Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
File:                     e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa (raw, json)
Hash identifier:          lmrdbWSt0caLll/M8moGUNLpBAyOZQpnnJ/kDWiR7rA=
Subject key identifier:   D6:93:8F:4B:63:A6:E2:B3:0D:1F:C2:47:45:1C:C4:25:7A:51:63:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183CAA072A6FAD2A12E7500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     21313
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ca:a0:72:a6:fa:d2:a1:2e:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=6f91dcc5-acb8-4f2c-a8c0-8761739ce03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:22:99:25:81:dd:d5:19:80:80:8e:5d:37:
                    8e:f2:00:93:27:d2:c7:92:e3:6d:bb:7c:02:6d:8d:
                    24:e0:5e:dd:e0:84:6d:23:6c:04:b9:76:dd:a5:70:
                    ec:4f:8a:43:58:6a:84:a0:24:57:eb:78:02:e4:77:
                    79:11:b2:f5:02:62:21:5c:c6:7b:c4:27:2c:6b:49:
                    42:d9:88:9a:a3:17:23:a1:4b:17:eb:b6:59:2a:ec:
                    e6:d3:1b:38:04:fc:38:87:c1:96:29:a1:14:f7:4a:
                    35:45:4d:b3:51:c6:68:ed:6c:26:54:7e:dd:55:45:
                    9d:bb:ac:7d:2a:34:86:cb:03:fc:3b:8f:8b:49:25:
                    cf:53:79:fc:aa:db:c5:7f:b0:ab:6e:48:03:9c:b6:
                    5c:cb:3a:fd:d4:19:26:1a:0e:20:16:9f:9f:7b:98:
                    82:bd:2f:db:f7:c3:a7:02:d9:39:dc:f1:69:3b:c5:
                    9a:22:dc:bd:d0:cd:15:2e:61:b6:7a:db:99:8b:47:
                    38:c2:30:fe:ab:2f:bb:e3:c9:ef:8c:be:d8:db:68:
                    00:73:2a:e8:6e:63:e3:26:81:b0:95:e4:ac:db:e9:
                    01:b7:9c:b7:2b:76:65:0a:66:4b:54:71:95:3e:d6:
                    85:55:70:aa:41:7e:13:5e:b7:34:b1:a5:6d:69:69:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:93:8F:4B:63:A6:E2:B3:0D:1F:C2:47:45:1C:C4:25:7A:51:63:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e19aa0-c95c-3ac5-9848-a5493dbbbaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:a1:62:41:0c:a4:5e:6b:59:7d:95:0d:b0:e6:4e:c0:68:2a:
         72:85:7e:7d:75:79:9c:f8:11:5d:63:4b:66:87:73:2f:cc:84:
         dd:50:ee:4a:fe:d0:26:99:11:09:e1:94:f0:bf:b1:6e:47:bd:
         91:cb:66:dd:6b:08:bd:21:00:ce:46:cd:a0:da:46:0f:72:b2:
         95:d9:41:7c:d1:f0:64:af:32:78:8a:7f:a0:50:36:af:27:49:
         d7:49:35:3b:c1:ec:ff:61:39:ba:d1:45:d1:6e:f5:9f:10:a7:
         22:d5:a2:37:bb:5b:63:f7:c3:dc:77:fe:3b:f4:48:df:e3:e8:
         b4:06:45:a3:f8:fe:37:c4:93:5f:41:b3:17:ce:f8:08:d1:f4:
         c6:d1:1e:e6:d8:dc:82:02:73:c9:78:e4:57:1d:45:71:2f:df:
         c5:f1:1d:55:52:42:21:f8:c4:39:08:72:5e:1b:2e:58:31:36:
         97:67:26:10:91:35:cb:a6:d0:13:4d:ab:df:33:34:58:9d:fa:
         6e:83:94:26:05:06:fb:00:ff:8a:5e:24:62:ea:02:fd:28:43:
         c4:c7:65:91:01:b7:dd:71:22:c3:c8:86:24:01:fc:32:fa:08:
         6c:3a:36:82:27:22:71:bb:44:52:15:a2:82:f2:ec:79:5d:b7:
         ce:0f:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:22 2025 by rpki-client