Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
File:                     e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa (raw, json)
Hash identifier:          GfPiPpzHp/eazoDDcXoNu0rO2P7qahzDg8ltE2ZoUiE=
Subject key identifier:   7C:5F:60:60:16:39:EF:92:42:3D:46:0B:A1:2C:B7:52:28:39:36:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB03CA9E22EB9E0439DF20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21313
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:03:ca:9e:22:eb:9e:04:39:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=152eb63b-9150-4159-8cd9-9958f63fc11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:5b:16:aa:c1:64:df:27:5d:0d:28:e0:3c:
                    d9:ba:cf:82:69:e9:91:52:4e:ae:cc:c3:23:e0:f7:
                    af:5e:7a:97:af:c2:53:be:2f:87:eb:34:ff:78:59:
                    7b:d2:03:04:33:8c:9d:34:1d:b3:b9:8a:92:a7:30:
                    73:95:58:fb:1c:75:d9:f9:cd:fc:f2:74:4a:d8:2a:
                    c2:37:19:83:b1:81:41:4c:9d:70:77:59:55:9f:8c:
                    d1:80:96:92:06:0a:9c:a8:36:7b:af:7a:3e:70:14:
                    5b:c6:f1:2a:7d:f1:06:a4:c6:4e:45:1a:e3:2e:37:
                    c3:eb:c5:9e:cc:a9:dc:42:89:dd:0d:5d:23:94:69:
                    32:a7:02:b2:19:c8:fd:5b:74:2e:49:7e:20:f6:3a:
                    a4:40:32:3b:01:69:e9:b9:18:1f:e4:0d:21:21:b4:
                    e2:57:b9:4d:98:e9:df:b8:a8:2b:48:e7:76:0b:8f:
                    11:c5:34:ba:74:44:ab:df:85:35:e1:b5:92:3e:2f:
                    04:49:37:0f:71:b6:27:e1:45:6c:be:bb:f3:9c:80:
                    c1:94:cf:3e:cc:13:fe:20:ce:95:90:d0:b5:b1:43:
                    7c:8b:2a:85:8c:3f:49:26:dc:a7:47:1c:8c:4f:88:
                    5e:74:55:e1:35:e4:32:29:aa:fa:cc:e3:be:16:4d:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5F:60:60:16:39:EF:92:42:3D:46:0B:A1:2C:B7:52:28:39:36:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:38:fc:9c:49:3c:24:38:b4:27:f2:7c:e0:66:ff:e5:0e:
         61:dc:e0:f8:3e:a2:6d:44:54:6e:c8:f8:8e:3e:1f:74:4e:95:
         c2:4d:d0:9f:f7:53:86:d9:13:61:bf:49:e1:65:88:09:ad:bb:
         1d:2d:94:91:49:da:87:7f:02:76:e9:1a:b6:e4:c3:12:a3:85:
         89:51:f7:ba:29:8e:7d:81:f1:13:74:26:89:e5:7b:e5:61:00:
         9a:ab:69:8a:e8:b0:42:d9:55:e0:88:8d:6c:e7:c5:a3:19:53:
         9b:50:2a:0d:06:e8:74:59:e0:2b:c2:7c:d2:f9:f8:15:05:9d:
         64:0b:4b:5a:4b:f9:2b:e9:16:6c:49:72:6a:ca:7a:a8:11:c5:
         2e:d2:2b:13:6b:1b:47:4c:16:52:14:d3:09:57:5b:3a:0d:c6:
         ae:0d:29:17:90:53:ea:2b:69:7b:b8:ea:e6:f7:d8:50:10:c2:
         30:d4:54:a5:0a:79:cf:e1:fc:5a:ca:a3:1a:b5:ff:77:df:89:
         8b:7c:9f:b7:8f:d9:4d:43:79:7a:a1:30:12:29:42:09:f1:8a:
         8a:70:a5:46:61:e4:fd:bc:d7:6f:97:e4:9b:7f:f6:93:e1:71:
         15:ef:2e:a8:9a:32:38:b6:6b:34:fb:ce:0d:83:d4:68:57:c9:
         23:90:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:23:22 2025 by rpki-client