Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668d9106-4790-3961-a0b5-54323616406e.roa
File:                     668d9106-4790-3961-a0b5-54323616406e.roa (raw, json)
Hash identifier:          7q+fbWUxqrg05/RMb8tUU9e0FHBeT1KifvRn1A4hWyQ=
Subject key identifier:   0A:06:D8:28:41:11:C4:1C:19:53:53:6C:6B:DF:E1:A9:D9:35:5F:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849648455BF7A396FFF51C28940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668d9106-4790-3961-a0b5-54323616406e.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     396561
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:55:bf:7a:39:6f:ff:51:c2:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=630e9942-abe8-48d4-a277-74dd7b25d3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:2b:df:11:bb:0f:54:5b:b7:30:08:2e:24:
                    8b:59:94:94:55:65:43:f1:05:56:15:f6:b6:05:d9:
                    59:2b:81:09:fc:de:68:ba:ca:1e:de:ec:b1:8f:e7:
                    35:8f:24:6b:01:3d:7d:3b:a3:00:da:60:c0:75:90:
                    c2:13:97:94:0f:e1:56:49:c7:40:ca:0d:b5:4b:58:
                    19:65:20:88:11:44:52:60:63:b7:ba:ac:43:53:aa:
                    5e:d8:17:1f:22:e1:65:ac:d4:56:91:a7:a5:a4:72:
                    59:55:7c:c0:cd:d5:34:28:65:93:9c:6d:ad:f5:80:
                    af:cc:f2:1c:b4:d8:7e:e2:26:0d:af:f0:87:83:fb:
                    63:ee:23:8a:f9:a2:7f:e6:35:08:d8:69:ca:65:36:
                    4b:56:be:1b:17:a6:58:ef:03:14:2a:c7:7a:2e:74:
                    ac:9f:50:f3:b1:1c:dc:cf:b5:43:73:01:2a:db:22:
                    63:f0:7a:17:30:e7:c5:bd:8f:bf:ea:27:f4:ab:24:
                    78:48:be:8b:6f:a0:69:29:64:e7:cc:0b:32:ac:68:
                    76:46:ad:5f:af:09:6c:8b:49:ea:35:7e:6e:65:b3:
                    27:06:78:7e:86:6c:47:89:d1:cb:14:1a:d5:ad:2d:
                    4c:4e:d6:72:21:3b:b8:22:a4:f4:7f:8c:8f:8b:02:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:06:D8:28:41:11:C4:1C:19:53:53:6C:6B:DF:E1:A9:D9:35:5F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/668d9106-4790-3961-a0b5-54323616406e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:c0:00:f1:16:7c:3d:d1:16:c0:12:b8:e3:3d:14:ab:cd:
         a9:99:fc:e6:bd:0d:5b:cb:53:27:a0:1e:09:94:98:9f:ae:bd:
         04:90:07:4e:ad:49:6c:6a:f1:0e:af:01:fe:fb:34:65:94:57:
         96:ff:9b:09:0b:e9:28:c9:39:12:0f:eb:2a:81:b2:f1:b4:10:
         d9:79:da:03:69:65:74:38:16:26:81:3d:e4:6b:c0:2a:a9:0b:
         c3:47:d2:b4:42:7f:99:32:16:b0:37:9f:39:77:c6:27:5d:63:
         93:09:85:2a:79:95:98:da:fa:5e:3b:01:da:f2:82:af:4f:a6:
         6a:4f:59:66:4f:c0:84:da:1a:28:ba:02:b5:29:cc:aa:8c:89:
         18:ba:21:90:0a:d3:77:a4:70:53:5d:f5:27:89:21:20:2b:a9:
         98:c3:b4:9b:e3:71:06:ea:e1:a2:e8:b6:9f:0b:37:47:0d:13:
         2f:1d:be:62:92:6f:bc:8b:f3:c5:95:b0:da:67:ac:37:00:bb:
         57:a0:08:e5:6f:3c:77:cb:3c:f3:14:a8:44:c2:04:33:db:66:
         89:d9:61:d4:6b:be:35:4e:4a:4f:08:54:01:97:0c:01:35:5f:
         07:53:20:be:22:74:1a:41:6a:4a:92:07:1b:f0:ed:30:52:66:
         6d:e2:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:04 2025 by rpki-client