Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf456b06-05e3-3d5e-85bd-8162d44741e7.roa
File:                     bf456b06-05e3-3d5e-85bd-8162d44741e7.roa (raw, json)
Hash identifier:          YoLVInkbdfWA7gJCz/ODu0x21CvdTfA6eg5poq8p9ts=
Subject key identifier:   09:CB:C5:7B:ED:7E:DA:72:9E:06:4E:AB:67:0D:3D:42:AC:51:15:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1DC412239B8DD63B5100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf456b06-05e3-3d5e-85bd-8162d44741e7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396588
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1d:c4:12:23:9b:8d:d6:3b:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=eadae8f5-2ab9-4daf-aed5-ab325a0e6a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ce:7a:8c:51:e3:54:0d:ef:15:99:9f:13:59:
                    d0:b5:17:c3:b5:16:e0:c2:29:f7:2a:22:08:fc:5d:
                    92:24:57:20:63:31:f5:8e:e4:c3:2e:93:3a:de:cc:
                    e2:57:a7:90:d8:c8:ff:39:f8:87:d0:60:24:78:d4:
                    14:e6:50:26:67:0a:00:5a:1d:c4:24:62:47:29:bd:
                    07:98:6f:d3:70:af:c7:2a:d6:18:fd:a1:c1:48:31:
                    50:00:57:2e:48:f1:78:27:1e:79:13:9b:1d:53:09:
                    6f:2f:04:9d:d7:24:f1:83:87:2e:1d:df:bf:06:e1:
                    b3:b6:b5:96:16:96:02:f5:a3:45:ed:37:c0:59:3b:
                    91:a0:c2:eb:51:57:c1:c9:cb:1b:b9:ed:fb:9d:4c:
                    2e:bb:5e:82:d6:f5:27:26:df:ec:35:db:0b:a2:f0:
                    8d:7b:ac:b9:9f:9f:16:fc:01:39:27:6b:32:1f:16:
                    03:e0:ba:8b:a2:4d:25:3d:bf:87:12:bf:a4:10:ac:
                    ee:16:39:f5:f1:e6:99:58:22:b5:96:b1:b5:0f:9d:
                    91:b6:dd:65:5b:7e:ae:2e:dd:2d:c1:a9:94:dd:50:
                    f8:fb:ca:b0:b1:22:1b:39:d4:c7:29:6b:de:9e:ca:
                    b2:f6:80:b4:c8:0b:e5:d9:57:5b:ba:e2:a7:6c:58:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:C5:7B:ED:7E:DA:72:9E:06:4E:AB:67:0D:3D:42:AC:51:15:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf456b06-05e3-3d5e-85bd-8162d44741e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:e9:81:65:eb:44:06:ce:29:43:e1:4a:39:0b:aa:e6:ec:
         94:87:23:f5:a6:66:ad:75:31:d7:b7:dc:2b:44:dc:03:04:74:
         13:91:36:3f:41:f8:74:b9:52:39:88:27:a3:8d:7c:01:cf:55:
         72:30:f4:52:d6:6d:8f:87:6e:97:2c:69:d8:61:b0:eb:40:dd:
         08:60:b9:ce:ba:8d:86:a4:07:59:cc:83:e0:22:fa:77:17:97:
         e5:ad:51:5f:13:a8:93:95:d9:2c:96:d0:4b:98:2c:b8:ad:8c:
         35:f8:c7:c9:fe:66:ba:02:ad:2c:06:04:8b:aa:7f:c7:aa:95:
         30:94:41:56:df:9d:56:47:62:69:68:22:c5:24:9f:f1:5a:54:
         ba:be:f2:4a:57:16:bb:14:20:64:de:f3:9c:08:bf:39:6d:9d:
         d6:02:01:5d:ab:3d:56:3e:d1:a3:d3:db:4a:be:73:34:4d:c8:
         bd:46:d5:14:07:b1:fa:be:3d:88:13:ac:23:73:7b:e8:81:96:
         fa:2b:b6:55:cb:2f:58:1a:0d:43:f0:2b:f1:72:6b:57:0e:16:
         b7:ac:48:57:a1:91:34:cd:f0:d5:85:8b:89:6c:98:e9:28:ca:
         3c:be:72:ba:e3:da:43:e3:8d:af:09:da:82:0d:10:c8:cc:cb:
         a7:bc:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:31 2025 by rpki-client