Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e019d98-3199-3083-beae-ec41ad2c1045.roa
File:                     7e019d98-3199-3083-beae-ec41ad2c1045.roa (raw, json)
Hash identifier:          rDR83dNY+HpbrrjAFPfKRb7H4rr2uH4jeYE9eb+8K7A=
Subject key identifier:   3D:04:D9:88:6E:98:CB:B5:B2:65:F0:46:C0:AC:E7:87:86:95:E7:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D0BBDD4DD68CA7FEE200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e019d98-3199-3083-beae-ec41ad2c1045.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396557
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d0:bb:dd:4d:d6:8c:a7:fe:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=40d77245-8fcf-4d12-9578-e88dcfe1481b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:b6:e7:0e:69:e0:9d:f2:32:0c:cf:f6:9e:
                    b3:d0:4a:eb:93:58:24:a5:b3:e8:15:a3:5f:f5:88:
                    50:df:cc:ad:f4:97:98:6f:a2:07:b8:3d:f7:54:63:
                    cb:a3:6a:1b:b2:19:89:f0:fb:4d:b4:58:84:16:90:
                    af:0b:b6:9a:b0:69:85:8e:d9:da:f7:fc:0a:5b:ae:
                    49:34:ae:66:e4:0c:f7:22:7e:f2:71:21:0d:bf:95:
                    41:8a:0f:8b:e0:a1:75:1c:dc:29:57:a8:5f:b6:5a:
                    b6:47:39:bd:d8:69:4e:5b:69:aa:ce:b6:5c:06:81:
                    b1:73:73:3e:05:85:0f:6f:c2:0d:cd:d8:cf:06:05:
                    a0:33:c0:6b:7a:84:9e:c9:91:8e:f6:0a:26:d7:64:
                    3d:82:25:18:82:36:18:0c:92:42:54:04:f8:dd:57:
                    29:25:92:da:a9:64:60:a2:c0:b0:bb:4d:8d:05:fb:
                    76:b0:c9:6e:20:33:de:fe:28:1a:f7:78:6c:e4:38:
                    7f:bc:ca:fb:1d:c0:2c:0d:28:22:fe:4b:9b:41:33:
                    3c:d3:8e:1b:ab:fe:72:6f:f5:d6:eb:3c:0c:ec:c8:
                    88:c8:e4:e7:26:7d:40:92:45:18:1d:10:4f:ce:ef:
                    07:07:b5:81:0f:5e:70:0c:b7:be:1e:21:ca:3c:51:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:04:D9:88:6E:98:CB:B5:B2:65:F0:46:C0:AC:E7:87:86:95:E7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e019d98-3199-3083-beae-ec41ad2c1045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:56:5e:d9:57:72:26:a9:0c:50:88:67:94:44:97:df:98:
         17:96:41:3d:55:d1:1d:81:cb:2b:01:da:64:17:a1:a7:de:29:
         d3:cb:14:f3:9b:13:22:b1:33:2c:dc:19:67:c0:ab:95:54:6e:
         d9:d6:47:79:12:6a:30:5d:a4:cb:75:27:01:fd:b3:d5:94:9c:
         9a:36:6b:9f:b3:97:48:9d:75:5d:fd:d0:8a:2b:2c:96:95:b0:
         18:18:5c:c2:b9:43:d4:34:e9:f4:80:62:ac:d3:c6:32:0b:fd:
         fa:9e:d3:f5:66:f7:63:76:fa:67:66:e9:6b:eb:ee:4a:cb:bf:
         a1:98:cc:57:09:75:f8:11:07:5d:e0:bf:33:80:1d:ca:c1:82:
         16:25:0c:e3:dd:c7:1e:d1:f2:7c:ae:be:b1:eb:6a:ae:6a:12:
         57:2b:c5:c5:0c:d7:41:68:34:8b:01:df:ca:3f:90:13:33:5d:
         6e:1f:d6:77:36:0d:6c:84:08:10:86:3f:34:ab:cc:5c:3e:eb:
         5b:15:b4:6f:a1:b0:34:6d:11:19:3b:c9:11:66:05:22:3c:e0:
         65:3e:de:c9:58:3d:e2:8a:63:f4:38:93:95:13:f2:84:08:3f:
         c8:99:88:03:1f:f5:10:bb:c4:3d:5c:e0:85:42:c3:34:8f:25:
         f5:d6:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:25 2025 by rpki-client