Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71203a53-4f9d-35dc-b26e-ca73afce3db2.roa
File:                     71203a53-4f9d-35dc-b26e-ca73afce3db2.roa (raw, json)
Hash identifier:          GMcPEe6c16qa8S9l510+ZSEVUGxwi0bZffbaVSeUM2Y=
Subject key identifier:   41:49:9E:8A:55:F2:05:E6:F6:55:76:E8:05:7E:11:D7:75:7A:C8:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DC59D60850F2479B4C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71203a53-4f9d-35dc-b26e-ca73afce3db2.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397207
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:dc:59:d6:08:50:f2:47:9b:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=c8113256-2ea8-44b5-8c3f-7d11823303a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:91:c7:5f:4a:25:66:c7:76:88:64:e0:9f:
                    00:ff:ad:11:2a:f7:80:38:f4:19:a3:c1:49:1e:44:
                    e4:23:d2:37:d0:17:d7:c1:f8:46:71:55:53:6a:3b:
                    2b:52:7e:20:fd:b4:48:17:b9:da:a0:34:df:39:51:
                    a4:34:2f:92:1e:93:7a:c4:a4:00:8a:ea:f1:67:d3:
                    de:42:cf:86:63:a1:e8:5c:b6:28:48:99:ca:fd:a4:
                    5b:08:ba:98:3d:28:46:cd:a5:70:5c:37:b7:4d:b6:
                    cc:9c:e3:91:35:f9:12:39:c1:68:11:9f:17:30:8c:
                    74:23:a7:01:ea:3d:f0:2e:e0:4e:aa:db:34:c1:b3:
                    45:66:70:9a:b3:3e:f1:fd:36:1f:f3:e4:98:7a:ac:
                    6a:e8:32:60:67:bc:67:b9:54:06:fc:6b:5b:3b:c0:
                    78:d7:01:32:c9:da:66:7b:70:78:cc:38:ca:ff:7c:
                    73:83:34:38:da:f6:6f:9e:c4:ff:d1:c4:2c:b0:6b:
                    f5:90:c7:1b:78:97:6d:56:ec:39:f7:66:e2:5c:e3:
                    82:82:5d:19:f3:f7:82:bf:12:b6:64:8b:8e:b0:2c:
                    c8:72:c2:3d:b9:ea:cd:21:fa:ae:cd:38:59:2e:69:
                    e4:2c:64:5e:df:9b:a3:d2:40:a0:3f:82:9f:19:0e:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:9E:8A:55:F2:05:E6:F6:55:76:E8:05:7E:11:D7:75:7A:C8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71203a53-4f9d-35dc-b26e-ca73afce3db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:b0:36:26:08:7a:1e:a2:47:57:58:23:f3:d5:d7:51:b5:
         51:65:e1:92:23:b8:18:a9:d5:68:d7:80:e0:b7:5f:60:d3:fd:
         e0:38:ba:10:c8:35:4d:d3:ae:af:22:c9:f6:84:2a:d2:b9:b7:
         ff:3d:5f:ea:95:d9:89:96:1d:bd:54:95:09:1b:dd:cd:8b:b5:
         e5:40:f5:1a:8c:11:13:79:fd:6f:c7:0d:e2:4d:a1:7e:d6:9c:
         6e:08:87:5a:6d:3c:60:22:09:72:cc:da:95:c0:7d:8e:3e:44:
         bc:f4:0d:3e:df:6d:ff:1b:a7:2d:1f:a4:74:61:04:b2:89:6a:
         86:4d:55:f3:b9:71:af:f0:81:e6:0f:1a:9f:b6:60:17:23:79:
         f4:95:e7:fd:b8:70:15:8a:54:cc:a3:45:4c:b2:1e:6a:21:84:
         4b:42:a8:8c:6e:10:89:63:94:1b:e0:46:b6:2d:57:56:92:19:
         a6:28:5f:fa:22:5b:bc:b2:13:6c:32:6a:7e:11:d3:70:b1:05:
         b7:56:ca:50:c7:28:6b:11:50:74:4d:38:24:db:68:fd:83:b9:
         ef:ce:66:c2:41:20:1a:78:8a:db:98:62:2e:f1:a8:0b:c8:2b:
         7c:ec:df:21:10:ee:4d:ff:5d:7d:6d:32:5b:38:1e:9f:65:03:
         60:5a:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:36 2025 by rpki-client