Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa
File:                     ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa (raw, json)
Hash identifier:          HmzBRLYFDYliGW7dtqvBlh5oO/a5S8igKr+MFHIAa6g=
Subject key identifier:   CD:B2:D8:AE:FA:BD:5F:32:47:28:AD:44:5A:2D:CF:93:3C:B3:AC:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB02ACEDA16BB030D16020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396577
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:02:ac:ed:a1:6b:b0:30:d1:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e29d2305-8cc9-47eb-8a04-e35c015a48dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:b5:17:36:be:35:c1:a8:c6:04:e0:65:fe:9d:
                    01:b3:5e:a1:03:d9:ee:a1:d3:79:95:21:22:58:3e:
                    72:79:f4:37:61:f4:dd:ac:4c:d4:83:04:49:cd:81:
                    2b:c8:b5:61:a9:7c:e4:c4:f0:92:aa:e9:b7:3a:78:
                    58:5c:bb:d8:a6:69:19:aa:56:75:0d:99:d5:64:64:
                    a6:6b:78:a6:b8:8a:32:05:db:26:fe:9c:f5:7f:bc:
                    20:b3:36:ec:e4:7e:e3:fd:8b:c1:62:e3:ad:e8:47:
                    c6:00:aa:7e:27:6e:d4:31:44:dc:3f:84:07:e6:b2:
                    1d:85:84:91:b3:f9:72:a7:5c:e5:0f:5b:f5:3e:b4:
                    89:93:0f:6d:ce:fe:ce:a9:a2:fb:4a:3f:3d:fe:cd:
                    36:58:d6:60:d3:2c:c9:4b:e5:db:4d:8d:6c:cc:a4:
                    8c:1e:8c:ce:29:88:34:0d:60:d4:61:49:9a:f3:64:
                    94:2c:8c:a7:22:cd:fc:24:d3:02:26:2a:b6:99:f8:
                    07:72:e5:0a:29:31:f7:21:a6:4e:01:a9:dd:d7:a7:
                    6d:f5:79:75:a2:2f:97:76:b7:3b:c0:85:24:b7:61:
                    1f:b5:36:60:4e:4c:96:c8:49:11:e5:58:ac:eb:67:
                    3a:67:b0:30:8e:3c:a2:eb:12:90:40:7b:5c:55:5b:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:D8:AE:FA:BD:5F:32:47:28:AD:44:5A:2D:CF:93:3C:B3:AC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba24e507-2f39-3e3f-9b6b-4c719e34e518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:54:4a:9b:5f:3e:6e:62:be:d9:34:e8:c0:4d:d6:6a:9c:da:
         48:21:45:8a:82:28:35:db:d5:5b:9d:28:e1:f9:51:47:fe:b8:
         3d:23:b7:e6:36:62:06:00:93:70:de:ea:4d:28:6b:1c:14:00:
         29:a8:58:0d:1a:32:59:3b:91:60:e2:20:04:36:fc:d8:d6:09:
         0d:51:7c:4a:03:92:12:c5:16:91:89:b8:a1:0d:8d:84:3d:cb:
         9b:e7:f6:96:2f:c5:1b:fc:a0:5a:8b:25:9c:1f:24:e2:ee:7e:
         d3:5e:f4:10:d9:f8:b2:4e:ab:c6:a9:94:8b:7e:51:b6:ff:a9:
         26:92:e6:a1:b8:91:b9:fa:e0:7e:9c:fa:16:4f:64:4c:15:7f:
         0f:de:91:77:17:14:30:bb:b8:96:33:51:49:a3:d1:5e:a2:75:
         40:19:ae:8f:38:38:1f:bb:89:e3:c8:ff:d8:d3:a8:6f:e6:74:
         03:87:8e:77:7a:98:fa:f2:b1:23:60:4b:5e:ff:1d:75:20:ec:
         9f:8a:a2:71:a4:f1:fe:43:1e:33:37:1a:f1:0e:03:10:c4:e5:
         af:d3:da:aa:1e:ff:4e:5d:c7:d9:6b:3e:c1:1c:80:4e:52:74:
         f1:c3:ab:1c:04:47:54:90:85:02:78:2f:36:6f:4f:6f:64:c2:
         83:60:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:47 2025 by rpki-client