Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa
File:                     bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa (raw, json)
Hash identifier:          D6sPmJUV6LMjEeipehOh5fDBUjCqz5b4l3g8ZYLDcjM=
Subject key identifier:   9B:6C:01:28:65:3E:76:9E:03:90:8E:EE:FD:B7:86:76:2D:CB:DF:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF758CED43B4710A38A701A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     396612
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:8c:ed:43:b4:71:0a:38:a7:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=e8e49369-0631-4a4e-ab52-485ccddb5b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:cb:32:6e:86:6c:cc:de:3d:d0:b1:11:9b:
                    7e:bf:bc:c4:fd:26:d7:94:ba:d6:1f:d8:35:d5:6d:
                    8d:4b:49:24:e7:b1:a0:6b:9d:62:ba:fc:5e:40:da:
                    02:d0:9d:79:a0:3d:82:6a:c9:ae:c5:3b:1e:96:bd:
                    e5:16:db:e8:80:db:99:b3:f8:c3:47:86:25:3c:06:
                    d0:30:4b:57:a8:af:40:5c:f2:22:1a:3d:c7:5f:ed:
                    d9:ba:a6:78:1d:21:0e:b9:6f:df:bc:86:72:df:78:
                    82:7d:64:9b:38:b8:b0:25:b6:97:92:a2:87:d8:88:
                    81:7c:73:a8:67:74:82:60:61:8b:18:5d:4b:a5:55:
                    f4:96:1d:87:eb:4f:5f:f1:92:ec:b6:8e:d8:82:e6:
                    ec:f6:0f:5e:4e:b0:58:0e:f5:11:3f:85:7d:60:3d:
                    e5:00:84:86:2e:2e:51:ce:d1:ed:7d:a2:04:c5:7c:
                    43:76:3c:ef:0f:ff:43:d8:c6:d0:70:b5:30:f9:0b:
                    72:a9:f1:cc:1a:ff:28:0a:ec:b5:55:72:19:d7:84:
                    2d:92:a7:71:76:60:bc:9a:06:75:50:fa:23:e5:fb:
                    67:74:17:a5:5c:66:b8:9a:96:1b:dd:72:79:0a:1a:
                    1f:9c:13:97:47:72:da:0b:3b:43:90:49:d4:1d:07:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:01:28:65:3E:76:9E:03:90:8E:EE:FD:B7:86:76:2D:CB:DF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc7c0c27-dafc-3cda-8448-c63aea8a0d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:f7:81:95:b2:8d:c8:73:b8:62:18:47:48:54:22:42:fa:
         9c:9c:2a:13:e6:d5:d0:42:62:61:e3:dd:99:d0:23:bf:25:2a:
         67:07:11:02:33:69:91:60:0a:25:fc:ea:df:3b:2b:b8:fb:19:
         c2:b5:fa:92:0c:15:ca:39:af:95:56:17:ec:dc:65:05:69:e9:
         4b:ff:97:c9:30:7c:50:92:23:88:37:c7:68:cb:18:0d:fa:d8:
         c7:58:ab:86:bf:3c:0c:d4:74:45:e5:10:cd:cd:4a:dd:93:65:
         c7:88:3b:5f:23:36:b4:b1:4e:51:1e:cb:26:51:85:fc:de:21:
         69:9e:11:af:76:65:76:a1:17:2a:e7:44:97:f2:37:7d:d4:b2:
         7a:81:8a:8e:4f:13:b4:29:73:46:7e:28:50:24:8e:cf:82:01:
         84:1e:dd:02:06:f5:2d:cf:26:38:56:64:a2:d1:5c:9e:ed:2c:
         fb:e1:33:cc:cd:67:5d:a9:c8:34:d5:3d:75:1e:d5:c2:cc:2a:
         aa:c0:7e:cd:59:17:84:b3:31:f8:c8:4f:f2:23:ed:be:d0:d6:
         f9:5d:d5:5b:76:e7:97:e2:c3:52:67:87:2b:71:f0:23:ae:11:
         96:1b:d2:43:c6:53:3c:95:73:3c:2c:1e:c3:01:88:8d:2a:53:
         73:e1:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:25:18 2025 by rpki-client