Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa
File:                     ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa (raw, json)
Hash identifier:          xKcD+K4KSrT1jS7LWfyZ41reQCSOjx3Bipf2MmVhhP0=
Subject key identifier:   63:80:27:F0:A8:E8:7A:E7:FF:67:1D:9B:95:C1:05:DC:B6:16:6F:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AF2BADFEC76D61A09A29D980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     396586
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:ad:fe:c7:6d:61:a0:9a:29:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=5e49f416-c087-4441-92a4-6278f4cfdfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:4a:5e:cb:33:8c:44:86:7a:d8:60:7c:49:
                    bb:87:6d:25:a2:b9:96:99:d3:9d:fc:66:31:5d:f7:
                    86:e9:13:31:7b:b9:3f:e3:1c:70:43:4d:09:cb:d7:
                    29:7a:84:a6:02:12:e6:67:e8:c2:81:c0:cb:c8:3f:
                    e4:ec:41:8d:a3:bc:67:20:a9:14:80:78:53:15:04:
                    30:59:d5:de:48:d6:f6:2c:60:4b:98:b5:9e:6f:26:
                    3a:b2:d2:40:ce:b9:5e:7c:9b:b8:83:d5:a4:01:0a:
                    f5:0e:14:f4:31:55:5b:8e:3b:49:c5:23:2f:54:18:
                    c5:63:63:22:1e:fc:2a:a6:75:83:cd:23:85:6e:cc:
                    b1:29:8a:bb:30:33:c0:e9:db:63:05:96:d8:4f:4c:
                    ee:96:7c:47:4c:2b:17:0d:d9:80:65:e6:16:53:44:
                    c0:92:06:8f:37:d8:74:33:8f:70:13:65:5f:48:2d:
                    0a:c9:4f:4a:16:74:3e:20:2e:dc:05:57:75:5b:fa:
                    2f:47:41:b2:0e:15:5e:17:70:cd:2b:71:52:62:8e:
                    ad:f0:5e:c6:6e:7f:af:32:19:d2:51:6e:42:e5:ca:
                    65:cb:c5:bf:5d:31:3d:b0:9b:29:73:8a:9f:80:48:
                    ca:db:b9:d1:ac:06:a7:88:99:08:32:98:c0:16:4e:
                    07:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:27:F0:A8:E8:7A:E7:FF:67:1D:9B:95:C1:05:DC:B6:16:6F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5a:08:f6:53:be:0e:70:38:f8:8f:33:c6:2d:26:4d:a6:c8:
         ad:4f:4c:3c:b5:90:a1:59:40:06:fb:e1:22:71:ce:09:2c:ab:
         fc:fd:78:25:0f:03:e0:1d:27:c0:2f:21:b9:1b:a6:a4:69:15:
         ed:81:ab:97:bb:54:80:b5:1c:0b:e0:a0:6d:f9:2b:0d:82:4d:
         01:c7:31:87:e9:c5:0d:e1:92:98:42:8f:6e:7c:f2:b6:fa:b1:
         49:43:e8:b9:71:ac:54:d4:4c:8e:8b:16:1f:43:2b:fe:9b:57:
         b4:7d:7f:d6:97:39:b4:2e:6f:d7:53:5d:fb:a0:f6:5d:bf:e1:
         75:06:0e:62:34:8d:3b:55:62:54:0a:53:26:1a:d2:4e:a6:c5:
         4a:c9:91:ae:40:32:08:d3:ff:ba:47:42:cf:53:b8:c3:b9:4d:
         2d:51:af:e2:4f:1b:95:30:a6:91:b2:b5:a1:90:e3:00:d5:2f:
         a3:74:90:21:54:7c:47:04:99:e1:6d:a1:8c:cb:06:7f:16:f0:
         9c:99:96:16:29:b6:8a:5d:34:81:a0:65:12:d2:af:7d:58:ab:
         ae:a9:4a:69:94:b1:82:ef:7f:91:99:97:d4:fd:13:70:bc:1e:
         28:73:78:88:00:1f:e9:0c:a5:7c:38:8a:4d:17:ba:35:f5:f2:
         3d:0e:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:42 2025 by rpki-client