Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
File:                     8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa (raw, json)
Hash identifier:          LT3RRPAAy5CMJ5Unbt853bOE78rXN2EkoPPiVpcDPEo=
Subject key identifier:   CF:2D:F3:8D:E2:03:1B:B7:8C:CE:FB:CD:C8:A5:70:51:E4:43:5F:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB011CDB95EE34D9F32600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     19836
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:01:1c:db:95:ee:34:d9:f3:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0641ab26-2bea-4016-bc77-0a90e06c706e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:26:72:fa:5f:70:c4:0d:f4:11:4a:3a:e2:
                    45:c8:af:bf:c9:59:19:95:0e:0e:a4:36:44:46:15:
                    83:5b:d5:b9:e4:0e:74:b2:50:18:62:85:0a:05:d1:
                    cb:5b:a4:61:ed:2f:e8:5b:f6:c5:d5:2f:b1:63:ac:
                    9c:08:3b:d0:93:f0:f3:33:c9:1b:5a:ca:e9:e0:17:
                    ed:4e:ba:8a:4c:fa:cd:66:4a:1c:a9:7c:30:c1:47:
                    de:2a:57:b7:d3:6d:e7:58:62:fd:e4:53:c6:52:00:
                    52:b6:7f:11:70:49:d3:3c:ee:24:5d:00:3c:0a:94:
                    98:ba:d6:93:3c:0b:6e:3c:4f:fc:1b:bd:98:d6:b4:
                    e1:bb:70:5c:31:ce:07:36:dc:5f:2e:a7:5f:70:02:
                    77:72:1c:c0:21:6b:b6:dc:2f:7a:fc:9d:54:1e:11:
                    43:c7:69:c1:95:20:10:a7:18:f3:40:37:61:aa:a5:
                    c8:c5:bd:82:45:bd:6e:30:8d:09:22:25:68:33:05:
                    7b:a5:52:bf:92:66:59:8f:a7:b4:d5:4c:76:bd:99:
                    c2:59:77:07:f4:25:47:a8:95:20:92:c2:a4:f3:72:
                    f2:5d:0d:fa:50:0d:66:5f:b9:f6:f4:f3:2a:fd:ab:
                    b1:9b:07:03:61:96:89:f3:62:cb:4b:86:85:90:c8:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:F3:8D:E2:03:1B:B7:8C:CE:FB:CD:C8:A5:70:51:E4:43:5F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b92ed5b-844b-3abf-9f23-3cc139fe1753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:3a:17:b3:51:fc:b5:e4:39:36:7e:4b:4a:6b:3d:70:34:
         a6:c1:c9:1b:d3:84:e8:27:3b:05:6d:ed:89:a5:3d:cb:08:0c:
         ad:20:09:41:4e:5f:74:ea:52:04:ed:cb:a5:de:da:5b:96:5e:
         15:2e:b9:48:3b:a9:c7:94:d1:8b:61:80:6f:5c:fe:1a:c2:9d:
         e4:c8:5a:e3:0f:16:ee:e6:14:be:17:38:fd:43:cb:25:04:8c:
         3e:ff:6b:36:f4:aa:09:78:3c:0b:97:fc:b2:b7:36:13:31:ea:
         58:9e:50:87:80:30:99:cf:82:09:d9:db:6b:c9:4e:c8:5b:45:
         b8:4d:8d:e8:a8:9b:74:99:0a:5a:40:c2:87:56:14:04:d6:9b:
         a3:81:99:02:0b:16:65:80:1d:02:45:0c:7d:6e:77:64:4b:a3:
         3c:06:b5:1e:82:9e:d8:cd:a7:26:f3:7c:8b:1e:89:e0:3f:de:
         b4:ec:74:52:1e:27:1f:f5:71:44:2b:e2:54:d7:f1:46:19:76:
         98:19:cc:a8:13:f5:cc:2c:f8:0b:2a:f0:7e:a8:d0:f1:e8:95:
         67:9e:0a:d8:f0:d1:4e:cf:4e:83:24:83:9d:96:fc:79:5f:79:
         f4:a1:6a:ac:11:dd:ce:9f:19:e5:28:86:3a:6b:67:be:57:65:
         08:2e:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:34 2025 by rpki-client