:f5:
                    25:04:70:a0:9e:c6:0e:b9:33:fb:3b:4b:50:b6:6f:
                    55:67:d6:f3:9a:dc:81:9d:a4:68:4e:8f:73:ab:cb:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:70:D9:58:71:B9:20:A7:D4:51:47:0E:C7:C9:2C:73:4E:B4:91:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52492439-c197-35e5-95fc-82d24b8fcff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:90:6e:db:95:1a:1b:2f:32:50:ed:68:30:64:02:26:3e:cd:
         06:8e:14:24:89:a4:56:7d:26:ed:da:53:d3:f6:5d:55:9f:3f:
         b1:7f:b9:04:d8:7a:ce:82:80:66:79:5a:0f:c1:ef:45:96:ca:
         ba:70:b7:48:28:3a:0a:c3:60:15:17:31:7b:e0:04:96:08:4a:
         1f:ff:49:d8:9d:de:97:53:3a:1e:c7:04:62:2b:80:72:1d:79:
         82:96:95:d2:b6:8a:16:2c:e3:f4:81:a1:51:31:f5:31:b7:03:
         24:b3:65:13:03:7f:c2:04:73:d9:1d:24:67:d6:83:50:40:ea:
         96:45:c2:48:44:f9:1a:9b:7f:11:09:e9:49:cf:70:d2:61:66:
         6d:ac:61:7c:97:24:d5:f8:6a:b6:4d:09:08:aa:fa:15:55:a2:
         f2:f7:95:ce:82:29:54:8c:c7:4f:a9:e2:27:43:db:8b:8a:d3:
         9c:18:6a:c6:be:9f:4e:2d:1a:7c:52:59:3b:9f:2c:fb:7e:03:
         dc:6a:19:d8:1c:c6:8f:75:77:20:53:24:c7:90:61:3c:6c:d7:
         95:19:2c:0a:88:81:47:13:37:1e:3e:d1:fd:27:83:55:92:f0:
         e7:76:de:df:29:3b:cc:aa:c6:dd:f0:10:56:5e:ed:f5:6c:9c:
         a7:2b:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:49 2025 by rpki-client