Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e165c58c-848a-31d3-82fb-a2818a871fcc.roa
File:                     e165c58c-848a-31d3-82fb-a2818a871fcc.roa (raw, json)
Hash identifier:          OnuoSMC8OIFWeXOAxZd39dVMe+lnoZ4NGAQBjdiNS3g=
Subject key identifier:   97:6A:46:83:35:42:9B:21:0D:A7:A8:49:BA:CD:A2:FE:DA:7E:8B:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D1CBF97517499A2A4380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e165c58c-848a-31d3-82fb-a2818a871fcc.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396608
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d1:cb:f9:75:17:49:9a:2a:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=25b4b135-2889-4b7e-a677-e41cf0ff04ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:ef:e5:c8:13:7c:ec:b4:29:39:8d:1a:f1:
                    a8:76:ea:e7:06:e2:df:f5:53:3d:50:31:b9:5b:f3:
                    67:8c:13:64:b5:15:e8:e7:58:a3:80:0e:b3:dc:17:
                    14:cc:e2:3b:19:96:22:10:92:41:c0:24:73:73:20:
                    92:89:ed:79:cd:dc:dc:0a:20:d7:e7:a4:6f:a1:c2:
                    17:29:c6:66:d2:0f:7d:53:5d:b3:dc:fd:c1:d7:e2:
                    1e:0b:79:0c:14:73:95:36:20:10:fc:5c:f7:37:b9:
                    3d:21:6c:31:6c:9f:93:be:28:67:0b:c5:75:eb:eb:
                    fd:2d:d5:82:27:c5:39:1d:bc:70:e9:3d:4d:1b:44:
                    63:03:9c:a8:bf:54:d2:4d:e1:ed:19:ff:74:87:24:
                    37:3e:44:d4:87:aa:fb:8e:1d:e0:52:45:48:5f:02:
                    cf:27:db:6c:13:1a:39:eb:51:25:41:60:c5:73:dd:
                    84:ba:6b:6b:f9:57:8b:e1:51:eb:f6:ff:a3:a9:46:
                    21:08:97:0a:95:7a:29:ff:0a:4f:51:96:64:36:e9:
                    88:6f:3c:4d:c1:9d:f9:f6:47:06:75:3c:b3:f1:ed:
                    8b:65:0e:ff:bc:fe:ef:58:f3:ed:90:6f:ee:4c:c5:
                    01:9e:d4:32:27:35:ba:d1:30:77:d6:2c:82:59:9c:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:46:83:35:42:9B:21:0D:A7:A8:49:BA:CD:A2:FE:DA:7E:8B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e165c58c-848a-31d3-82fb-a2818a871fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:ec:b5:81:fb:3c:ae:0d:3a:db:86:4d:25:9a:68:34:13:
         54:55:fb:25:2c:8c:7f:c3:7e:c1:88:d1:9b:7a:d4:4c:ac:d1:
         10:a3:c6:5b:9f:fb:0b:40:63:e2:db:35:13:de:56:9c:0a:94:
         13:7f:72:24:b7:f8:b2:8b:37:ae:e4:76:04:8a:ef:bd:9a:b3:
         ef:b8:24:c6:08:9f:5b:23:e4:78:6e:f1:dc:3c:94:ee:5a:d2:
         fe:6f:94:7d:2c:8e:01:95:2d:85:12:4d:36:33:9a:ef:72:20:
         eb:8f:a1:47:4b:de:f3:38:32:32:20:d2:e1:6c:0c:28:14:01:
         7e:99:ea:4a:4c:07:a4:2a:1f:35:8f:15:2c:80:1f:54:36:9d:
         53:ac:11:94:ee:7a:23:e8:03:cf:d5:24:ed:1d:06:52:ef:6f:
         40:cd:a2:16:d3:44:eb:d6:fc:e2:f2:b0:8e:db:33:53:0e:19:
         ee:54:ee:1e:ca:bd:c8:24:9d:d6:f0:c1:0a:70:8b:28:67:0b:
         bb:de:04:f3:36:5e:94:50:6f:cc:fa:5a:10:f4:24:e6:4c:a3:
         c4:09:90:c4:90:ff:d0:5a:48:89:20:38:14:03:1f:2e:b5:6f:
         04:0c:a0:48:c0:05:35:1b:a9:5a:66:f8:cd:68:57:90:d8:b1:
         b4:8a:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:49 2025 by rpki-client