Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9268eeb9-f52f-340f-bf17-9711e5c8acc9.roa
File:                     9268eeb9-f52f-340f-bf17-9711e5c8acc9.roa (raw, json)
Hash identifier:          k9b0LP82Hpbht2KWjjqPsv42m4sPrZHz5MkfKgM3+EQ=
Subject key identifier:   21:D5:5E:1A:12:61:34:4A:74:3A:1B:08:0C:6A:1F:04:55:88:0B:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F444FB0E2E3DB8070500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9268eeb9-f52f-340f-bf17-9711e5c8acc9.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396591
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f4:44:fb:0e:2e:3d:b8:07:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=bcb236df-d641-4548-b2fe-208dd21a909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:0d:49:7e:e1:d2:f6:b9:46:c1:40:e1:77:
                    70:1a:11:b7:59:2a:ac:c6:32:7d:de:27:de:bc:b3:
                    88:b7:81:2e:5f:8b:11:63:fd:69:af:3d:fd:c6:11:
                    76:04:d8:c6:e1:01:42:bf:73:ab:8b:de:09:e9:08:
                    41:5a:7b:14:a0:3a:dc:0a:e1:fc:d9:85:8f:07:eb:
                    76:38:c9:09:59:2e:a5:8b:69:37:49:61:92:db:41:
                    4e:d0:cd:4d:21:7c:b3:f0:9a:5f:fe:90:45:e2:da:
                    74:d3:80:83:91:2d:6b:9b:84:e5:e1:5e:85:08:81:
                    22:92:f9:c5:e6:28:05:76:e5:cc:82:9e:55:ec:f1:
                    58:26:17:9e:52:93:0b:3f:6f:8f:a9:c3:8b:cb:a8:
                    42:92:2e:7d:5a:d0:55:94:5a:e7:2d:c0:1a:de:42:
                    8e:90:a7:85:c0:4e:67:72:e0:ad:55:21:1e:25:65:
                    e2:97:a6:d8:8c:5e:50:49:14:45:ae:56:23:bd:e1:
                    b1:9d:04:1e:49:00:aa:58:22:e8:73:c8:78:14:e6:
                    66:73:62:91:54:3a:62:05:d3:7b:1c:12:3a:1b:c1:
                    de:26:21:26:5e:1a:7f:ae:30:ca:f9:a0:de:d0:6a:
                    df:20:12:75:76:e1:ae:fa:32:df:cb:88:2a:ce:1b:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:5E:1A:12:61:34:4A:74:3A:1B:08:0C:6A:1F:04:55:88:0B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9268eeb9-f52f-340f-bf17-9711e5c8acc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2b:88:a6:78:0c:93:13:ab:31:f8:07:47:03:d6:0b:99:37:
         2d:02:33:f0:de:86:57:cb:cb:a6:28:19:31:a1:f8:99:36:51:
         fd:44:97:df:71:f0:37:7f:51:ce:6b:2e:b3:0e:df:97:da:fd:
         dd:f6:fd:a8:1d:52:22:0a:0b:58:54:de:f0:21:3f:2f:01:b5:
         aa:4f:38:7d:a7:cb:2c:94:4b:5d:04:96:3f:73:ee:6f:6f:67:
         21:6b:27:77:da:98:02:3f:be:2f:d8:0e:64:a2:64:75:9d:7f:
         e0:1e:7c:fc:4b:87:3a:52:a8:1e:51:bf:43:e6:c9:17:0f:ed:
         c4:47:02:6e:48:00:67:28:21:43:d5:21:b2:a3:61:5f:75:85:
         58:7f:21:60:c9:9f:38:23:76:f4:44:01:a2:05:0e:67:bf:2c:
         05:29:d6:b7:dc:5a:4c:5d:2d:a8:79:54:a8:b6:07:40:74:5a:
         2f:23:6f:e6:fa:e4:6c:30:b3:89:86:a6:0e:b5:6b:d6:d6:6f:
         dd:a1:50:9f:b0:75:ea:e1:a1:83:96:13:c3:4f:16:a7:8c:b9:
         8e:14:88:d6:15:7f:38:63:12:eb:f6:25:c6:91:6c:7b:2f:e5:
         39:84:68:e4:57:53:1b:b3:0b:8f:46:db:fe:5c:c2:c1:6e:8b:
         2e:11:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:35 2025 by rpki-client