Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa
File:                     eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa (raw, json)
Hash identifier:          A0xmc5fZTPD60rtOcQ2Wa4DzziGL1ERH4bGN41Fofwc=
Subject key identifier:   41:4E:9A:85:BC:42:53:F9:24:8F:0F:F4:4F:96:43:D7:EB:4F:68:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB25A761AC6C3ADAB23C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396549
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:25:a7:61:ac:6c:3a:da:b2:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e59d302b-1ca9-44b4-afd4-706990c9f8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:86:b1:fe:77:95:30:0c:01:9b:be:6e:18:
                    c4:5d:b9:ce:bf:92:62:77:80:ab:d9:b1:cc:64:34:
                    52:16:10:e6:d2:ec:b3:1c:57:b1:ea:8a:75:0a:6b:
                    54:e7:a9:51:01:c5:52:81:bd:59:b9:8e:66:ef:07:
                    69:32:5a:08:53:64:42:06:5a:b8:91:cb:a7:be:68:
                    7d:1f:64:08:da:29:a5:10:69:d9:44:b2:ab:48:41:
                    2e:89:9e:5a:7d:91:79:f9:3a:1c:5d:f9:df:34:35:
                    f4:74:80:c5:0c:e5:04:d5:7d:df:dd:e2:63:0a:02:
                    53:3d:8b:ee:96:fb:06:45:c8:31:cc:85:ee:47:0a:
                    66:7c:35:d0:7e:92:6d:bc:d3:74:4a:f9:80:f4:38:
                    af:35:16:bd:00:9d:39:96:1d:46:70:02:25:7c:6c:
                    28:49:5a:54:3f:1a:a9:08:7f:4d:56:e2:23:42:f0:
                    c2:e5:fc:30:ed:8c:cd:b5:9c:4c:30:07:c2:9c:ac:
                    35:b8:bc:b4:6e:11:53:65:e6:3e:cc:1b:ef:2a:fb:
                    5f:91:a8:5b:6e:46:38:45:53:a8:e7:01:54:09:a0:
                    42:62:44:7b:a8:56:ad:5d:34:65:6c:8a:4f:9b:a3:
                    47:6a:90:43:3b:0c:60:d9:80:f3:ef:e8:0c:4d:ab:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4E:9A:85:BC:42:53:F9:24:8F:0F:F4:4F:96:43:D7:EB:4F:68:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eaf88050-0f44-338b-9f9f-31a73cb9b17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:1d:c2:df:75:d5:96:7e:0d:7a:ae:2f:99:4e:58:29:7f:22:
         a7:18:19:2f:98:77:c0:87:f0:0c:2e:f1:7d:10:15:f6:7b:a9:
         13:da:82:b3:a4:99:d3:c9:7b:b6:34:4b:59:29:fe:ee:7d:c6:
         f6:1b:ef:0b:e4:89:2d:0b:05:55:f2:66:a0:c0:39:ab:0e:32:
         81:4f:2f:c4:c5:fe:0e:2a:81:0f:6b:f5:f4:61:cc:91:87:99:
         0e:35:96:59:f4:61:2e:58:90:66:a8:cf:e6:5b:4f:1a:d8:42:
         7d:36:35:f9:e6:1b:39:cb:aa:84:f1:b6:d4:bc:e9:86:f2:dd:
         8b:f7:ae:de:17:5d:8f:8e:bf:3c:f3:f3:35:5e:27:f6:f1:49:
         6c:e3:1f:fc:ff:54:58:73:e7:a1:14:f9:77:76:4a:38:25:27:
         2d:d8:d4:91:4b:cb:34:5a:30:f7:b0:33:38:e3:a8:0f:cb:bb:
         2e:27:41:f0:69:13:11:56:f4:2f:c9:e7:da:9f:c3:a1:31:b2:
         48:26:72:99:ae:f1:9c:5c:11:f9:b5:18:66:42:70:5e:a3:f6:
         48:b9:be:5c:86:30:23:e0:8a:0f:41:f5:a6:3e:b0:57:2a:30:
         59:2e:e4:c6:3f:92:82:29:a7:19:15:82:9c:bc:63:13:d6:f7:
         e6:8e:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:44:59 2025 by rpki-client