Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
File:                     cc3dd8a3-4198-37c0-b897-32fc163ae258.roa (raw, json)
Hash identifier:          bbiXB73wyGa0B1NFYFMjZDPQkQ9zpVm0+Q7ViY7J8Lg=
Subject key identifier:   BA:B5:BF:52:BC:37:9E:24:5D:42:09:5D:EE:B6:1F:69:C3:FB:C9:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0D7556893F9BB70A3A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396562
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0d:75:56:89:3f:9b:b7:0a:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3ce17663-60cb-40d0-aca4-9c6bc49cb2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:b0:c9:fe:14:4c:0d:76:51:b3:a5:05:98:
                    e2:94:91:db:7f:e8:8d:c0:9c:26:43:9c:01:48:87:
                    6e:55:05:f8:f8:bd:35:15:bb:93:f8:72:c1:e9:36:
                    fe:3d:e2:10:61:36:c0:d9:99:bd:71:c6:b5:31:f0:
                    c0:47:63:97:f3:83:3e:3d:46:f5:04:d8:55:fa:93:
                    a2:06:6f:bd:53:27:6f:44:8d:9f:d5:ae:5d:f7:3c:
                    23:89:c4:83:31:f5:40:09:f8:7e:37:60:e5:c9:0d:
                    85:b0:ea:0a:c9:19:76:df:1d:bd:07:6b:9c:6c:45:
                    35:32:05:c1:24:0b:a6:8e:f3:46:97:58:e0:11:0f:
                    cb:2e:c8:2f:20:6a:aa:c7:5f:55:69:48:d1:c4:e9:
                    36:25:0e:41:32:9e:51:b5:05:f6:4f:75:a9:65:38:
                    33:62:8f:e5:77:21:e3:26:62:15:33:c3:ea:88:d7:
                    09:5b:e9:cb:77:35:92:d7:62:e0:06:08:26:48:85:
                    7c:e9:a1:75:8e:32:1c:56:0b:61:85:6b:7a:0b:3b:
                    34:ab:c4:6d:6c:2d:63:64:0b:cb:d6:e4:74:03:db:
                    03:d7:86:77:f5:f0:ff:c5:a4:d6:21:1c:99:ba:52:
                    17:29:d2:10:9d:de:b4:86:6b:04:8c:ec:78:9c:15:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B5:BF:52:BC:37:9E:24:5D:42:09:5D:EE:B6:1F:69:C3:FB:C9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3dd8a3-4198-37c0-b897-32fc163ae258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:89:fd:cb:9d:79:04:ef:d1:73:24:04:02:7b:79:16:e2:
         39:82:da:cd:71:bd:f6:ef:c5:e2:24:e5:e9:c6:6b:e0:1c:b1:
         75:87:2c:7b:ba:78:ee:38:52:05:11:e5:65:33:a1:a7:d7:a5:
         fe:36:c9:4b:2b:17:8d:fa:6a:99:9f:72:3b:50:4b:6e:89:d0:
         c9:c5:27:fe:34:83:fb:88:53:0c:28:10:d3:2a:34:ab:eb:fe:
         c2:04:0c:c1:e4:7f:41:98:ee:45:d8:45:0b:6b:74:4c:4e:2e:
         72:74:73:d4:49:60:6a:ed:9c:1f:ca:b6:b6:71:4a:26:31:8b:
         c6:74:24:88:80:67:54:09:93:46:52:26:f0:89:3e:04:27:14:
         3e:62:85:64:42:dd:b9:39:c7:ac:a5:e3:d1:f7:28:7d:59:2d:
         cc:4c:c9:c1:5f:09:6d:c4:91:15:a0:35:e6:5e:bd:a0:72:6e:
         0a:68:e4:95:e5:03:45:7c:52:33:cb:5f:97:74:9c:41:4c:fe:
         f5:29:4c:37:29:81:6a:e2:cf:c7:aa:5f:6d:8e:a5:09:0f:f2:
         98:9a:fd:9a:80:1a:f2:04:a8:07:64:5c:51:f6:4a:46:d3:bc:
         d5:f7:eb:d8:e4:ee:c1:dc:6c:9b:af:dc:63:4f:98:dd:dc:7c:
         77:c8:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:04 2025 by rpki-client