Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa
File:                     86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa (raw, json)
Hash identifier:          m9pNs0t+bDIiI4Xv4GTTe8NMXMQkl7jF0lcwJBWTS7E=
Subject key identifier:   5B:B8:F0:3C:93:41:91:49:95:BB:71:8E:36:A0:53:AF:B7:6C:27:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0976E73DA50E0C175240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396571
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:09:76:e7:3d:a5:0e:0c:17:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a2866bf8-ad60-4551-a3f1-2b197c709054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a9:22:ca:03:c0:14:a9:ad:14:ac:b6:a9:14:
                    33:08:5b:be:08:1d:3d:db:ff:df:fa:ae:e2:94:3b:
                    3a:4b:5c:31:60:fb:92:ea:a1:7b:3c:f3:52:06:56:
                    70:42:e6:1b:3b:f7:a5:ff:3e:40:52:f2:1f:01:e9:
                    7d:60:aa:22:32:73:11:3a:3d:92:56:e4:4c:7f:22:
                    0c:fc:a8:18:50:aa:95:0d:fd:e5:8d:33:36:a4:4c:
                    9b:99:70:f7:48:38:5a:33:dd:1c:a4:ea:f6:ab:b3:
                    06:0f:8f:b6:5a:4b:be:2c:27:9a:e0:b5:77:e8:c4:
                    f8:3d:41:5a:f7:e2:c1:3e:2c:4b:ea:55:bc:7c:9f:
                    63:8d:db:aa:5f:de:8d:c5:44:8c:b4:10:e8:1c:d7:
                    85:c8:65:fe:bd:2c:ed:b7:0a:ea:92:35:4f:89:c2:
                    c0:ca:8a:5d:e0:9a:3e:d9:2e:62:1c:ee:36:a2:5c:
                    20:fc:e2:bc:0d:cb:20:33:25:d9:bd:1c:f7:ca:62:
                    0f:a6:b0:84:3b:ac:4b:ed:04:70:6c:5f:0e:ff:6d:
                    8d:f0:5e:d0:18:16:23:b3:03:ef:25:73:4f:98:6e:
                    96:82:24:b7:ad:4e:f0:c4:68:cd:cc:99:f9:94:a6:
                    a6:12:88:b4:e8:e8:17:ce:56:3d:8e:3a:60:4d:e2:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B8:F0:3C:93:41:91:49:95:BB:71:8E:36:A0:53:AF:B7:6C:27:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86fc8c40-d6ba-32a4-85c9-71df71dc2656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:dd:a8:13:46:e4:ee:6c:18:5f:c3:95:55:58:b0:0f:5d:c6:
         0a:90:2e:77:9c:0e:d8:72:75:0e:e5:3e:38:cf:d0:7f:72:b6:
         31:14:d6:44:7b:a7:1d:e9:90:76:1b:f9:6e:23:a8:7a:12:f9:
         b1:c7:28:91:9e:5f:a3:52:7b:eb:6b:82:f0:ca:ca:31:cd:f7:
         ab:55:2c:43:0b:de:69:8c:51:55:26:96:56:9b:74:b6:55:07:
         81:41:b7:36:60:ab:62:5e:17:f4:af:48:e9:68:41:ef:1b:8f:
         2b:3a:e4:92:ea:74:0c:f5:2e:fe:71:13:2a:61:af:4c:22:5d:
         c3:e0:a7:ad:89:54:ca:45:4b:8f:41:43:0f:f4:05:e9:75:fe:
         60:1e:2b:d6:33:c0:10:c3:9b:da:c6:a0:5d:df:5c:14:d5:8d:
         3b:4c:db:71:94:1e:a0:ad:8c:3e:c4:a1:c6:df:67:d1:14:bc:
         ac:84:8a:32:18:78:05:09:d2:b5:79:3b:5a:0d:ea:c4:06:b8:
         a4:62:5d:db:ed:3e:48:81:b5:ae:69:73:1b:1d:15:d4:9b:57:
         a5:c4:fd:09:07:ee:5c:3b:3b:d4:0f:1e:74:7a:a0:5e:21:9a:
         9e:4f:cb:9e:fe:13:d7:e8:45:4a:8e:b0:73:4e:78:74:73:fa:
         16:a7:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:12 2025 by rpki-client