Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e057ffc-7c95-3af1-998f-bde5c2054d40.roa
File:                     9e057ffc-7c95-3af1-998f-bde5c2054d40.roa (raw, json)
Hash identifier:          IAFrOWPMHmxcxtRwAWxXGJM3pf20buYaCqN8igr6Dgk=
Subject key identifier:   A7:56:D7:C1:4A:E1:9F:E0:C7:26:89:2A:92:36:DB:AA:1A:E9:C1:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F59243869F57BBF3E14560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e057ffc-7c95-3af1-998f-bde5c2054d40.roa
Signing time:             Thu 23 Jan 2025 13:38:27 +0000
ROA not before:           Thu 23 Jan 2025 13:38:27 +0000
ROA not after:            Wed 23 Apr 2025 12:38:27 +0000
asID:                     396582
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:92:43:86:9f:57:bb:f3:e1:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:27 2025 GMT
            Not After : Apr 23 12:38:27 2025 GMT
        Subject: CN=9ac80685-1979-4903-b04e-a41104eaeda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:96:b8:13:97:8b:89:74:7c:15:5f:15:af:
                    1b:04:d8:3d:89:79:71:38:8b:aa:df:c4:da:40:60:
                    7a:79:0e:d5:40:0a:a1:d8:25:3a:58:61:da:52:6d:
                    33:e3:23:3c:26:8d:e5:d5:db:44:0a:f9:76:fd:26:
                    6c:c8:c1:20:9a:21:61:b0:99:f7:0b:c6:a8:b6:c0:
                    40:6b:17:05:dd:3d:3f:a4:47:e6:04:6e:a4:6d:2b:
                    8e:57:43:fe:a0:5e:a1:cd:18:9b:cf:eb:14:ce:d8:
                    25:05:49:30:71:d6:f9:5f:04:b3:83:32:c9:f8:ac:
                    d1:51:2a:b0:3e:f1:1e:19:ed:3f:1e:72:15:a2:ba:
                    4a:f5:41:b1:20:32:71:d5:d8:59:ad:8a:f9:f5:91:
                    1a:56:0e:d1:96:ba:8c:86:6a:7b:3f:f2:70:50:39:
                    0f:b6:e9:93:b6:7d:74:88:cb:0b:3a:c1:0d:3a:56:
                    f3:5e:38:16:08:e2:b1:65:14:6f:f7:ab:da:fc:61:
                    9d:2d:95:22:cf:39:65:fe:b0:74:92:17:a8:78:f9:
                    14:3d:ad:4a:3b:94:79:08:3a:16:9d:56:db:19:91:
                    ad:6f:86:af:6f:a9:48:2d:98:54:8e:a5:73:83:10:
                    3d:c0:af:5e:1c:ce:5b:fb:ff:bf:49:cf:76:dc:07:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:D7:C1:4A:E1:9F:E0:C7:26:89:2A:92:36:DB:AA:1A:E9:C1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e057ffc-7c95-3af1-998f-bde5c2054d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:de:5e:7f:a1:05:01:62:bf:11:7c:52:c7:78:2f:74:90:
         9f:8e:fb:78:b7:b1:2a:df:15:b9:ae:12:24:46:82:1b:66:9b:
         9c:71:1c:8a:dd:55:30:a1:bf:cb:30:f9:46:46:48:d2:65:7c:
         7f:8b:67:d9:50:27:ee:c9:af:3e:79:cf:a8:75:cd:9b:81:51:
         2b:39:5f:13:ad:30:a1:93:85:a0:24:de:95:09:75:07:a6:da:
         b1:e9:77:67:b5:ef:1a:80:4b:97:ca:69:01:7e:8d:7d:66:9a:
         99:78:53:c1:2e:a7:9c:68:5e:98:31:a7:96:dc:f6:62:e4:4f:
         05:e1:13:e6:e3:94:b3:1d:48:5c:d5:cc:50:8e:09:ef:f9:e6:
         49:41:02:e3:92:e3:20:63:2e:d5:65:78:72:79:47:a8:99:52:
         94:0c:fa:41:f8:e8:1f:8f:ed:32:b0:9a:16:0c:c0:6a:90:f4:
         27:b0:64:51:f5:b1:1b:30:46:14:f5:0e:4a:85:9f:e0:bf:92:
         1e:f7:b5:98:15:1d:ab:4a:fe:49:e3:a2:1f:10:5f:e1:80:3a:
         58:b4:8f:46:00:27:81:b5:cc:49:e1:bb:17:62:f7:37:fd:6c:
         ed:71:ce:b0:70:ce:da:fe:88:f7:b7:51:87:fd:20:37:d7:bc:
         7a:fa:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:02 2025 by rpki-client