Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b51eb5f0-a9e2-3a2c-9b2c-211455b68443.roa
File:                     b51eb5f0-a9e2-3a2c-9b2c-211455b68443.roa (raw, json)
Hash identifier:          fNEHkEUhS6FKNEAL6u9Vt3z3nt7qFBLT6xS6T+aRQ/A=
Subject key identifier:   4E:71:35:2D:D2:B4:0D:DA:64:96:8F:5F:1A:7C:C8:B7:82:42:F2:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB091E8FD7D85DB6690C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b51eb5f0-a9e2-3a2c-9b2c-211455b68443.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36625
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:09:1e:8f:d7:d8:5d:b6:69:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=001841c4-d7fa-448f-bda6-62a37bbeb807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:7e:9b:2c:b2:98:ca:80:e7:a6:fd:46:07:
                    b3:60:f7:a2:fb:28:1e:e3:43:b3:c6:1c:48:90:0e:
                    13:97:11:d2:d0:c3:7c:0a:5a:0d:43:5e:f4:f4:34:
                    3f:6d:db:9f:09:ba:e2:0f:ff:88:bc:4a:92:95:33:
                    71:cd:cc:8a:4b:f7:46:ff:88:19:d5:11:62:24:eb:
                    bd:1a:71:05:32:75:75:45:19:88:8a:92:24:d0:43:
                    93:39:fb:c1:45:0e:cb:d4:0a:bc:e7:40:b6:1e:77:
                    d5:49:08:f7:64:ad:b0:cf:55:af:26:a7:23:ae:2d:
                    7d:4e:cd:b3:cf:a8:35:2c:b5:ae:3f:c7:5f:ed:4f:
                    70:5f:37:f5:b0:0a:ce:c9:36:20:5b:a0:61:9c:77:
                    73:36:f8:8a:cf:e8:50:db:68:57:c6:20:f7:87:29:
                    14:19:95:c3:6d:b8:a5:cf:27:9f:a4:ac:04:b3:1d:
                    32:08:e0:66:ee:5a:cc:a7:1d:0c:ff:d4:9f:76:d8:
                    01:fb:c7:36:34:5b:91:b7:89:7f:dd:cb:72:22:6b:
                    90:1f:6d:12:5d:66:e7:91:b2:a5:49:10:ab:91:0b:
                    ce:d9:48:0b:7f:de:60:15:c2:b9:b5:c3:ac:a4:5e:
                    2f:42:0d:e1:c6:e6:a7:94:11:28:22:5d:b0:cd:4a:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:35:2D:D2:B4:0D:DA:64:96:8F:5F:1A:7C:C8:B7:82:42:F2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b51eb5f0-a9e2-3a2c-9b2c-211455b68443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:18:42:77:6e:48:51:87:65:4f:e9:72:c9:3a:eb:3f:f3:18:
         fe:3e:0d:cb:d8:79:cd:dd:39:0f:2c:6f:29:a2:d2:b9:b8:f1:
         a6:96:c5:f1:34:e2:87:f4:9e:fa:60:b6:7e:9f:eb:fa:9a:d9:
         67:bf:2b:08:45:3e:08:d5:6d:fd:9c:c7:0e:b3:d9:cc:98:bc:
         cc:8c:ec:08:c6:d4:79:e3:aa:f6:0a:80:e1:ae:44:81:66:87:
         0f:57:30:ba:62:ca:8b:cb:e9:c4:83:1b:bb:f6:83:4c:56:7d:
         92:11:17:64:db:78:a3:bb:13:ae:a5:58:a3:70:21:d6:7c:64:
         e1:80:8c:c7:22:05:4f:13:2b:e9:6f:3d:0a:ba:50:79:e9:ff:
         22:1c:2e:81:bb:6d:dd:fa:a2:a8:82:d7:36:ff:bf:db:99:31:
         55:82:93:b2:ed:17:99:b2:10:08:72:92:c1:01:a5:a0:90:31:
         bd:46:68:d9:59:ad:d5:fa:74:d7:cc:b6:8c:15:40:2b:88:7e:
         ca:07:c3:9d:34:2d:c2:f3:ae:3e:1e:c0:4c:86:d5:96:3c:7c:
         8d:a4:e4:b5:1e:14:7a:58:b7:ef:e0:48:2d:ef:1c:bd:bc:55:
         4e:92:d8:d6:d9:9f:ee:58:56:a6:f4:e6:68:31:35:5e:12:f3:
         ed:a6:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:11 2025 by rpki-client