Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96097541-f64c-3c53-9658-6d0ff8ed870a.roa
File:                     96097541-f64c-3c53-9658-6d0ff8ed870a.roa (raw, json)
Hash identifier:          BWhubogEb/2eBJQdNdz4Gm6nrxoNZYxV1TosFpd8f/U=
Subject key identifier:   B3:8D:92:27:4A:6F:3E:39:7C:35:7E:B5:02:B5:A0:FE:C4:FF:8F:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E151061F38115C39FC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96097541-f64c-3c53-9658-6d0ff8ed870a.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396580
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e1:51:06:1f:38:11:5c:39:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=8fae2515-3c14-4118-bf53-e88fddd6ef7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:c4:ca:69:18:1f:51:96:0a:f0:bd:95:86:
                    16:60:ba:07:3e:fb:68:6f:75:d3:e6:4b:7a:ce:61:
                    16:2b:d4:dc:7a:2d:22:65:d1:d5:da:5d:17:6e:a2:
                    7d:ec:53:f7:03:44:5b:44:bc:b1:3c:d0:87:d3:ca:
                    34:f4:2f:fb:33:c8:dd:7c:1e:02:93:68:82:5b:21:
                    6d:f8:6d:46:5e:63:9d:51:d8:b9:8a:a8:11:9f:de:
                    d4:b3:ba:97:21:ce:b1:a4:ed:4b:2f:0b:75:19:7b:
                    65:f7:f4:cb:3f:51:23:a6:fe:75:53:8e:d8:8c:1f:
                    88:ca:d2:9c:03:7d:a7:9b:c9:59:66:19:0b:34:9c:
                    c6:fe:a4:86:84:24:1c:79:ac:ee:1f:88:bb:04:e1:
                    d1:b9:15:71:68:e4:40:a5:f5:12:ba:db:ec:d5:f4:
                    0f:77:c0:cc:8b:80:f3:29:88:d0:2b:70:d6:9a:dd:
                    05:e7:5c:62:60:3a:8a:8e:f9:02:3b:99:d0:53:8a:
                    bd:a5:23:5f:b7:b9:d7:23:d7:38:fb:6d:91:38:26:
                    14:23:9b:fe:a0:d2:43:99:dc:60:19:cc:d3:47:26:
                    d7:2c:3c:58:3e:b0:30:24:bd:3d:f3:fb:3a:9d:4a:
                    48:3a:05:a6:df:b2:59:56:d5:c7:d5:64:93:88:3e:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8D:92:27:4A:6F:3E:39:7C:35:7E:B5:02:B5:A0:FE:C4:FF:8F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96097541-f64c-3c53-9658-6d0ff8ed870a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a1:92:87:cf:49:25:90:c6:fa:c9:02:f7:b1:71:fe:8d:b5:
         62:0b:db:4d:a7:f0:13:2b:5f:b2:cf:b3:b1:a8:44:49:2f:f1:
         90:b1:84:93:37:9a:8a:d2:c3:3e:f0:52:69:0f:fc:15:e1:35:
         18:e9:0e:80:67:a3:9e:7d:f8:8a:91:78:d6:1c:25:99:45:c2:
         35:0b:d4:55:25:8f:7f:5c:61:bc:ef:c6:73:bc:df:54:bc:e7:
         1f:8b:9d:a9:7e:00:31:ca:8a:aa:67:2f:93:69:15:a2:63:47:
         dc:d3:d1:fa:e5:ab:77:b1:3e:33:9d:64:44:14:27:ab:da:4a:
         53:db:6c:d6:73:79:29:0a:62:6a:76:45:53:8e:df:29:5d:d4:
         2d:83:e5:8c:03:8f:d2:8c:87:7a:95:18:dd:85:f8:42:18:38:
         ee:e0:fd:68:e5:cf:10:35:91:33:da:1a:32:bc:a3:60:ad:d7:
         f1:f3:6a:40:a1:a9:60:22:d7:fc:24:36:d7:9d:f3:09:a7:68:
         f6:8f:05:76:30:e2:7c:a2:15:98:de:61:1c:6e:fc:24:36:d8:
         ee:9d:68:04:b1:f0:d4:c2:ba:f7:fc:a8:6b:e5:50:23:ec:2b:
         37:9b:4c:35:88:c8:80:dd:f8:de:fd:2c:9b:dd:67:68:31:95:
         50:1b:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:27 2025 by rpki-client