Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96f652b2-5105-3275-96c4-81d1b06c0069.roa
File:                     96f652b2-5105-3275-96c4-81d1b06c0069.roa (raw, json)
Hash identifier:          xwN718HpOVRkppCBSQYbWvQTCO4ItJhaqwMdLOJL7lk=
Subject key identifier:   99:A7:0E:8E:D7:22:3C:5F:F0:98:BB:61:16:3B:69:B6:46:67:09:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB239CC5748A92E736C2A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96f652b2-5105-3275-96c4-81d1b06c0069.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396617
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:23:9c:c5:74:8a:92:e7:36:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6bea6ad1-00e6-484f-b540-a629b7b2b559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:62:61:65:d1:87:75:11:77:9a:de:48:c6:
                    9b:ac:58:c4:c2:50:5c:38:01:39:72:ba:d5:04:d3:
                    77:bd:98:b2:51:53:23:14:0c:a8:fb:67:c1:ce:f1:
                    9f:bb:ab:fb:36:72:01:06:6e:5b:69:b6:58:31:85:
                    45:4f:ab:35:63:26:e8:56:c7:9b:39:85:56:12:2e:
                    9b:42:bc:c6:23:b2:c6:d3:61:5c:30:d6:6d:f1:e9:
                    5f:7c:f9:a2:4f:84:3c:e7:51:eb:5e:a4:ad:e1:24:
                    86:19:f0:bc:ba:7a:58:73:2a:60:4c:af:bf:5b:1f:
                    bd:c3:69:8c:59:c7:27:93:10:52:22:55:ac:bd:3f:
                    cc:e3:42:b0:2f:dd:1b:e4:f7:d3:3b:a5:a7:98:70:
                    c7:e4:74:25:77:6a:a1:ee:a7:49:a8:98:a4:51:40:
                    12:bd:b3:99:04:e2:30:18:56:f5:1b:53:65:e9:71:
                    2a:58:d9:fc:c8:c3:86:eb:73:3a:74:4b:88:4b:9d:
                    f6:5a:93:ed:6a:0a:f7:c2:d4:4b:ef:8a:a9:7e:de:
                    36:c7:35:79:79:5d:ab:4b:4d:c9:fc:59:93:3d:2e:
                    c3:dd:63:98:bb:4f:dd:fb:26:e2:20:89:89:58:88:
                    0e:03:a5:b5:63:1d:c8:69:00:24:33:90:92:cd:9b:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A7:0E:8E:D7:22:3C:5F:F0:98:BB:61:16:3B:69:B6:46:67:09:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96f652b2-5105-3275-96c4-81d1b06c0069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:a3:c1:8b:4b:a5:40:37:03:e9:f6:b1:d8:6f:b4:54:31:
         38:12:a2:f6:df:6f:ec:90:af:e4:1c:c0:1f:ec:31:0a:91:f7:
         46:b0:1b:4c:25:43:c8:61:ac:3e:de:18:1b:d6:86:23:3e:2d:
         f9:db:ac:34:62:20:ef:f1:dc:2f:15:b5:ff:b5:f4:6c:ba:49:
         b3:a9:61:6c:ed:81:1f:7f:91:4d:10:cc:59:09:c2:35:b6:14:
         a6:91:b7:4b:7a:41:63:e5:c8:33:ac:8d:fb:33:39:7a:21:75:
         8a:18:8f:5e:ea:9c:10:36:a9:7d:09:f6:42:3b:f5:d6:68:b9:
         80:dd:12:0f:28:85:4c:0b:4f:81:f8:48:b5:0c:d8:29:d2:f0:
         30:2e:67:ea:91:ba:32:4a:91:85:88:62:ec:d2:18:2b:aa:8a:
         f4:e1:5b:88:a0:53:00:17:b7:65:88:5b:99:32:64:ce:3b:2f:
         ab:8b:a9:e0:10:1f:63:94:6d:dc:37:fa:3e:5d:c0:c5:02:ca:
         85:0e:e6:9c:d2:9a:a2:56:0a:49:06:c0:0a:65:d7:4d:7a:c6:
         df:23:60:18:8a:0f:6e:68:c9:73:92:43:17:a5:98:fd:6a:c3:
         3f:c3:24:47:fe:a4:34:57:1b:8a:e0:85:68:52:db:17:17:0c:
         fc:17:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:08 2025 by rpki-client