Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d88078-cf62-3ed7-b11f-5a8529ed6a66.roa
File:                     b9d88078-cf62-3ed7-b11f-5a8529ed6a66.roa (raw, json)
Hash identifier:          iQo9O0kVhOIx4JrGJvZEYNQsQ8UEeh6SPWNI4FRSqxQ=
Subject key identifier:   9C:98:AA:17:25:BA:E7:6B:5D:FB:8C:BB:44:EF:36:9E:04:E9:BA:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E8666333114425913B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d88078-cf62-3ed7-b11f-5a8529ed6a66.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396549
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e8:66:63:33:11:44:25:91:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=581de7c8-0bc7-470e-92cf-45ef6d7c9565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:bc:a7:22:97:50:90:4d:6c:57:de:11:a3:
                    1f:11:29:f6:30:c5:59:08:39:11:fc:39:ac:53:c0:
                    ee:6c:fa:a3:57:71:70:40:8f:22:9a:ea:d9:23:45:
                    94:f6:f9:79:ed:17:c7:43:d3:54:4a:5c:9f:bc:d8:
                    db:66:c9:70:b1:db:31:c3:97:94:da:dc:af:12:0f:
                    c4:d0:83:dd:33:fb:22:e9:a3:f9:da:08:78:c9:b7:
                    9b:3c:a8:c2:50:60:9a:8b:17:f1:c9:e0:79:5c:b3:
                    7f:d3:c9:38:55:35:80:d1:0c:41:e7:3c:f7:84:cc:
                    ca:29:ee:d3:93:8f:8c:16:0a:24:de:3f:06:68:d3:
                    02:4a:bd:ae:25:c6:0d:70:fe:e0:2c:89:76:0d:1b:
                    95:15:42:26:07:86:16:0f:f0:4b:68:c6:eb:af:ff:
                    f0:d8:e1:a4:31:0f:da:91:ef:4c:9e:a8:b4:eb:26:
                    e2:af:90:4e:49:0b:48:9a:3f:7c:b2:a7:a1:a5:22:
                    42:41:ad:9f:86:0b:cc:d6:61:a4:89:cd:6a:30:b8:
                    94:d5:29:21:4d:72:fe:55:94:71:ef:b7:44:7f:bb:
                    13:fd:d3:2b:86:ca:54:1e:86:15:50:04:f5:37:1d:
                    ef:4e:28:59:2a:f4:87:ad:f0:19:1a:12:8e:b7:f5:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:98:AA:17:25:BA:E7:6B:5D:FB:8C:BB:44:EF:36:9E:04:E9:BA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d88078-cf62-3ed7-b11f-5a8529ed6a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:32:23:82:f3:8d:05:7b:ad:85:e5:b5:26:fb:e4:64:06:f7:
         4d:26:8d:46:4f:20:31:c9:60:e4:3e:d2:91:b1:e7:60:ac:28:
         0f:1b:a1:39:a7:66:48:6a:37:d8:eb:a0:8b:c6:1e:9a:f3:6b:
         6d:c3:27:bf:5a:39:99:20:2b:d8:46:73:1c:a2:be:9b:d4:68:
         dc:c8:3e:5e:68:72:f1:b0:b3:8d:a6:95:8c:e3:ae:35:c8:2a:
         17:25:06:19:7b:b4:76:4b:3a:23:dd:83:be:42:b7:fd:85:9d:
         ee:ac:44:e3:bc:10:b6:47:43:20:47:81:6c:98:26:1f:99:1f:
         95:87:41:77:c4:e7:76:70:0c:bd:87:b1:6c:3b:aa:7e:28:87:
         4a:92:bd:b0:10:c9:20:ab:77:49:c9:19:2b:ff:10:8b:f0:f1:
         91:20:f8:05:7f:44:46:90:e7:b0:0e:2d:74:f3:64:b2:59:0b:
         72:8e:87:73:dc:78:fa:5c:5c:68:b8:70:88:64:2f:f7:92:1a:
         b6:34:f4:19:54:7a:df:43:cf:73:72:f3:8a:69:37:3b:05:2b:
         b1:1e:5c:cc:72:b3:03:31:e3:20:e1:b7:45:96:32:f2:64:f7:
         19:a7:cf:a8:06:76:ef:4f:5e:bc:ed:87:ac:83:a5:d4:03:99:
         aa:68:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:44 2025 by rpki-client