Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede4c0d4-eff4-3326-8e07-78a7b0ee3165.roa
File:                     ede4c0d4-eff4-3326-8e07-78a7b0ee3165.roa (raw, json)
Hash identifier:          ga6ddkD/ek0d8Hs6n2NUBe3IvAs8i7R5oRDViNEJw2M=
Subject key identifier:   7B:6D:D2:15:77:0C:4C:9F:56:55:BB:E3:37:6E:F3:A3:10:44:EF:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB11837894C58B3A9E2080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede4c0d4-eff4-3326-8e07-78a7b0ee3165.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36617
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:11:83:78:94:c5:8b:3a:9e:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e2df2c38-b4c9-47d7-9df7-750d0514c2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:45:4d:cb:09:c4:26:fd:50:b8:3b:93:28:
                    c2:d3:58:cb:1b:ad:33:42:c6:2c:35:8f:54:31:74:
                    9d:59:1c:ad:5f:fd:1d:dd:3f:3c:77:24:5d:c7:b7:
                    f2:fc:83:57:57:c5:82:13:d8:3d:52:bc:cf:74:47:
                    4e:68:16:b5:0c:bb:87:93:61:ea:09:6e:35:1c:d2:
                    b9:fe:10:3a:8a:74:cf:34:77:65:55:87:d2:30:56:
                    0b:65:f5:6c:65:79:76:04:59:fb:e7:0e:18:25:39:
                    e5:ab:2b:5a:25:73:4c:35:5f:05:69:65:aa:af:6b:
                    52:e5:03:e8:de:5b:94:72:ec:13:7c:03:90:63:52:
                    df:a0:65:33:5e:0b:3c:35:aa:90:4a:1c:9d:8d:11:
                    62:a5:65:a6:02:b8:35:29:68:37:0f:13:0b:6b:f2:
                    50:96:c8:6c:ef:22:c5:1b:f8:df:d6:64:95:74:b3:
                    6d:3e:57:c9:4a:a5:c5:6b:7e:ea:44:06:10:03:f8:
                    4b:ac:23:19:19:a1:bc:c8:8f:a0:cf:6a:32:b1:ab:
                    5d:94:ea:76:90:8d:b9:b4:51:26:06:80:43:53:24:
                    20:d1:71:43:e1:fa:3a:3c:8b:a3:0a:c5:c3:ee:3e:
                    60:55:c8:94:97:a4:00:b1:24:81:f4:5e:cd:a1:b8:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6D:D2:15:77:0C:4C:9F:56:55:BB:E3:37:6E:F3:A3:10:44:EF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ede4c0d4-eff4-3326-8e07-78a7b0ee3165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:cd:59:44:f3:c9:2b:00:c1:64:40:4d:a0:98:26:21:53:
         85:cc:a7:2a:26:83:e3:fe:5a:f9:ff:7d:7f:be:7e:9e:84:46:
         bb:60:cd:e9:e6:f4:e4:4a:fe:17:f3:1f:9b:1e:7e:d5:f9:4e:
         de:00:29:e6:2a:ac:79:63:b7:6f:5e:1e:af:ba:b3:1d:69:2d:
         c2:9d:7a:dc:49:fa:4c:8c:47:49:fd:90:c8:26:3d:14:c1:25:
         15:98:f9:92:3f:36:0b:52:9b:eb:ba:a1:36:cb:4a:b6:f8:c2:
         a4:76:23:53:b2:e8:b9:b0:b1:b4:97:30:db:d4:c3:b3:0c:0a:
         65:c4:84:50:5b:c3:3d:52:f2:76:55:3a:d2:69:a3:a0:a2:9b:
         75:d4:6e:a3:c3:7d:74:44:b6:2d:0a:d3:de:c4:f6:16:73:f0:
         73:9b:12:55:51:b8:6c:ba:d2:57:0a:8b:27:e4:45:96:ad:ad:
         6c:82:2e:8a:e2:75:98:82:42:e3:70:d9:3f:ee:0f:50:15:a9:
         43:08:b4:75:f6:c7:dc:b6:e6:6a:23:4d:48:e2:56:67:b6:53:
         bf:29:1f:d3:df:5f:64:5e:5f:ea:af:4d:b4:32:f3:c0:80:e5:
         df:17:b0:72:5a:4f:99:bf:26:80:1f:e0:14:36:58:c5:93:b3:
         c0:b7:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:25 2025 by rpki-client