Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa
File:                     543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa (raw, json)
Hash identifier:          mlCxpwKCwBAk4iyxxUAXfRbh9dlLZrZdMy03hZ/ceb0=
Subject key identifier:   C1:8F:13:FB:62:27:3E:DB:2B:DB:F6:B7:44:65:FD:26:CF:A8:D5:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C0915CA28D54189D560C0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396617
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:15:ca:28:d5:41:89:d5:60:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=2474d028-3cee-46df-98ea-19a3b9c5545c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:b9:6a:fc:e1:07:b9:99:9d:4d:af:ed:ef:
                    e6:c6:39:ea:30:3a:41:37:19:68:27:c0:bb:ef:9c:
                    2e:48:16:4d:cb:2d:c8:36:6d:c5:e9:f6:15:82:62:
                    60:f7:66:c1:a2:64:9a:8a:da:09:a1:a1:eb:a0:c6:
                    16:dd:fd:74:5a:ca:68:58:28:af:e0:9b:96:01:2f:
                    fa:47:af:73:3c:13:71:9b:c4:9f:41:2a:0d:2e:c1:
                    9f:5f:d5:ef:24:b6:9c:18:7b:3a:59:33:81:9d:35:
                    39:b6:de:cf:c9:46:3b:97:e0:29:cb:a4:ce:83:06:
                    a5:77:52:ec:a2:82:ca:54:4b:23:fe:b9:b7:2e:07:
                    8b:95:cf:94:06:df:b3:8c:80:0d:e0:56:93:27:4e:
                    b4:d5:4d:75:db:58:ac:42:0b:12:1f:21:1e:63:2b:
                    29:7d:4a:9b:9d:9a:62:60:97:a4:45:fb:d0:b4:8a:
                    1d:6a:cf:72:9c:31:66:12:bf:c5:1f:67:e0:a1:8d:
                    5c:60:71:ca:fe:0e:1c:89:c2:ee:7c:f4:41:69:e9:
                    f0:af:da:82:19:6a:a4:55:a5:16:e8:6f:17:ee:53:
                    04:fe:ef:ff:3e:ef:b5:be:5b:95:17:62:73:44:a3:
                    f1:cc:ac:b0:b3:31:b3:ed:96:c9:78:9a:e1:b0:d0:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8F:13:FB:62:27:3E:DB:2B:DB:F6:B7:44:65:FD:26:CF:A8:D5:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/543a0e32-9c66-3abc-955e-e3cbab7b7c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:b2:04:52:97:7e:35:7b:62:d7:f0:93:3a:56:ed:14:a3:
         3f:00:63:55:ca:c0:b8:71:f3:f9:a5:8e:93:27:86:9f:c9:d6:
         41:1d:e1:a1:68:b6:78:f0:91:d5:52:e8:f2:38:b4:78:ae:da:
         34:cf:9c:e9:26:71:24:d8:ff:03:6e:42:8c:80:fb:bc:b7:24:
         30:e6:4e:ab:32:90:31:83:fe:1e:3d:14:22:8b:46:4a:3b:43:
         1f:3d:a3:17:da:02:a1:a8:ff:55:e6:7c:4e:c2:51:51:2a:92:
         63:2d:7f:b5:82:ca:bf:2d:4a:46:36:83:23:31:a4:bc:71:ca:
         97:63:f9:e7:6a:d3:9a:60:5d:51:93:5c:57:28:1a:3f:34:7c:
         6d:28:94:03:88:87:55:17:01:26:ff:ad:d6:db:ad:9c:10:f3:
         84:b0:9b:b3:75:29:d5:88:de:6e:9a:7d:c4:85:71:53:4b:8a:
         50:f6:b1:bd:56:18:e6:f8:03:4a:b7:5c:62:91:1a:d5:e5:5f:
         12:84:01:54:73:f2:fe:4e:0f:9a:cd:39:85:af:24:30:ae:bb:
         e2:2f:7d:4a:74:80:21:e9:28:e5:a7:d7:10:37:18:fd:6d:b7:
         5c:e9:87:0f:76:d3:60:9a:be:10:07:50:39:d8:3d:40:1c:78:
         2c:03:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:07 2025 by rpki-client