Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa
File:                     d8d5819e-33aa-3570-9d6b-312e55c7891f.roa (raw, json)
Hash identifier:          y0+5JXEEkavqpYlJfUpwS8/Gd4eZ0JrtrQigc7mpl3s=
Subject key identifier:   0C:78:36:AB:F5:DA:D8:A3:90:05:80:0C:C6:EE:B2:C8:97:18:7D:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584953C455FA43D58E62CF372140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396585
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:55:fa:43:d5:8e:62:cf:37:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=973e73d9-fc03-4086-8270-dc86c6ca09d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:c3:ca:56:4a:9a:97:09:ab:f6:96:21:a8:
                    8f:51:a6:5b:c7:ef:aa:2f:bd:30:d1:63:b4:62:20:
                    66:b3:b1:7c:7d:b2:b2:e7:24:3c:9c:e3:40:1b:69:
                    4b:a3:11:42:0f:4d:75:cf:17:d8:76:dc:4f:8c:0f:
                    3e:ef:d0:40:f6:3f:81:90:23:f8:b8:2c:44:5d:2a:
                    39:45:7b:82:d7:5d:fd:b8:7f:d8:c0:55:98:7c:d0:
                    b3:fc:87:3e:e5:db:73:29:d9:ad:d7:b8:f4:4f:2a:
                    44:56:e5:50:f3:cf:bc:e3:98:dc:80:a8:cb:5a:db:
                    a6:56:ad:1f:36:c6:af:c6:e1:40:58:76:c2:e6:ec:
                    50:0c:7a:fa:70:72:bd:af:10:0c:88:f4:af:32:ad:
                    4b:a3:fa:fe:3a:89:fc:03:57:c4:66:67:0e:ea:d9:
                    23:20:c0:1a:03:10:ce:df:59:23:d6:0b:a2:d6:28:
                    3b:96:d2:d2:f8:ef:bf:8f:da:d5:ed:fe:99:d8:b7:
                    85:df:c2:73:64:22:d2:e5:ab:86:b6:4d:d0:33:27:
                    47:9d:08:2b:55:05:67:35:dc:18:e2:bf:75:18:f1:
                    35:6c:f1:d8:b0:17:34:86:f7:f2:4d:68:fd:71:66:
                    d8:6e:46:02:86:83:04:29:21:24:1b:5d:ff:f7:ec:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:78:36:AB:F5:DA:D8:A3:90:05:80:0C:C6:EE:B2:C8:97:18:7D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d5819e-33aa-3570-9d6b-312e55c7891f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a1:c9:1b:20:ec:15:35:0c:7b:71:1d:ca:ce:7c:a2:4f:3e:
         a7:a7:a1:12:09:15:44:ab:20:23:0c:7a:44:57:2d:a0:f2:9a:
         91:ca:36:d1:41:2b:e8:ee:a0:ab:e9:d0:cd:73:59:53:b5:72:
         29:50:b9:16:ac:cd:b8:b3:f3:fb:a6:cb:2f:0b:9c:16:26:dc:
         c1:d1:37:b8:dd:c7:19:59:1c:31:90:3b:6a:eb:ad:47:35:46:
         ef:6f:32:5a:2b:ea:3a:e0:62:d1:be:07:c4:72:5e:b5:b4:76:
         e6:02:3a:cf:cf:11:fd:fe:15:f5:36:b5:ed:41:58:b3:3e:c8:
         d8:9e:28:de:c4:09:3f:d2:58:e3:f0:3b:51:07:ca:bc:b2:4e:
         3d:bd:a3:98:50:ea:7c:aa:a5:19:0a:6c:46:c0:98:93:ac:f8:
         35:03:46:c6:73:4a:9d:e6:8a:df:ea:e0:86:be:8a:38:d6:99:
         11:e7:0f:55:eb:dc:2b:92:f9:98:f8:3b:8a:ee:dd:75:da:d8:
         5a:82:17:b9:53:1b:1b:d2:2a:94:be:89:7f:ee:be:f0:3c:f9:
         a4:6e:20:3a:b1:5b:6d:a3:f3:c5:ed:d2:1f:32:5a:97:b5:d5:
         fb:e6:d3:e9:8e:66:25:f0:8a:a0:eb:7d:37:e5:48:88:ea:3a:
         62:b2:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:43 2025 by rpki-client