Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9da4a359-1671-31e4-947a-48857d5767ae.roa
File:                     9da4a359-1671-31e4-947a-48857d5767ae.roa (raw, json)
Hash identifier:          NP8rUcjnBj1URjx2i2dzv/paYg6tqa+qZH2wRYa6LUo=
Subject key identifier:   9C:65:AF:36:46:DD:1C:04:87:48:B2:97:2E:AF:5C:23:AD:6F:A4:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB035F4D519448B2C87F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9da4a359-1671-31e4-947a-48857d5767ae.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396608
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:03:5f:4d:51:94:48:b2:c8:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5f2ad1aa-5fcc-4fc4-94d7-a0cbf963a367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:44:3a:5e:f1:19:08:cc:49:62:1a:73:92:
                    cd:fb:e4:99:61:ff:51:f8:5e:ab:e7:ce:33:13:31:
                    7b:2e:0a:21:ca:0e:15:1d:83:c2:dc:19:b9:09:cd:
                    90:8e:59:17:ea:4e:b2:71:8c:41:61:d9:57:a9:00:
                    0e:7d:93:9c:c3:25:7a:f4:33:a9:b0:c1:b3:4c:20:
                    23:54:ab:51:15:7b:a2:9b:fe:6e:c7:a7:44:4b:e2:
                    f2:a6:cb:db:af:31:0d:5a:83:2e:55:7a:c0:f1:4e:
                    4a:c7:33:29:44:db:ef:b9:7b:08:71:8b:fe:ec:b9:
                    1b:11:4b:06:4a:01:62:ec:5f:5f:4e:f0:e0:99:e4:
                    31:bf:9a:4d:72:da:84:d6:4e:5b:9b:14:4d:27:ea:
                    6d:57:0b:9d:35:63:a8:f9:5b:a4:21:f0:0a:54:9d:
                    02:57:0f:5a:30:61:b2:95:5c:b1:23:1f:bd:3f:da:
                    00:e7:cc:e8:89:a1:1f:1e:a5:17:a2:47:c0:69:5d:
                    79:e8:0d:ce:1c:7d:97:55:ce:dc:2d:73:63:c8:13:
                    00:e6:4b:2d:d2:da:d9:a5:27:74:84:a3:a5:5b:76:
                    1f:e7:ee:e9:79:f5:73:8e:03:a5:e5:d1:5a:a3:bc:
                    00:e1:03:e9:1e:bc:66:8d:66:e7:3a:10:a7:e2:a7:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:65:AF:36:46:DD:1C:04:87:48:B2:97:2E:AF:5C:23:AD:6F:A4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9da4a359-1671-31e4-947a-48857d5767ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:a9:c8:b0:22:47:29:c6:94:c7:2d:d5:9a:ca:8e:af:34:
         83:8b:72:9f:6d:74:8d:f9:10:50:38:f3:d3:3d:22:d1:1b:b9:
         05:e4:66:ab:3f:ee:36:1d:91:2e:97:9f:d9:02:e9:0e:80:3c:
         c0:05:3d:01:d5:1d:10:b3:9c:9e:1a:44:ff:18:b5:f7:96:ea:
         ad:3f:1a:0b:31:40:87:05:a0:08:08:47:25:54:36:65:40:7a:
         a6:3b:e9:48:8f:c2:fd:c2:ff:24:19:02:18:50:a9:27:44:d6:
         1a:09:6d:93:71:e8:38:cb:b0:09:35:26:7d:72:f1:4e:5a:4a:
         2e:bb:9b:2c:e1:c7:cb:aa:19:72:93:d0:42:b5:99:e3:90:04:
         9b:bb:05:c0:56:6f:34:67:00:59:9d:a8:ab:02:fc:74:6f:00:
         58:de:ed:19:9b:ee:b5:bd:b1:1e:58:fe:22:bb:42:fa:66:8d:
         80:25:f7:52:5d:13:41:ea:e7:c1:17:38:1f:de:e0:24:e0:62:
         e5:21:4e:c5:d4:2c:87:8f:d8:b5:21:93:22:e5:18:75:10:2d:
         a4:3a:fe:de:03:82:5f:77:74:61:d2:d4:33:b5:f3:45:ba:90:
         ae:2a:6d:2d:6d:d7:43:8b:b9:05:60:88:65:50:c3:ab:31:af:
         ac:96:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:44 2025 by rpki-client