Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73d580a0-9ebb-3b53-a97b-d14428f538de.roa
File:                     73d580a0-9ebb-3b53-a97b-d14428f538de.roa (raw, json)
Hash identifier:          Fxp3InrPV2Sswq9Fih3lNeM7wqq6rcppHGNeJeopSY8=
Subject key identifier:   40:0D:8B:98:3F:16:25:92:5E:AA:9E:67:12:90:40:FF:EA:10:C2:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843FFE6EDDD483C474FD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73d580a0-9ebb-3b53-a97b-d14428f538de.roa
Signing time:             Thu 30 Jan 2025 13:46:17 +0000
ROA not before:           Thu 30 Jan 2025 13:46:17 +0000
ROA not after:            Wed 30 Apr 2025 12:46:17 +0000
asID:                     397198
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3f:fe:6e:dd:d4:83:c4:74:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:17 2025 GMT
            Not After : Apr 30 12:46:17 2025 GMT
        Subject: CN=f773e9d0-7091-43eb-9f84-09dc783e7778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:f8:84:10:3b:32:fc:4c:97:20:0e:2c:7a:
                    84:c2:d8:27:dd:5f:60:0b:f2:eb:a1:1d:98:6e:0b:
                    d0:86:cb:e5:21:77:0d:74:ae:46:a9:8d:13:c2:c9:
                    87:9f:41:b2:e2:f5:39:08:49:ad:ee:65:a1:f7:42:
                    68:bf:df:f1:1e:22:66:23:1c:2f:5b:4e:8c:de:d0:
                    b1:31:b2:94:7d:82:38:d7:83:c8:23:ef:0f:d3:d8:
                    29:84:e7:8e:67:f4:0c:85:5e:f3:55:72:03:79:b8:
                    15:be:57:fb:dd:27:ba:48:8e:ca:8a:65:ed:9e:a8:
                    cc:c8:ae:7a:5a:d5:9c:56:bf:d4:af:02:d2:39:d2:
                    13:01:6b:19:7f:5e:13:d6:f1:37:3e:f2:61:96:76:
                    6b:c2:6a:7d:d7:37:67:d3:06:81:51:41:a6:fc:56:
                    64:ad:00:92:3c:82:69:47:56:26:3b:2f:78:7b:df:
                    f5:dc:42:10:4b:34:97:cd:c0:37:10:23:4e:a2:56:
                    72:0c:7b:b7:b6:31:50:74:9c:ea:39:3f:03:3b:f8:
                    83:7b:85:93:f8:f1:c5:71:37:d5:82:10:fa:c7:f0:
                    af:5e:79:43:aa:d7:80:f5:d0:47:4d:16:04:43:13:
                    e3:df:a5:7c:75:7c:c6:e0:69:56:62:20:3e:da:91:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:8B:98:3F:16:25:92:5E:AA:9E:67:12:90:40:FF:EA:10:C2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73d580a0-9ebb-3b53-a97b-d14428f538de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:ac:1d:ec:85:65:b6:c2:78:dc:18:a6:88:52:92:c2:b4:
         1c:83:cf:20:19:19:f4:75:65:15:d8:e7:e0:9a:19:e8:86:c1:
         f9:5c:11:f1:7c:75:e5:28:b6:0a:7a:bd:6a:51:ea:da:b8:76:
         14:0d:f6:58:b5:09:cb:d4:b4:43:4b:4b:bd:57:6f:72:ee:3b:
         65:72:f6:55:7d:13:2f:65:65:7f:5e:59:a9:26:09:b2:19:d4:
         68:87:2f:61:e1:9b:23:41:f4:7a:cc:4f:18:4b:f8:ec:d8:61:
         67:86:1e:20:53:06:2a:78:30:3c:70:d3:95:ab:a3:bd:b9:6a:
         d9:24:d9:8b:bc:f5:01:47:7d:9d:a0:d2:c8:b3:0a:2d:07:38:
         d2:02:87:f0:03:4b:fb:e5:b5:60:3a:5a:d4:b6:14:d8:72:7f:
         b2:72:e4:60:15:78:6a:59:6f:1f:b0:0d:1d:06:e6:21:52:7e:
         08:22:39:ce:94:2c:6f:18:af:84:a1:19:c5:75:b2:fd:81:e7:
         87:1f:06:b2:d5:18:6d:83:ad:f3:c6:26:f5:09:23:9b:56:79:
         1a:3d:5b:b4:38:3a:9d:a0:cc:87:ec:55:7d:22:0d:63:57:60:
         07:44:70:e2:d3:da:01:7a:7f:e2:c5:c2:54:95:57:a2:e9:2e:
         90:f4:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:53 2025 by rpki-client