Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1186837-b59b-3084-ad5f-4812eb5ad7a5.roa
File:                     f1186837-b59b-3084-ad5f-4812eb5ad7a5.roa (raw, json)
Hash identifier:          NOTD28XPQNPBziAy69YQHf+xKkbq7ruWuEtqdrqiyF4=
Subject key identifier:   48:93:8A:98:BC:8C:3F:03:6E:80:41:61:27:0A:98:FB:34:42:C8:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F1793FFEBBED179A1020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1186837-b59b-3084-ad5f-4812eb5ad7a5.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396577
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f1:79:3f:fe:bb:ed:17:9a:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=65a28d73-d460-4327-8106-a57100420409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:6c:fd:f4:55:b5:30:27:40:f4:21:48:22:
                    b7:47:1b:95:89:2d:ad:a6:e4:2e:aa:1f:55:65:87:
                    07:5c:6e:d7:c2:a5:01:d9:5a:7a:7f:7c:fc:a7:f0:
                    f0:c3:80:c6:c4:59:d4:ac:da:61:31:dd:e5:57:cb:
                    1a:0f:97:d0:2b:48:c9:71:f6:4b:87:9c:34:2b:95:
                    77:d1:9a:f4:bf:ed:bd:eb:3b:b7:42:bc:1c:88:05:
                    a4:ae:a8:f8:03:a6:31:5b:53:28:15:cd:a6:73:62:
                    d5:38:27:37:11:0a:d7:91:7d:b6:79:a5:b1:9c:12:
                    de:c9:93:c7:54:8b:2e:94:ce:e9:5e:6a:05:5a:94:
                    68:14:fd:42:f4:cc:d4:14:f5:a2:f5:be:fe:d6:9a:
                    0a:9e:de:91:41:61:96:96:15:64:68:3a:79:63:51:
                    a8:fe:a6:8f:ec:f5:e8:1b:62:ee:a1:e1:89:14:16:
                    df:ad:aa:97:51:48:65:7c:d4:da:bf:2f:7a:c4:30:
                    1c:79:22:89:7e:4f:84:83:22:75:c8:1d:cc:8a:8c:
                    83:cc:2d:80:d9:86:b1:05:07:fd:c6:5e:ca:bd:56:
                    76:f9:0f:55:be:9c:24:40:77:c3:0b:30:42:7b:19:
                    e8:1b:94:fe:66:4f:6e:70:ac:30:d6:cd:70:58:dc:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:93:8A:98:BC:8C:3F:03:6E:80:41:61:27:0A:98:FB:34:42:C8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1186837-b59b-3084-ad5f-4812eb5ad7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0c:67:08:a0:66:50:f7:e4:6d:ff:56:ff:38:3f:c2:75:5d:
         4f:dd:30:95:9e:41:83:b0:b5:f6:87:4d:59:a9:d1:f5:6b:de:
         1d:3e:92:4b:dc:d8:0b:be:c2:4f:00:2a:b1:c7:9d:7d:a3:23:
         d6:9f:30:60:f5:0d:c2:9f:0c:0f:33:85:d1:75:3f:89:c1:83:
         71:a3:ff:eb:9f:2a:80:39:cb:5d:a6:20:c9:ad:3a:17:b4:b3:
         5e:6c:77:1d:b8:75:da:1b:d7:49:f2:4d:14:bd:87:4f:3d:e0:
         e4:fc:3d:f3:d2:f7:53:a6:dc:f9:15:45:7e:22:0b:33:b0:57:
         83:3f:69:8e:f1:f6:ac:1e:9f:d7:b4:dc:72:f1:88:28:ef:56:
         c8:c9:fe:71:12:ed:4f:6d:a5:25:7c:6c:f5:68:45:38:3d:ee:
         bd:c7:04:55:f3:9c:f1:98:df:a5:dd:1b:a2:a7:d6:79:0f:f4:
         49:ec:4f:ac:5e:40:0a:76:dc:d2:fd:21:a5:9f:85:5f:88:95:
         a6:20:3a:9d:1d:00:ec:78:f0:96:53:1f:7e:52:74:a7:c6:cf:
         d8:3d:5b:03:ae:6d:53:69:9f:73:96:18:99:88:33:73:7b:da:
         6d:cc:ca:f9:b0:b1:e8:26:b5:a5:44:80:43:51:3b:67:ee:1d:
         27:fd:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:55 2025 by rpki-client