Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a057a13-8e9d-39c7-b8b3-21a57048cba3.roa
File:                     8a057a13-8e9d-39c7-b8b3-21a57048cba3.roa (raw, json)
Hash identifier:          XbXZjGwuBx190KhExfLPJwX3Cc2Sjg9zBL6rUnSllk4=
Subject key identifier:   76:D3:02:F2:F9:BA:1F:0B:2F:B5:AF:7D:E3:10:C0:2E:3F:67:49:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183FB1F10B9BE8D201B5580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a057a13-8e9d-39c7-b8b3-21a57048cba3.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     211369
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:fb:1f:10:b9:be:8d:20:1b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ab0c8d96-4487-42e4-9fef-be6ada656481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:2c:34:61:d5:2c:da:f2:11:53:ba:43:f8:
                    72:00:6c:bf:c2:95:be:af:ad:86:e4:b2:dd:87:0b:
                    22:fa:4e:32:c2:7a:00:56:a0:d4:d1:cb:6b:b7:d3:
                    40:e4:95:b2:8c:06:54:bc:4a:a7:4a:4b:3c:e8:60:
                    0a:50:8c:6d:58:d5:e5:68:7b:6d:be:32:a6:fa:40:
                    29:01:1b:35:28:fc:d6:a1:1d:5a:e1:12:09:65:75:
                    fc:96:dc:0b:1d:0b:43:d2:fa:de:6b:31:c7:23:47:
                    24:71:f7:d8:6c:a0:36:fe:4f:8e:ec:c9:14:78:49:
                    82:00:24:9c:9b:4b:14:58:96:5e:b8:35:a6:fc:4d:
                    f1:fb:85:2f:99:e5:63:11:37:e8:75:52:3e:ff:05:
                    b8:49:14:cf:12:11:d1:45:ea:e5:b4:e2:38:05:5a:
                    ab:cf:8f:1f:52:46:6a:28:cf:7c:31:8d:d1:ef:ad:
                    a8:25:cf:bf:cb:64:07:a6:10:c3:0d:54:bc:e3:f6:
                    56:95:63:92:e7:ce:3e:35:ed:9e:f9:32:f2:8f:52:
                    5e:25:d9:90:fe:63:2b:84:d8:47:21:cf:17:3c:a4:
                    90:7c:20:0d:f1:ca:d2:b1:9d:fb:04:6d:95:dc:41:
                    58:6a:92:1e:64:9c:ff:da:74:ea:48:e2:ed:c7:f7:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:02:F2:F9:BA:1F:0B:2F:B5:AF:7D:E3:10:C0:2E:3F:67:49:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a057a13-8e9d-39c7-b8b3-21a57048cba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c7:26:ef:21:9e:89:c9:d8:ea:46:a0:0e:45:a6:38:da:32:
         9d:29:4c:23:a8:0b:bd:9c:f0:69:42:7c:f1:01:46:e3:7d:b8:
         ca:3f:04:95:da:82:e5:42:4e:0f:9e:5f:43:1d:11:6b:39:c9:
         e4:99:31:5b:7c:cf:db:db:3e:2a:ca:50:3a:05:0d:e7:02:cf:
         73:9c:d3:3c:e1:6b:85:ce:67:44:e1:34:48:50:82:a8:24:50:
         46:83:a8:a0:55:35:e0:74:75:39:3a:7b:ea:18:12:ce:f8:35:
         38:e6:7d:c1:8c:ed:4f:d9:23:3c:25:37:e4:ce:25:a0:6a:ba:
         c7:06:6b:61:8a:00:d7:ab:51:63:ae:7b:b1:7c:ea:a8:68:83:
         86:3b:e2:41:dd:21:85:f0:51:d4:3b:be:21:de:12:5c:12:7f:
         3e:d9:9a:4d:a6:bb:f0:61:47:59:b8:e9:d3:8b:f7:07:40:9d:
         79:96:6f:83:bd:20:b5:a4:54:46:3e:09:7e:57:6f:3e:0c:ef:
         25:f7:3b:64:2e:e0:c1:b6:7b:39:9c:c5:5d:c9:ff:75:0e:59:
         e4:90:c2:9c:15:8e:ed:fc:50:39:94:96:b4:fd:a8:d3:c9:9d:
         60:6c:0c:50:f0:7c:8c:7f:96:a8:1a:69:88:8d:0f:ac:e1:25:
         fe:74:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:58 2025 by rpki-client