Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f71c69f-e3f2-37de-85d4-bc8db4ef3f13.roa
File:                     8f71c69f-e3f2-37de-85d4-bc8db4ef3f13.roa (raw, json)
Hash identifier:          CYYvKrb0wJn8MZjFzBFy4+FO6OWW/cG1TmGPQSpGwzo=
Subject key identifier:   D3:94:2C:39:7E:D7:B5:28:B3:BF:0E:B9:0C:1D:A0:15:AF:93:B0:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AF2BAD9B0C7F47A16A025100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f71c69f-e3f2-37de-85d4-bc8db4ef3f13.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     397204
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:ad:9b:0c:7f:47:a1:6a:02:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=a2595f57-8caf-49d4-8dac-aa99d83f49f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:01:74:65:0d:79:0f:75:bb:63:6d:a5:3b:
                    77:4b:48:09:ea:f2:04:ad:b7:90:40:d1:ca:e4:43:
                    5e:c3:a1:90:51:12:b4:90:86:4c:4e:d4:a6:d6:db:
                    60:ed:85:3b:74:93:67:82:b5:1d:22:d0:9c:a9:9b:
                    98:50:cf:40:c3:ee:f8:32:e0:12:e6:06:aa:cd:09:
                    44:ae:81:73:b6:24:79:35:01:42:2e:fe:1a:82:96:
                    72:ae:7e:b5:60:5e:b0:55:0d:e7:e5:64:f5:dd:3e:
                    4c:ea:4b:a0:43:05:b3:55:38:b5:26:6f:e2:75:cb:
                    74:e1:87:f7:a2:df:5f:68:af:8a:a5:b9:ef:21:a6:
                    6b:84:f6:8b:82:00:38:ff:f9:26:0d:f3:66:a3:70:
                    96:72:3a:e0:f5:7d:af:01:0e:dc:9c:78:4e:77:1c:
                    40:03:64:60:06:32:34:37:d3:4d:2f:d8:fe:87:f2:
                    cc:3c:1f:e5:39:9f:06:bd:01:cc:28:e0:56:69:f8:
                    b5:d8:09:44:54:a8:1a:3a:b7:ea:5c:5e:91:cc:f2:
                    e7:e8:81:1b:a8:c7:87:d0:df:fb:c9:75:ea:7c:64:
                    2a:11:f0:80:da:43:99:ba:06:18:9c:25:d6:5e:c5:
                    34:ce:e8:bf:fd:63:9f:bf:4a:40:86:10:f9:8d:ed:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:94:2C:39:7E:D7:B5:28:B3:BF:0E:B9:0C:1D:A0:15:AF:93:B0:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f71c69f-e3f2-37de-85d4-bc8db4ef3f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:21:1d:3f:0f:58:d7:96:41:7b:0f:66:8b:c8:90:20:7e:
         d8:03:0c:e5:25:51:16:ae:26:d4:e3:52:45:7e:6e:3f:27:9e:
         1c:a3:e4:a5:a7:30:35:f1:54:f3:11:b8:08:50:46:2b:d2:57:
         ab:ee:0b:01:20:72:0b:4f:da:c3:5d:5a:86:f2:0e:61:5a:4b:
         cf:b8:e0:eb:dc:68:6d:c5:6e:b8:5c:77:51:41:a2:4a:f5:a8:
         05:f8:a9:71:45:cd:10:05:1a:bb:73:a8:72:76:54:75:4a:6d:
         4c:e5:b8:76:c5:8c:7d:3a:c9:28:1c:e2:f7:42:f0:70:98:da:
         b7:6a:17:24:29:9c:ac:4b:13:10:00:ba:a6:33:ce:1d:2f:74:
         37:86:5f:18:06:d4:67:5f:7a:fd:73:73:08:12:de:87:1a:f3:
         95:16:53:2e:f5:57:78:72:29:f1:95:09:a1:f5:aa:34:20:4a:
         f3:cb:3b:4c:92:c5:32:8f:8f:d1:0e:bd:a8:96:52:09:51:6f:
         6f:f2:1e:e5:dc:47:0d:82:8f:fb:84:c6:9b:89:ea:a3:35:92:
         38:33:df:f4:7f:0e:51:ca:b4:4b:f0:da:83:6b:67:4b:c8:42:
         b0:27:b1:4e:cb:1b:cf:8a:d6:14:1d:3b:9d:65:fc:0c:ef:53:
         d5:11:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:18 2025 by rpki-client