Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56ea47f7-7328-38a1-83b8-c5deaee6680c.roa
File:                     56ea47f7-7328-38a1-83b8-c5deaee6680c.roa (raw, json)
Hash identifier:          EUZyX9+EBE4JHkfC20MKHl/xmy1Im0SavcyQc0EU3jU=
Subject key identifier:   0C:B5:BA:01:BE:7D:3A:D2:63:17:13:4F:83:1B:1B:B3:B7:1D:B2:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0EE06768D4D0C973D1E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56ea47f7-7328-38a1-83b8-c5deaee6680c.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     36632
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:ee:06:76:8d:4d:0c:97:3d:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=fd5feb14-849e-4ed1-b7ca-eb0abae3762e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:4d:e3:2b:89:d4:99:ec:4d:80:78:04:bd:
                    a1:a9:45:53:b0:4a:d8:28:e3:57:ba:38:81:de:91:
                    d1:0a:89:37:ca:62:30:59:8a:cf:a6:52:0b:f9:43:
                    fb:c0:47:2c:60:2a:41:ab:3d:52:f4:20:1d:96:37:
                    5e:51:4c:2c:e6:13:09:a2:da:5a:c8:36:dd:c1:52:
                    14:98:5e:d8:4b:58:33:59:91:26:59:0b:25:85:d3:
                    b5:68:b7:57:17:75:44:07:75:bf:00:63:04:96:c0:
                    d0:8e:8c:aa:46:4c:de:9f:b1:8f:ac:e7:a7:34:1f:
                    8e:2d:de:d6:77:ac:4d:9e:63:df:64:e2:a1:e6:73:
                    48:13:1a:2e:08:db:20:43:e0:9b:f9:5b:45:b4:d8:
                    b2:97:4e:2d:d1:62:72:5a:bf:33:ce:a9:59:87:5c:
                    e1:a3:34:d6:dd:04:87:4d:db:b3:6d:01:cf:92:98:
                    60:0f:75:eb:d2:59:77:ee:6a:24:72:65:c8:4f:ff:
                    31:f1:16:01:4d:40:5b:59:ee:35:b5:fb:0e:5f:77:
                    0c:05:52:9c:de:2a:eb:0e:83:a5:85:31:93:17:97:
                    7b:7b:f6:e5:9d:dc:b1:a5:2c:19:72:d6:8c:55:53:
                    03:14:bf:dc:4d:cb:81:f0:52:fd:15:18:f8:cd:75:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B5:BA:01:BE:7D:3A:D2:63:17:13:4F:83:1B:1B:B3:B7:1D:B2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56ea47f7-7328-38a1-83b8-c5deaee6680c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e3:60:19:3c:2f:3b:15:17:7e:8b:38:46:76:60:5e:6e:3b:
         06:b1:36:5c:49:ab:77:71:68:e0:c6:68:98:f4:dc:ef:ee:bb:
         6e:2c:5b:e6:4c:0f:81:5d:bf:05:5e:b4:2f:25:61:63:4f:63:
         ca:c7:ab:7a:c9:05:3e:e6:84:47:30:d2:49:1f:ee:c2:85:06:
         70:c4:fa:35:33:06:86:5b:11:83:11:fa:e3:74:08:ba:c1:73:
         b6:d9:f4:86:da:0b:5f:e5:0f:0c:50:e5:10:3d:70:8c:91:26:
         12:7a:7e:15:f2:39:23:a8:1e:ad:80:ad:e6:0a:ae:53:ac:d6:
         b3:64:a2:1d:3a:79:47:b0:5d:26:b6:a5:fb:15:9d:77:c8:d0:
         bc:67:38:c6:6e:44:a6:d5:b7:12:66:fa:ae:61:ea:54:17:a3:
         74:7f:96:c7:40:85:3a:24:d6:4a:cc:d4:8c:0d:c9:e2:83:19:
         53:52:2c:82:61:53:c9:98:74:3f:9a:14:95:8c:79:11:21:f1:
         b2:8c:8a:ae:45:63:6e:50:4a:48:e6:36:0d:c4:0c:73:f3:f1:
         76:41:a4:d5:db:f7:20:38:0c:79:f3:51:a1:53:26:2f:2a:da:
         c1:bb:8c:31:6f:1b:3e:58:44:fe:f8:aa:90:a8:db:92:83:d2:
         34:c7:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:53:46 2025 by rpki-client