Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea708f73-ebd3-30c9-8bb3-aeab095260ad.roa
File:                     ea708f73-ebd3-30c9-8bb3-aeab095260ad.roa (raw, json)
Hash identifier:          I5uLpKXtkQ56t0jHXvQNXNKeM/swh/izvLjC4/QFo9c=
Subject key identifier:   29:9C:38:3F:FC:F3:14:9F:19:4A:E9:02:9A:0B:88:3E:37:47:25:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C8126C67F3F653D355E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea708f73-ebd3-30c9-8bb3-aeab095260ad.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396593
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:81:26:c6:7f:3f:65:3d:35:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=bf345f52-4f26-4e88-abdf-3f3b2978fecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:44:16:d8:64:ce:1d:fd:a8:fb:a3:6a:61:
                    da:e8:5c:06:04:9f:b3:77:30:5b:1d:d8:10:b6:b9:
                    7c:7c:6b:35:6c:05:e1:09:c6:07:6f:a9:90:88:da:
                    16:5b:be:78:f8:09:8e:e6:06:6f:af:f3:ea:d5:0e:
                    09:2d:84:8f:a1:54:a7:24:04:8d:ff:7a:24:60:54:
                    20:40:8c:be:dc:3c:2c:36:51:df:3f:00:c9:cb:3a:
                    84:79:64:7f:ab:6b:f1:41:2e:04:5b:df:f6:b7:cc:
                    63:79:11:25:b6:70:ba:f2:4a:68:e3:14:95:bb:d7:
                    8d:5c:c7:8a:25:ef:06:ac:d2:30:a5:b5:94:00:b2:
                    6d:2e:08:10:5f:a7:cf:34:e8:ff:11:2c:51:69:83:
                    97:18:89:93:fb:3d:7e:88:06:bb:82:13:04:09:73:
                    a1:58:fc:16:f9:c2:49:2a:01:b7:80:de:ce:31:6b:
                    40:52:b8:a0:18:32:de:3a:26:f5:01:37:e3:bc:8b:
                    c7:2c:64:79:1d:68:1c:8c:db:c4:60:ae:56:9a:5b:
                    00:86:3e:d2:5f:5a:c2:a9:07:84:96:d9:5f:67:f8:
                    4e:d0:aa:84:43:d1:47:66:65:fe:81:de:f3:5f:4d:
                    0c:c6:97:97:0e:69:a5:98:7b:51:84:20:54:84:ad:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9C:38:3F:FC:F3:14:9F:19:4A:E9:02:9A:0B:88:3E:37:47:25:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea708f73-ebd3-30c9-8bb3-aeab095260ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:13:98:cb:41:be:7e:68:a2:6d:83:2a:fd:7b:44:32:6e:
         73:90:5b:b6:64:c3:60:3e:9f:97:fb:7c:45:01:0f:57:bc:2d:
         a6:a3:8c:bb:d5:b1:2c:87:63:2c:47:46:ba:5f:6b:b5:ad:d5:
         43:8f:54:61:7f:a3:14:14:94:d7:f9:7b:cd:b2:0a:b3:11:77:
         53:03:cb:bd:22:d7:8f:6c:57:38:5e:fe:4b:ea:be:27:37:d7:
         61:1e:17:b0:36:64:09:ae:ad:81:1c:5a:32:c3:2a:e1:53:c5:
         eb:78:ea:71:73:0e:c5:42:48:0c:4c:92:f2:b1:58:5f:a9:9a:
         b7:0c:68:73:f1:3c:3c:95:88:82:79:4d:d7:44:70:08:27:7a:
         68:74:c9:33:24:a6:da:a1:2a:e8:53:a5:d0:e6:e7:b1:77:22:
         7c:9a:ed:ad:3c:6e:67:a4:7e:9c:ea:ab:4f:86:68:09:5e:2d:
         07:3d:0f:0b:f1:0d:56:94:c5:b3:24:59:32:c6:99:ca:6e:cf:
         fc:e6:1c:f2:ec:f0:b1:9a:a3:d8:75:ae:7f:bc:68:2f:df:7c:
         03:04:5c:30:f9:cb:df:b3:79:f1:29:f0:99:a5:8a:e5:e9:e1:
         ea:b9:4c:13:62:d6:49:31:b9:79:2f:ca:2e:08:b3:d8:d4:5f:
         e2:5b:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:12 2025 by rpki-client