Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6545af6b-94b2-349f-9771-ae16f40b41b7.roa
File:                     6545af6b-94b2-349f-9771-ae16f40b41b7.roa (raw, json)
Hash identifier:          eNzBhtmQbwPVNc1e8B8nDl7SBIb6A5Hk4R+X4Iz1t54=
Subject key identifier:   E9:E2:A0:6F:B7:7B:0D:03:63:0D:9C:3B:1E:77:47:44:F8:DD:A8:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF758D181A2488E7F0D2A940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6545af6b-94b2-349f-9771-ae16f40b41b7.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     397206
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:8d:18:1a:24:88:e7:f0:d2:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=070f5dc0-c3a1-4d88-863a-4829e8c589e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:d9:00:f2:49:5f:f7:3a:29:79:4f:71:55:
                    7c:dd:38:9f:1c:1e:b2:10:b5:6e:c7:85:5c:18:10:
                    d9:00:fd:41:15:33:7a:3b:d3:d4:9e:1e:e7:a7:69:
                    aa:b9:d7:66:94:1a:7d:9f:3b:7e:17:ca:33:b5:0a:
                    6d:53:3c:82:0c:3c:96:00:17:22:9f:cb:1d:cc:76:
                    53:4a:33:91:5c:af:75:b5:ae:57:a0:b6:ba:b7:c9:
                    9a:3b:46:a1:a0:5a:54:48:ad:51:ab:4d:39:7b:bf:
                    dd:b8:55:75:3c:69:28:25:7e:fb:0a:8c:c4:f4:75:
                    4e:6b:89:02:63:28:93:4a:52:56:19:68:91:f5:b9:
                    2f:f9:37:a6:59:29:20:3f:fc:30:a5:e1:e3:72:d2:
                    4b:2c:d8:fd:f1:45:30:31:2b:7d:e0:b5:68:66:44:
                    c2:0f:2a:d8:71:3f:e9:23:b5:56:ed:54:9f:67:35:
                    b3:6a:98:21:15:80:89:7f:2a:aa:f0:2b:b4:7d:4c:
                    e7:c3:ae:be:99:cb:14:28:b4:29:f9:ba:25:77:44:
                    65:61:75:f9:fb:46:00:1b:7b:6e:29:50:6a:19:54:
                    da:33:74:7b:d7:d4:e5:3c:ca:f8:10:b9:3e:93:d5:
                    6a:23:65:59:94:33:91:98:5b:9c:a1:04:61:77:34:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:A0:6F:B7:7B:0D:03:63:0D:9C:3B:1E:77:47:44:F8:DD:A8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6545af6b-94b2-349f-9771-ae16f40b41b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:72:a3:89:55:99:44:0a:18:65:85:a9:a2:82:6e:c5:db:84:
         c1:de:38:b6:d6:ab:1a:41:c5:5c:c2:a4:ac:e6:03:2e:5e:f2:
         1d:f9:ee:d1:6d:63:98:cc:e9:e3:f9:5a:81:20:8b:2c:8e:ea:
         89:93:2f:22:e0:0b:c2:2c:8a:06:9e:21:f7:33:2c:a8:01:10:
         5f:3e:f0:3c:a2:86:73:97:29:11:3c:ec:38:54:72:2d:43:9c:
         cd:8c:c2:fa:3d:39:df:3b:9c:81:79:a5:af:28:c9:1a:32:9e:
         96:e3:00:e5:24:3e:91:39:94:d5:77:a0:62:9d:50:b6:a5:19:
         c0:7d:17:cc:d4:d4:b5:aa:3c:a9:98:1c:71:5d:67:9a:db:30:
         0b:2f:25:48:10:00:65:71:21:7d:b9:52:1d:bc:85:94:18:eb:
         98:83:ca:65:e3:4c:a3:c5:2a:ab:68:d8:c5:49:f7:42:06:a1:
         dd:ab:bd:29:d5:b5:f3:75:3e:d5:44:3b:40:ee:8b:83:e5:49:
         ca:b6:d3:7e:2a:2a:1e:d2:18:36:49:5f:c5:dc:19:85:02:f7:
         b4:b0:da:db:09:7b:fd:29:09:99:17:cd:a9:eb:c0:d4:e2:79:
         50:32:d5:c0:32:45:fa:55:74:f8:c9:9e:ad:02:01:81:3a:0c:
         6c:54:1f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:41 2025 by rpki-client