Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d84a9a4-8d5a-309a-a7c8-0029929accc2.roa
File:                     5d84a9a4-8d5a-309a-a7c8-0029929accc2.roa (raw, json)
Hash identifier:          D967DF7YsvAGe4cH8DPP4OwRbVAV4kBGrCOonT4QvJw=
Subject key identifier:   00:07:37:55:79:22:39:8D:4F:F3:F1:86:46:57:FA:AF:39:35:A9:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844A99400B25A36C44FCA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d84a9a4-8d5a-309a-a7c8-0029929accc2.roa
Signing time:             Thu 30 Jan 2025 13:46:22 +0000
ROA not before:           Thu 30 Jan 2025 13:46:22 +0000
ROA not after:            Wed 30 Apr 2025 12:46:22 +0000
asID:                     396577
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:4a:99:40:0b:25:a3:6c:44:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:22 2025 GMT
            Not After : Apr 30 12:46:22 2025 GMT
        Subject: CN=2cffdb7a-dd11-407b-969c-7c54f689eef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:73:6f:d1:28:f9:01:d9:ca:5d:69:e5:2b:
                    0f:9c:4b:70:a6:ce:5c:82:ad:3a:4f:39:16:eb:b6:
                    1b:2e:55:87:21:77:25:38:e4:14:48:13:e4:fa:a3:
                    59:03:e3:51:1a:06:b3:75:a1:a7:48:78:c2:ee:27:
                    57:41:87:82:52:04:89:1f:d7:6f:46:24:17:cb:b7:
                    bb:a9:aa:3c:37:b3:9b:53:f3:1a:15:5d:f6:dd:d6:
                    3a:44:ed:b6:4f:71:51:d8:67:aa:fc:ea:85:d6:11:
                    ca:be:6f:71:dd:94:85:8e:e4:bc:28:a4:c4:f5:e6:
                    0f:b4:97:f7:a2:19:ed:6a:1d:0d:e5:cc:90:e9:a0:
                    ac:e4:c2:3b:c4:a8:8c:72:cd:56:79:72:25:96:0a:
                    71:bd:ef:31:09:93:09:9a:7d:7e:83:53:2b:5b:09:
                    52:5f:f6:57:a4:04:9c:2e:d8:b9:cd:e2:64:d5:1f:
                    66:49:db:db:5c:00:fd:7d:5c:6b:5c:57:5d:a9:6c:
                    71:cb:30:02:0b:07:7a:2b:9c:09:81:b2:82:33:9a:
                    4b:9f:9e:3a:2e:13:ec:da:3d:a9:f7:48:9e:13:8b:
                    d7:23:4a:34:4f:b6:13:ed:2c:65:3f:96:c2:7b:4f:
                    3f:80:44:7a:30:38:05:72:81:37:4e:16:cc:5b:67:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:37:55:79:22:39:8D:4F:F3:F1:86:46:57:FA:AF:39:35:A9:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d84a9a4-8d5a-309a-a7c8-0029929accc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:95:ff:81:ac:b1:fa:09:89:97:b5:02:77:6a:ef:b7:d8:
         38:17:12:0a:19:8b:49:c6:51:b3:95:df:eb:4c:ac:02:8c:e0:
         c7:99:ac:b5:0b:0e:1f:60:51:10:6b:46:c2:68:80:a9:18:fb:
         85:65:4a:a4:ee:73:fe:ec:fb:35:cf:7f:90:89:a3:6d:73:de:
         4c:8c:04:54:6e:be:db:e4:5d:32:84:29:c3:8e:5a:cd:8e:81:
         df:fa:f3:29:32:5f:ad:18:5c:bd:03:7c:8c:43:a8:9c:bd:5c:
         f8:05:75:a1:bc:b2:7d:e3:ee:97:e0:f6:66:30:74:00:ee:b3:
         b9:1c:98:18:53:70:65:3e:e0:09:e6:5d:b5:cd:39:0a:36:25:
         69:32:e8:49:de:37:27:46:7c:9a:f6:ec:6b:d8:4c:28:85:7a:
         16:20:0d:83:a4:59:b0:e5:e2:2a:5f:5c:f6:b8:68:ae:a0:10:
         2b:b6:b1:47:0b:dc:2c:55:e3:6e:6f:b2:8c:9f:fb:44:22:c3:
         7a:44:88:3a:9a:bf:e2:d5:2e:5a:1f:38:b8:18:6e:23:57:4e:
         9d:e6:8d:f1:1d:75:89:36:5e:99:f3:53:6d:2e:08:79:c4:7f:
         e2:68:85:86:49:fc:25:e1:2d:2a:b1:d8:9c:07:6a:d0:88:af:
         cc:36:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:03 2025 by rpki-client