Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84c8824c-687c-3b1e-be04-943fc4d5b497.roa
File:                     84c8824c-687c-3b1e-be04-943fc4d5b497.roa (raw, json)
Hash identifier:          25jIDrDTy7y4c/Cw6lPo9XbX2Y97MMRvQBH0Ay8kNZA=
Subject key identifier:   63:BF:06:39:B3:F1:E3:B4:CE:17:D6:5A:F9:D1:8D:DE:54:62:A7:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AF2BAD537D1572D5E6C27D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84c8824c-687c-3b1e-be04-943fc4d5b497.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     10515
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:ad:53:7d:15:72:d5:e6:c2:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=594d7560-67f6-4ed4-8afa-8db3f941b905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:53:fe:ec:44:b8:7f:15:5c:48:82:58:89:
                    5e:dc:87:7f:dc:49:e0:c6:79:1b:a3:03:4b:6d:1a:
                    0a:d3:39:0e:90:ed:a6:de:f5:27:96:b5:f5:bc:08:
                    d5:0a:e1:00:36:7f:18:97:2d:b7:1b:00:1f:0b:67:
                    aa:41:92:23:5a:10:e3:85:c1:2e:06:98:26:2d:1e:
                    ff:a8:86:e0:4c:ea:a4:9a:4e:4b:61:bf:5d:de:dc:
                    7a:c1:59:f2:64:96:f2:d6:45:4c:6a:fd:1f:5c:d3:
                    9c:ba:5f:7c:f5:4a:92:25:4b:2b:fe:34:7e:f5:cd:
                    d8:58:5b:34:fb:5a:d3:55:16:a6:1c:9b:78:f4:1a:
                    1e:f6:ec:4b:61:6c:c4:ab:72:06:6a:a1:70:a1:29:
                    07:76:56:93:5a:c9:04:11:f1:09:bc:3a:9f:43:54:
                    99:4d:71:53:ab:0a:8d:4b:b0:bc:02:bf:79:06:66:
                    87:78:b1:c5:12:ba:ef:d0:9f:ad:ef:a1:1a:59:f3:
                    a1:56:0c:73:2c:9e:35:4c:18:cd:e2:b6:01:7b:e6:
                    4f:df:b0:48:8e:8c:d5:a0:13:0c:f5:a1:25:af:69:
                    1e:33:ae:87:7a:34:36:ec:87:d7:02:5d:3b:f6:d2:
                    15:4d:d5:21:98:71:b0:10:74:f2:24:68:7d:d3:55:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:06:39:B3:F1:E3:B4:CE:17:D6:5A:F9:D1:8D:DE:54:62:A7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84c8824c-687c-3b1e-be04-943fc4d5b497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:f8:ac:8c:3b:f1:fc:49:58:f9:dc:3f:83:08:bd:0f:bf:
         37:12:d7:97:71:63:c3:67:2a:b3:5e:d8:c9:5b:e1:e7:08:51:
         46:98:fa:db:e3:56:6b:ee:ef:ea:b5:10:54:52:96:72:0d:ff:
         64:47:8c:6d:37:c0:ad:e7:7c:94:fe:32:b1:97:90:78:30:13:
         e3:1a:15:37:28:96:cc:c4:e3:9f:14:2e:e4:58:8a:d1:c9:55:
         69:ed:69:ee:c1:76:a8:62:0a:b6:42:b3:63:5e:39:63:bf:bf:
         54:41:68:20:9a:ee:06:fe:7c:3a:6c:c5:07:b8:5c:69:aa:75:
         7a:48:13:e3:90:7f:32:67:39:e1:31:6d:23:2a:e2:8e:98:79:
         7b:49:e0:a7:93:2f:e3:75:c0:85:18:c0:33:e6:a8:38:f5:79:
         6e:61:c0:63:75:4d:8e:f9:02:fa:cc:9e:4b:92:05:be:ac:ee:
         7b:5a:8a:88:95:f6:91:85:b1:ac:1c:f5:9d:e7:30:fc:b5:2d:
         08:80:24:c2:ed:54:ea:f7:05:d4:ed:c7:ed:04:68:3b:bb:a7:
         c1:b0:7d:16:71:85:19:31:af:6f:3d:55:41:bf:a8:b9:93:0a:
         a1:21:03:46:40:62:86:88:58:84:d9:05:0e:cc:80:b4:2d:48:
         7a:9c:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:56 2025 by rpki-client