Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/702a5e10-73b6-3ac4-a131-6978b56a8374.roa
File:                     702a5e10-73b6-3ac4-a131-6978b56a8374.roa (raw, json)
Hash identifier:          Ddasotrj4EBKxaPVndtdJpmU27/GDnnp6C1NQiw8dDI=
Subject key identifier:   1C:9A:10:E2:88:12:77:A9:9B:9C:19:9F:96:17:30:EF:EA:DD:98:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AF2BAAD93A5EB296F58D4B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/702a5e10-73b6-3ac4-a131-6978b56a8374.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     396582
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:aa:d9:3a:5e:b2:96:f5:8d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=80f415dd-96f2-4579-a05d-7f042693c00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:c6:21:3c:63:6f:7a:55:8d:f3:00:80:59:
                    03:64:f7:2c:ee:cd:3e:e9:b7:38:3b:0c:4e:be:d6:
                    e2:a1:8c:e5:50:c7:79:fe:49:50:b5:7d:34:b9:c7:
                    98:ea:1f:b2:e0:5e:55:f2:f0:33:43:c4:ce:13:77:
                    b4:8f:5c:1f:fa:25:9e:bc:bd:62:d9:15:82:af:59:
                    5f:92:9d:9c:3f:98:42:0c:0c:eb:eb:f0:39:18:42:
                    8d:a9:42:8d:3f:59:0b:85:bc:2b:d5:52:ae:07:b4:
                    b3:8a:08:9b:e8:29:56:9f:a7:cd:7f:66:b8:0d:26:
                    7a:cf:f7:1f:1f:50:e7:83:99:ee:25:a0:53:59:0a:
                    58:d8:55:17:a3:e1:64:6c:d9:53:79:c1:2b:28:a3:
                    3f:c2:03:0a:50:bb:d5:67:aa:43:be:1b:ec:1d:6b:
                    0c:04:02:28:31:16:26:f3:a6:61:c9:c2:f8:0d:5d:
                    29:84:07:f1:88:ee:38:9e:01:7e:b0:b3:cd:ac:12:
                    7c:f8:1d:11:07:94:80:f7:46:72:cd:ae:2e:51:1b:
                    91:1c:03:ac:b4:66:54:69:7d:ac:d8:55:34:8b:a4:
                    ed:11:d3:c5:75:eb:08:84:24:de:01:1b:a9:6a:07:
                    8f:53:93:77:41:6e:e3:7c:a7:c1:3f:7c:89:64:da:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:10:E2:88:12:77:A9:9B:9C:19:9F:96:17:30:EF:EA:DD:98:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/702a5e10-73b6-3ac4-a131-6978b56a8374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:72:d0:ff:29:4c:1d:e3:57:b0:cf:cc:16:3f:fd:06:72:c4:
         61:a2:ec:2e:f5:91:68:b3:28:0e:d0:3d:a2:41:4a:55:db:64:
         9f:9f:b5:c9:24:ed:29:e4:03:1e:32:2c:8b:4c:02:10:7b:e4:
         c3:f3:9c:0b:2a:a7:a9:c3:86:7f:27:21:6e:0c:fe:ed:7f:ab:
         8c:e0:82:84:16:3c:12:ef:d4:c6:15:59:f8:f3:ad:a7:6e:2a:
         98:80:d0:ab:73:bc:fb:84:0a:d1:9b:8f:53:9b:6b:d7:52:fa:
         ff:01:66:a4:a3:56:2c:17:21:75:08:be:97:7c:b3:08:61:9e:
         0e:9c:3a:89:fb:fd:c4:82:11:91:76:38:ff:d7:81:3b:15:93:
         dd:f4:f3:a2:c3:90:7a:77:cd:29:4c:4f:69:e6:f8:ef:09:41:
         2a:9b:b2:5e:30:45:2f:c6:3f:6b:9e:36:ad:09:9c:43:db:5d:
         54:1f:01:7e:86:7f:43:2d:d7:1a:41:90:4b:c0:11:7f:84:a8:
         7b:c2:fa:0b:8e:85:de:54:98:7d:3d:8e:44:fb:cc:5f:42:32:
         55:aa:0e:09:db:00:f2:77:68:5f:af:bb:1d:4f:25:4a:20:86:
         f3:31:4c:4e:35:60:da:f0:16:c1:83:b7:b1:78:d8:d2:84:bf:
         31:b0:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:44 2025 by rpki-client