Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acdfa2e5-2c61-30c2-aa6b-ddbfde4d3fd2.roa
File:                     acdfa2e5-2c61-30c2-aa6b-ddbfde4d3fd2.roa (raw, json)
Hash identifier:          zruq097Rlyk/OIPjrj9j32x7lpRWfoOWINP4D3OwnBM=
Subject key identifier:   C8:9C:16:4B:93:98:CD:75:D0:02:BE:B6:7C:8C:F8:CC:54:D6:C9:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C091C084B0020029D838E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acdfa2e5-2c61-30c2-aa6b-ddbfde4d3fd2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396593
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:1c:08:4b:00:20:02:9d:83:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=20a10a20-ad0b-4f96-bd15-5b2804ea8dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:82:65:a7:1f:24:07:fb:2d:65:45:35:c7:
                    40:cf:52:6f:58:4c:64:d5:54:95:5a:66:5a:54:fe:
                    45:82:b8:ba:5a:0d:1a:a2:10:6b:d9:c4:74:ae:18:
                    c5:5b:e0:ce:4f:d9:a1:b7:e7:52:b5:17:0a:32:36:
                    8e:37:bc:a6:4a:90:37:17:23:7e:e1:53:10:e3:75:
                    1d:49:c5:c6:91:8f:d5:1c:f4:95:2c:c4:db:9e:12:
                    7f:c1:4c:5e:3a:8d:9d:f5:38:5d:ad:58:52:14:c3:
                    71:1f:4c:80:61:b1:30:5c:ff:46:e3:96:2f:4e:fe:
                    35:d2:bf:30:53:61:33:fc:1b:71:2d:f9:e7:dd:9c:
                    ca:98:45:85:6d:5f:86:5a:a5:4d:c5:ef:b4:55:0a:
                    1d:6c:b0:46:2e:3f:3b:f3:c1:84:a0:b1:98:ea:74:
                    26:54:8b:d3:25:64:d7:b3:f7:15:43:a4:a8:0f:a5:
                    d4:dc:c0:2d:4f:2d:0a:fe:43:45:50:6c:83:b3:ef:
                    a0:8d:62:d8:60:ee:12:2e:02:9e:dc:98:ab:af:9f:
                    67:01:6f:88:7a:6e:95:62:a5:36:17:c6:2a:18:90:
                    16:4f:f1:ed:c4:5b:a9:50:7a:90:47:88:38:53:c8:
                    76:80:b7:25:4b:09:a8:e0:c1:f0:52:4c:f0:95:ef:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:16:4B:93:98:CD:75:D0:02:BE:B6:7C:8C:F8:CC:54:D6:C9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acdfa2e5-2c61-30c2-aa6b-ddbfde4d3fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:a5:65:d3:bd:8d:66:98:aa:b0:d6:44:e4:5a:7d:85:75:
         62:ce:9b:b3:3d:7a:84:6b:36:bf:de:fe:cd:50:32:ed:6d:dc:
         e1:e4:01:a2:12:e2:bd:20:1e:cd:ae:32:40:fa:3f:9a:9a:4c:
         fa:44:2d:0e:ba:8a:68:b4:7c:65:bc:9a:d6:c3:5a:7b:bb:5a:
         b3:6b:a0:f6:16:a7:9b:05:b2:49:be:5c:04:e2:4d:85:f2:1b:
         8e:7a:a5:e0:a3:1a:29:73:79:2f:64:49:43:0b:fe:67:e5:25:
         be:71:01:1c:85:3c:97:15:57:da:e8:fb:46:e5:d5:a0:4d:1e:
         79:ad:39:ae:0e:07:ce:c6:6e:f4:a4:fb:2e:6a:8f:9c:09:f6:
         44:ec:1a:3d:23:25:c6:4d:9f:d4:66:fc:41:7b:81:2a:9a:df:
         40:c9:bf:fd:a6:3d:d4:75:88:3b:f4:9c:d5:2e:da:45:d5:50:
         3c:db:91:0b:e3:3d:e5:46:60:51:8b:c4:7f:77:96:81:5a:41:
         ad:5a:19:db:da:48:da:d0:f5:35:62:b4:aa:86:75:66:81:43:
         a7:d3:ab:1d:50:7c:2f:fa:b4:07:dc:ed:88:cd:4d:c4:f6:23:
         51:e2:a3:d7:1c:fb:15:a4:49:89:34:d1:5a:4a:4c:1b:3f:5c:
         ff:97:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:10:00 2025 by rpki-client