Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843b9730-888b-3ee3-9909-68e57df86713.roa
File:                     843b9730-888b-3ee3-9909-68e57df86713.roa (raw, json)
Hash identifier:          Pou4mNrcWo+j8gBtmpOm4m8yNmj5HBtlvOHHEi35ouM=
Subject key identifier:   EB:7A:E2:2F:BA:06:EF:EE:D3:DA:84:5B:CB:64:5A:16:FF:3F:AC:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C091C7A205F26C962F25BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843b9730-888b-3ee3-9909-68e57df86713.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     20362
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:1c:7a:20:5f:26:c9:62:f2:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=352d675f-a400-4ff3-80a3-0d6c6b8e9aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:b3:39:db:df:de:d4:ae:55:cb:10:49:d8:
                    96:46:7c:eb:38:df:a1:cf:9d:c4:ce:3f:db:be:8f:
                    14:d1:20:b1:2a:47:42:2e:92:74:47:6c:a1:d7:9e:
                    33:4b:50:30:e9:41:30:f4:df:bc:2f:a6:49:47:ed:
                    8f:d3:cf:ec:3d:d7:5f:a9:25:8b:c2:5c:dc:83:33:
                    91:28:c8:f1:b5:02:c9:49:1b:0f:93:d9:44:ec:b0:
                    d4:ac:60:e3:bf:b5:bb:94:77:e9:5a:38:a8:da:bb:
                    ec:a3:ba:eb:20:dc:26:f6:59:c8:fc:70:51:6c:2f:
                    4e:ff:54:b4:8b:82:1f:31:fd:91:b3:fa:96:ae:7e:
                    de:12:64:61:1c:ef:7a:3c:1a:81:63:81:d5:6e:ce:
                    97:73:e8:dc:20:d5:c8:e9:49:66:b5:2f:38:3b:98:
                    e8:2d:d7:c3:8b:67:0a:2b:de:0c:5a:3f:4a:1e:08:
                    da:b0:fc:bc:a7:77:7f:21:a3:6f:0f:5b:ff:32:a3:
                    85:4c:ba:4b:c6:3a:11:0f:d8:00:7a:f9:85:46:e3:
                    5f:c6:38:dc:04:0b:a9:22:8f:49:c7:37:ca:93:86:
                    bd:09:6e:1d:e9:be:3b:f5:ef:38:c4:84:34:67:5c:
                    bf:fd:cd:b7:dc:aa:6b:57:cf:8d:91:d3:2c:33:97:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:E2:2F:BA:06:EF:EE:D3:DA:84:5B:CB:64:5A:16:FF:3F:AC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/843b9730-888b-3ee3-9909-68e57df86713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:05:d2:3a:ce:85:db:7f:ba:ae:37:6b:cf:d4:16:a7:cb:0d:
         83:01:76:2b:1e:ba:77:78:2f:61:fc:fb:0a:a9:05:60:fb:f7:
         ad:c3:c5:91:cf:7a:d2:df:1d:4f:d1:29:e0:20:2a:0c:cf:76:
         3c:3b:8d:6c:f9:a6:f3:bb:0a:9e:6a:15:af:36:32:f7:b5:12:
         a9:a6:2b:f1:4c:b5:9f:4b:d1:8a:08:1e:82:3f:2e:10:6e:47:
         8c:6c:1e:9b:b9:3c:04:8d:19:cb:dd:75:20:21:79:26:92:04:
         c8:fa:18:0e:2c:c0:e2:e4:cf:a9:b4:d3:60:24:ea:55:eb:68:
         72:da:a4:4a:38:a2:67:1c:c7:eb:02:e4:7f:de:96:c5:7c:63:
         19:40:30:e7:dc:78:26:97:c0:8b:5c:0b:42:d2:ed:33:9c:d3:
         22:bf:78:86:a3:26:93:f5:8c:55:87:42:ba:4a:7f:44:83:97:
         cc:0e:c7:8b:2c:22:0d:d9:dd:44:07:89:76:8b:8b:c3:4c:c3:
         e5:70:40:61:60:ea:4b:2a:0f:ca:8f:c0:8b:d7:69:85:10:9e:
         04:f4:97:87:04:2e:10:35:1f:06:3f:f2:a4:14:bd:8f:39:39:
         31:c7:86:f3:d1:b8:08:fb:80:3d:36:a9:f2:dd:b1:46:39:28:
         b3:ff:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:11 2025 by rpki-client