Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dad3bfdc-3282-39ca-bacd-b32ef8f366d7.roa
File:                     dad3bfdc-3282-39ca-bacd-b32ef8f366d7.roa (raw, json)
Hash identifier:          yi2AA6AtnUq52dxdjPs3y1wNU2TVM1S2YcJjmkHQ6SY=
Subject key identifier:   27:74:7C:D6:55:84:B8:16:17:A7:37:E1:A4:99:FB:69:BC:E1:04:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844A3956E64B970F6D3080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dad3bfdc-3282-39ca-bacd-b32ef8f366d7.roa
Signing time:             Thu 30 Jan 2025 13:46:22 +0000
ROA not before:           Thu 30 Jan 2025 13:46:22 +0000
ROA not after:            Wed 30 Apr 2025 12:46:22 +0000
asID:                     397212
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:4a:39:56:e6:4b:97:0f:6d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:22 2025 GMT
            Not After : Apr 30 12:46:22 2025 GMT
        Subject: CN=635e7b07-6810-421d-bab6-14fac0b1a137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:47:44:cd:ce:d9:fe:80:8b:27:da:d1:b4:
                    cf:7e:8f:17:95:e3:1b:ee:cb:ec:59:3f:a2:f5:f8:
                    b5:2e:ac:3d:c0:4b:b1:e9:67:a7:fe:15:3a:d3:51:
                    be:c1:a5:91:1a:37:ff:96:01:f3:06:21:ea:dd:4e:
                    49:11:c5:2b:6f:44:2d:91:b4:e0:f5:9b:b1:9c:22:
                    d5:cb:e3:5c:0b:3f:1c:4b:4c:2f:08:93:bb:a7:24:
                    41:37:71:de:fd:9e:03:15:8d:e5:13:8f:20:bd:b4:
                    95:28:9b:00:01:80:4b:9a:21:c0:71:b5:4d:97:cd:
                    5e:52:4e:e5:c1:d6:aa:6c:cd:fa:c7:20:fb:b9:c2:
                    08:d0:72:ab:ff:76:ca:01:d9:73:fc:4e:0e:e1:75:
                    ec:c6:cf:15:77:56:a7:0f:ba:4d:85:4e:c2:ea:2a:
                    f1:71:a4:91:43:96:7a:1a:01:5a:56:77:38:c5:00:
                    59:dd:fa:44:2f:0b:78:86:36:fc:8f:2a:b1:82:a2:
                    4e:3b:f7:a0:b9:17:38:a8:c6:f2:17:9f:42:a6:46:
                    79:fd:1f:7a:8a:1f:b2:5d:73:19:94:e7:5a:1d:f2:
                    9a:41:f8:22:57:69:cf:5c:57:1a:84:a1:ca:47:d4:
                    d6:08:50:00:03:2d:6c:de:36:1e:ea:b2:b2:b1:22:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:7C:D6:55:84:B8:16:17:A7:37:E1:A4:99:FB:69:BC:E1:04:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dad3bfdc-3282-39ca-bacd-b32ef8f366d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:d1:1d:ee:3b:b1:24:25:c4:34:86:20:76:62:67:e6:d9:
         97:fb:5d:4c:39:79:76:fc:6e:8a:15:a4:6a:57:ec:fd:0d:0f:
         46:44:b3:6a:48:8a:ba:46:39:a9:55:6a:22:58:58:ef:6e:a6:
         bc:6d:78:67:d6:33:70:96:96:a1:81:e2:ac:52:fe:28:39:77:
         30:91:1c:df:67:58:38:a1:84:ad:26:64:e5:04:67:c3:aa:2a:
         49:77:9e:a0:11:48:1f:14:73:33:c9:55:f2:78:17:47:3e:05:
         aa:55:fa:fd:01:96:1c:ac:23:75:ef:22:7d:52:8d:15:45:66:
         3b:ca:ef:bf:52:a2:41:15:42:fc:5a:69:90:92:c9:b2:c1:10:
         e2:40:21:7f:4c:8a:cc:7c:9d:f7:68:e1:d0:64:71:d4:51:59:
         81:ac:bc:87:a5:52:73:20:2b:61:20:9d:83:9a:ab:33:88:d6:
         a8:e6:f4:14:66:17:d4:c4:7c:56:97:7a:71:54:5d:ce:b5:c4:
         5f:e1:cb:97:3f:17:f5:e7:a6:66:81:7e:41:1d:97:03:60:81:
         73:0a:32:8f:6b:be:2f:d5:d7:8d:e7:3b:92:f0:0e:a8:34:3a:
         24:10:19:7f:53:e9:65:69:80:d9:f8:13:5b:c9:80:07:54:98:
         36:a7:d6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:34 2025 by rpki-client