Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa
File:                     ebb2ceae-320c-336b-bf49-95fc0448750d.roa (raw, json)
Hash identifier:          d04MgXBaI3YPIor5HnQB9PiToz8ZWXCfZzqIAwzyp0M=
Subject key identifier:   FF:63:65:EB:CB:4C:7E:FB:66:43:0E:BF:FA:E2:E8:89:3E:84:1B:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DAFC2C3EBC003AF45300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396558
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:da:fc:2c:3e:bc:00:3a:f4:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=3ed45651-32be-47fd-b384-50291e0647ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:da:0e:6d:a8:86:10:bb:e8:2d:e1:91:b6:
                    a9:60:23:23:78:99:08:d8:57:ee:ad:c8:09:5c:6b:
                    5c:77:ec:ac:02:ff:30:b7:13:84:ec:4e:70:39:59:
                    02:32:b7:10:af:9b:68:3d:a2:d7:ca:a4:95:ab:2a:
                    87:27:17:ca:2a:12:2e:77:38:34:e4:3a:ed:e3:32:
                    cc:c1:63:6f:ff:f8:e1:e4:02:83:5d:09:77:55:23:
                    fc:bf:5e:b5:d0:9d:e4:2b:5d:6d:cd:99:62:b0:97:
                    b7:39:3f:9f:e7:5a:35:ed:9b:56:21:48:1c:a9:4c:
                    92:44:08:78:e2:2d:d7:87:ee:a4:8f:48:f0:8c:de:
                    aa:cf:57:62:51:b3:87:c2:a8:59:bb:84:a4:c3:2e:
                    e2:f6:03:7f:f7:20:30:2b:c9:15:81:8d:53:83:46:
                    40:e8:2a:5b:98:78:47:8d:7c:b0:43:0c:0c:15:9c:
                    d7:6b:47:eb:09:ae:62:7d:1f:27:1c:1f:ff:8c:e7:
                    e0:72:bb:80:b4:05:b3:98:26:8a:29:a9:9e:38:cd:
                    39:b4:1f:82:46:7b:99:37:a4:f1:33:8f:af:09:07:
                    58:8d:78:dc:80:7d:e3:aa:e5:c7:9b:a6:70:cb:4a:
                    90:17:bf:69:58:a3:65:c0:3d:10:c1:fa:e7:69:d3:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:63:65:EB:CB:4C:7E:FB:66:43:0E:BF:FA:E2:E8:89:3E:84:1B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:3f:92:0b:24:89:59:aa:bb:ee:92:7d:8a:9c:c8:ec:44:
         e8:96:bd:da:82:a6:c4:71:ee:33:74:b3:5d:ee:69:b3:bd:05:
         be:66:b0:21:06:98:cd:45:35:dd:fb:32:74:0f:7f:e0:1d:ca:
         a4:f4:18:d5:6e:6a:be:19:6b:7e:40:a8:f0:e1:74:cb:fc:12:
         c8:c5:d9:1e:d2:ee:9a:4e:a7:05:d4:0d:22:19:d8:89:33:72:
         8c:5c:8d:37:f2:f9:af:85:cc:f7:52:8f:09:98:12:06:6c:a7:
         a5:a3:ff:3a:e3:76:8d:3f:43:b9:fb:19:e4:45:34:57:cc:a7:
         1f:be:fc:cb:6d:4f:b9:9e:4c:6d:2e:bc:4d:1b:b0:a8:67:3a:
         79:09:b0:88:ce:e9:36:8b:65:12:ec:51:74:b9:4e:dc:74:77:
         86:f3:fc:93:4a:d6:2a:d1:a5:00:cf:22:3e:be:33:50:96:e2:
         19:72:52:46:82:7a:f3:cf:bf:02:db:e8:87:2d:cb:87:67:ce:
         5d:69:0d:8c:79:2e:32:cf:b2:64:a7:5b:5a:8c:fd:60:ab:ea:
         b6:b5:23:a3:1d:0f:65:0c:82:ac:11:20:e7:85:c2:7e:18:e2:
         f9:88:ce:7e:1c:42:d6:9e:cb:57:09:8c:43:9b:9e:fb:b9:13:
         d6:1d:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:51 2025 by rpki-client