Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af21fb00-1eec-3555-b201-3c619f3291b9.roa
File:                     af21fb00-1eec-3555-b201-3c619f3291b9.roa (raw, json)
Hash identifier:          xI6ugPDy/mif00MqNc8KzM7JnqZkWprXnvDKktDztPg=
Subject key identifier:   29:67:12:DB:3A:FC:94:1A:03:B2:69:4F:D2:AE:DB:B4:46:79:B2:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF38BB524B1B8AC52E300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af21fb00-1eec-3555-b201-3c619f3291b9.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396613
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f3:8b:b5:24:b1:b8:ac:52:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=1d08f8ae-e7dc-4315-a79d-0aa8f96be078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:fe:d5:b7:63:27:75:eb:48:bc:ef:59:d3:
                    2b:94:73:71:eb:d2:a5:88:76:1e:0b:44:4a:1e:2b:
                    17:2c:59:e0:20:57:f5:23:9a:1c:2b:69:ee:d5:04:
                    6a:44:7d:99:97:6c:3e:e8:4b:cd:96:e5:2f:4c:06:
                    91:97:a2:6a:5f:f7:9c:f2:2c:19:78:52:a3:09:28:
                    d3:88:52:97:20:79:ee:d2:02:b1:e0:22:af:77:b2:
                    69:2d:15:8a:b3:96:a0:e1:23:73:17:54:53:25:30:
                    a7:c4:6d:90:e6:34:04:4f:21:d8:26:ed:25:ba:f6:
                    cd:eb:5c:01:3c:5c:bd:c2:44:d1:0e:54:5b:e1:82:
                    f5:1a:32:fc:a8:16:8f:ab:a8:4b:10:34:5c:b7:0f:
                    5e:6d:6f:30:c2:8e:0c:31:a2:bd:4d:b9:ab:3a:e3:
                    a9:6b:a3:7f:68:e5:58:d5:da:77:3f:ec:98:a2:a6:
                    92:41:a9:7d:f4:2d:77:69:86:47:5e:62:64:83:6d:
                    2a:3e:20:25:c9:3d:1c:ad:aa:9a:77:93:c2:4e:d9:
                    4a:ca:40:f9:a9:ae:b5:9b:38:12:2f:8a:a4:d7:fa:
                    80:f9:b5:69:e2:82:c7:5d:f4:71:89:51:96:95:87:
                    7d:c0:f0:ff:1b:6b:06:16:a0:a8:ee:df:78:3d:3d:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:12:DB:3A:FC:94:1A:03:B2:69:4F:D2:AE:DB:B4:46:79:B2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af21fb00-1eec-3555-b201-3c619f3291b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:39:06:1b:98:30:10:0a:14:0c:b3:de:39:5b:b3:2b:42:3d:
         61:df:a8:3c:11:79:32:a5:ee:e7:a7:46:4d:5a:9b:31:f5:cd:
         89:40:ad:d0:a2:e8:36:62:ad:40:da:3c:e8:c2:4c:4f:d0:21:
         52:c1:07:c4:98:c5:3b:fd:d0:6e:07:ba:93:35:fb:8a:bd:eb:
         25:a1:4c:e9:3b:e0:ff:bf:a2:bc:59:a9:27:0b:05:05:ff:1f:
         53:51:a5:b4:9a:fa:01:79:f3:35:b5:b0:27:dc:2e:bb:25:14:
         a4:03:82:51:51:e9:a2:84:9f:59:a2:82:d3:35:40:18:59:77:
         f8:00:1c:ec:b5:85:a2:8e:ee:a7:88:5a:e9:1a:1e:25:8a:0a:
         f9:30:9c:f5:11:c5:03:5e:2d:d3:d6:86:d0:33:87:cb:3c:bf:
         60:de:e1:4c:06:3c:9e:9d:9d:60:21:66:9a:71:56:79:5a:c5:
         7f:49:32:c8:74:15:c8:24:f2:e2:6e:d4:2b:55:23:7a:f3:0f:
         73:d3:b6:c3:0e:7d:4a:25:bc:0b:36:de:2b:9b:9d:20:6b:6e:
         4e:18:b2:41:5d:be:c5:db:fd:35:3f:3e:1e:47:4d:35:a2:5e:
         39:c5:5f:b3:6d:91:b1:a1:89:36:74:9c:f2:83:e6:bc:96:c3:
         fb:f3:9f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:31 2025 by rpki-client