Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04c6053-1eaa-3c35-963c-83bb3dd86390.roa
File:                     a04c6053-1eaa-3c35-963c-83bb3dd86390.roa (raw, json)
Hash identifier:          IeNh70HGeIneoVMUinay7RjtA/H8FnyPEBZLk8rsz/I=
Subject key identifier:   F7:30:81:68:97:BB:6F:40:35:9C:39:97:C4:57:CA:0D:87:EB:09:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFE08198827187D35C060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04c6053-1eaa-3c35-963c-83bb3dd86390.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396562
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fe:08:19:88:27:18:7d:35:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bbd45c67-9b41-4f69-81c0-131f43da243f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:e2:73:de:9d:2b:26:c8:b4:9a:cd:f7:09:
                    5c:30:c2:a6:ba:e1:11:65:38:8d:18:fe:d6:c6:cf:
                    2d:04:ff:26:63:28:ad:22:cf:c3:78:b5:e5:12:44:
                    49:92:3c:2e:c8:8d:11:14:04:12:2b:b6:06:e9:94:
                    ac:75:7f:10:28:7f:21:84:53:79:76:63:bc:29:fe:
                    75:6f:de:f7:9b:46:1f:cc:9c:3a:75:88:99:74:4b:
                    ce:01:33:20:72:52:42:80:53:7a:e9:fa:66:48:da:
                    06:61:12:87:62:33:2b:66:1a:ef:a6:cb:0e:8d:79:
                    13:35:e6:13:0c:24:4c:bf:77:7d:5f:f7:6b:07:e4:
                    58:99:35:45:32:a7:ad:08:f8:47:83:40:b3:22:1a:
                    49:70:22:b8:12:04:28:6f:60:86:14:c9:9b:f6:6b:
                    aa:a2:32:b7:39:63:47:ba:55:c6:af:5d:b8:4d:11:
                    83:75:4f:94:a7:28:71:60:f0:2f:b4:01:48:d0:5e:
                    e2:df:fe:40:be:5e:64:c5:ba:1e:3d:d5:37:62:33:
                    cb:a1:8b:ab:ed:08:ce:b6:33:69:a6:b3:10:3d:2f:
                    c5:4e:4e:23:1f:bd:8f:1d:fb:ba:bd:98:2c:d5:0b:
                    8d:d1:de:37:cc:9c:3f:0f:91:82:ef:2c:86:38:6d:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:30:81:68:97:BB:6F:40:35:9C:39:97:C4:57:CA:0D:87:EB:09:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04c6053-1eaa-3c35-963c-83bb3dd86390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:45:ad:ea:e4:ca:a8:8d:11:2c:2f:ec:bf:cd:da:5f:66:9e:
         e3:d7:cb:78:ce:57:b6:8e:ba:ad:e5:be:5c:c0:ff:81:c4:36:
         3a:4f:ec:3b:98:16:f0:df:77:ed:2f:60:90:30:82:9e:a3:21:
         a2:aa:d6:e7:30:6a:25:8d:7a:77:d2:91:81:7c:f6:72:16:38:
         6e:5d:4e:a2:16:b2:ee:43:3d:eb:2c:41:b6:aa:e7:48:11:c2:
         b1:7f:1c:ec:0c:9c:1f:3d:6a:d9:6a:29:42:8c:54:37:76:00:
         c0:a7:a1:62:13:a8:33:44:24:60:e3:c2:cf:19:bb:4a:ed:ef:
         b0:b2:48:29:43:b6:37:c7:cc:04:2a:ae:9a:12:59:bb:80:85:
         c3:db:91:ba:d1:e0:e9:4f:fe:d9:8f:11:c6:39:e0:8f:b2:48:
         12:32:97:a1:4e:bb:ef:82:11:f5:d0:db:f8:fd:93:10:13:9a:
         67:56:d7:76:92:7a:03:9b:37:58:a5:dd:2b:09:a3:6c:15:a1:
         4a:6b:9e:e2:09:ea:2c:a0:75:d6:db:45:7e:57:03:38:c2:67:
         f2:d4:a1:4a:38:76:0c:7b:19:66:ad:87:ee:ec:4b:e4:32:f7:
         5c:7d:16:b0:83:25:58:42:07:2e:c9:f6:c8:ce:8b:1c:92:66:
         96:c7:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:39:57 2025 by rpki-client