Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa
File:                     dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa (raw, json)
Hash identifier:          6nPYjJlbxcgl4lmwTgkG1E+rpNKWniwgqTDbU8XsaRo=
Subject key identifier:   BD:3B:F1:59:C3:A1:1D:22:A5:DB:5F:6E:01:36:70:45:E3:39:B0:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843E48F99D0DC6D8B8B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa
Signing time:             Thu 30 Jan 2025 13:46:16 +0000
ROA not before:           Thu 30 Jan 2025 13:46:16 +0000
ROA not after:            Wed 30 Apr 2025 12:46:16 +0000
asID:                     397198
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3e:48:f9:9d:0d:c6:d8:b8:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:16 2025 GMT
            Not After : Apr 30 12:46:16 2025 GMT
        Subject: CN=0b160558-ae66-4c5f-94c3-8f30250cc0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:c5:39:70:76:89:1a:e1:85:c8:61:24:5e:
                    d2:b5:fa:b2:59:1e:64:00:04:98:73:22:7a:75:8b:
                    20:7e:2b:32:5b:a7:b6:42:6f:b4:13:e7:3f:db:61:
                    cb:69:5b:17:31:ee:b8:35:45:57:0b:68:87:9b:5b:
                    a1:56:60:96:4c:aa:94:8e:5f:93:e3:f1:71:c8:2e:
                    bf:54:06:02:dc:74:57:d5:45:76:c3:ad:54:21:b3:
                    16:87:b6:1d:d3:58:fa:1f:4f:24:45:bc:8c:df:f4:
                    81:f0:6a:74:f3:31:74:b6:c8:38:bf:b0:d9:df:3f:
                    86:03:40:2b:fe:81:a1:59:19:d2:82:19:5d:86:70:
                    4a:9b:c9:86:1b:6c:e7:7f:b9:a6:9a:15:6c:cb:82:
                    e0:60:db:96:d1:b1:1b:9e:e5:52:c6:e0:de:13:c5:
                    ac:e5:0b:c2:11:8a:11:77:2c:de:5e:58:67:99:8b:
                    1f:06:b8:3a:6c:42:46:5b:03:6a:af:e5:f7:1d:36:
                    8f:e2:98:84:7f:28:f7:76:46:9a:84:73:78:c4:0d:
                    b1:cb:f5:b4:e9:8f:4c:f2:e0:bd:26:15:a7:de:71:
                    cf:38:71:a7:02:76:bd:6f:fc:f7:62:c1:1a:16:be:
                    98:2d:a4:70:f4:42:74:88:e6:0d:dd:64:fe:ea:5f:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:F1:59:C3:A1:1D:22:A5:DB:5F:6E:01:36:70:45:E3:39:B0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc4a86c5-c23d-3640-9e65-403779c8ac6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:e8:4b:20:eb:b9:37:c0:72:93:ba:e0:77:52:0a:78:8d:
         23:9b:0b:30:75:bd:c7:ac:e4:77:01:05:b3:4d:53:aa:4e:79:
         62:eb:80:e5:10:c4:b1:84:c0:7d:63:a4:46:75:91:f4:39:43:
         ad:f0:85:86:3a:78:48:9b:dd:6a:14:a5:4d:ea:47:85:b4:06:
         d4:75:a4:4f:25:02:48:aa:fb:f6:58:c4:8e:a8:93:f5:4f:b5:
         59:36:10:4d:8c:ba:e4:53:c9:71:e9:5f:9f:6c:5f:3f:35:92:
         0d:06:77:9c:1b:b4:27:ea:88:cb:e0:b4:a8:d4:fe:8a:2d:f2:
         02:b4:fc:fb:12:de:86:83:8f:11:7d:c5:14:6f:ae:0e:1b:a1:
         d8:73:55:83:12:3e:b8:f4:87:27:f5:52:a9:86:40:01:30:a0:
         67:20:db:1c:83:12:bb:11:26:d0:a0:76:51:ad:bb:3e:4c:74:
         5c:47:fb:fb:c9:f7:9c:4a:48:34:81:23:32:22:54:bf:50:e4:
         84:f5:47:a7:5f:93:23:5a:1b:a1:48:97:41:82:7b:7c:73:d3:
         76:d9:76:4a:bc:e9:f7:42:f8:a1:2e:e0:3f:52:02:5a:42:d6:
         af:2a:6e:9c:c0:c1:81:99:8b:7c:1c:a9:0c:1f:07:b0:66:f8:
         23:d7:ca:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:21:43 2025 by rpki-client