Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa
File:                     c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa (raw, json)
Hash identifier:          xD14TAnZ7LOJAqdDC9lcJGJwl1iwz19TBxigKGish2c=
Subject key identifier:   29:64:D1:80:B0:A7:14:ED:81:48:CC:65:73:BC:88:3E:7A:ED:02:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF7588D19AA0F7D96F670E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     396560
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:88:d1:9a:a0:f7:d9:6f:67:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=fbb67e07-c16a-481e-9e2f-500c574d8206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:a2:fc:53:fd:19:32:6a:6b:3e:a7:3e:69:
                    62:f3:44:d8:a7:49:90:44:81:81:e1:4d:cc:83:56:
                    20:e5:6b:ef:0d:39:9d:95:86:f6:9a:81:79:f9:b8:
                    a0:50:fb:97:c6:04:5e:fd:1d:42:a7:7b:85:b2:42:
                    6d:48:3c:ad:8b:4c:f3:63:57:29:c7:e2:e5:f3:bb:
                    77:f8:37:36:5e:3e:06:bb:92:5a:eb:41:dc:b2:98:
                    56:10:76:e9:36:bd:db:49:ed:44:2c:73:c1:1f:1b:
                    33:53:60:b0:54:fb:ef:50:bf:48:4b:05:6b:62:bc:
                    a3:27:17:24:a2:b0:91:41:11:18:6b:4b:fe:8f:df:
                    8d:88:bf:ea:b8:57:ce:e7:d6:24:37:03:5f:c8:fe:
                    14:2b:39:c5:0d:79:1c:04:15:3a:dc:ea:85:65:72:
                    81:ac:25:de:19:f8:9e:59:06:ca:fb:45:cc:61:9c:
                    ee:c9:cf:3e:53:d2:1b:be:b0:6b:96:4c:ed:28:41:
                    7d:62:79:df:89:08:d9:cc:bf:b3:2a:d6:e7:fb:cc:
                    e4:ae:6f:3e:b3:6d:32:c0:b3:3a:fd:0d:e6:f2:99:
                    db:63:55:d6:38:94:71:96:f6:18:7c:f6:eb:89:53:
                    6f:5d:fb:d3:7d:78:11:f1:24:34:16:61:dd:7f:cc:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:D1:80:B0:A7:14:ED:81:48:CC:65:73:BC:88:3E:7A:ED:02:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c58ae9ff-3ba8-3cd7-907a-b3af4cea8a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:10:f6:92:22:28:46:e2:53:41:85:fd:f1:ae:07:e5:f0:7f:
         46:8d:61:69:49:30:26:e8:94:9d:e8:13:40:30:d2:89:68:ed:
         b9:d3:05:52:be:8d:5e:46:2e:21:0e:2e:24:9b:ad:28:8a:31:
         b1:9b:d1:67:6d:a3:7f:c9:08:e8:45:c5:2e:51:4e:64:10:c9:
         92:3d:f4:ae:43:4a:a1:cc:e5:1d:9f:94:aa:e2:a7:eb:58:9f:
         57:7c:84:75:9e:86:8e:b3:21:d7:33:e2:29:71:0f:7d:a5:69:
         8b:03:b1:58:a1:02:fc:60:da:5b:17:1a:28:95:8f:6d:98:81:
         06:d4:c0:a7:7f:13:25:e2:55:51:a9:2e:f4:b3:ec:da:ae:e5:
         df:83:ac:a9:02:d2:05:f7:30:c4:e1:bb:06:ed:ec:db:e2:b1:
         3a:b7:18:16:21:5d:0f:ff:23:57:5e:82:0e:24:80:6a:21:0d:
         34:b7:21:2e:fa:af:94:5b:53:fb:01:d5:b3:29:89:49:ac:36:
         5d:d3:6a:56:dc:47:fb:32:c5:b5:e8:ff:bb:9c:9a:a5:62:b8:
         70:8d:b5:9d:d2:60:3b:e8:6b:44:ff:07:dd:5a:5a:a6:ee:14:
         2c:8e:58:b3:36:c9:8f:da:2f:1e:20:eb:f4:8f:65:2d:60:c1:
         8c:c7:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:56 2025 by rpki-client