Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa
File:                     f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa (raw, json)
Hash identifier:          ll2NvgIvvOVIAoxVKFe37BDtxtxjzcWFPYJp393PwIQ=
Subject key identifier:   14:86:0E:1D:91:59:8F:F0:D0:26:D0:EE:69:BE:1B:60:9A:58:8F:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848CB089C2D71E31C27C351F980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa
Signing time:             Thu 06 Feb 2025 13:33:20 +0000
ROA not before:           Thu 06 Feb 2025 13:33:20 +0000
ROA not after:            Wed 07 May 2025 12:33:20 +0000
asID:                     396549
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:08:9c:2d:71:e3:1c:27:c3:51:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  6 13:33:20 2025 GMT
            Not After : May  7 12:33:20 2025 GMT
        Subject: CN=36e2d0d8-eda2-4a74-80c0-d279742cafd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:a8:b5:05:ae:a8:54:a2:bd:54:ae:04:4f:
                    f0:84:20:cc:50:04:fa:14:d4:26:ae:43:31:29:a9:
                    cb:d7:1a:e6:52:c4:7a:bc:62:fb:01:41:43:8c:5f:
                    ae:24:aa:b8:2f:a0:0e:17:7c:cc:4b:71:75:00:40:
                    ca:71:67:66:08:d9:4a:a5:e4:62:24:96:e1:61:f1:
                    09:69:15:c3:f4:66:e0:6e:8d:01:20:df:cd:33:27:
                    96:81:42:3b:74:8d:14:98:76:84:fe:27:bd:74:7e:
                    a5:6c:6a:6f:36:1a:ad:f9:8c:8a:d5:65:a0:48:4f:
                    f5:7a:cf:52:43:12:f2:20:5e:11:ee:a5:9f:e5:07:
                    f6:b0:45:40:bb:74:cc:73:51:b7:bd:bb:40:c6:9a:
                    c1:4b:5a:c0:8e:89:f9:f5:3f:e3:dd:be:cf:d8:63:
                    36:ee:a8:ce:78:9a:2e:94:e6:b4:3e:70:e9:96:ad:
                    13:69:41:c4:1c:e3:e2:5c:72:a6:ca:62:9c:bb:46:
                    4f:3a:45:7c:e2:1a:0a:95:b3:14:2a:8a:cb:76:c0:
                    67:40:c6:16:3b:dd:57:8c:11:0b:f4:b0:5f:4c:34:
                    c2:3e:16:a0:6e:c3:e6:a1:b0:5c:c3:4e:15:c9:a4:
                    c6:69:9a:b3:68:4e:b2:dc:d6:45:7e:52:52:27:eb:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:86:0E:1D:91:59:8F:F0:D0:26:D0:EE:69:BE:1B:60:9A:58:8F:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f35fdefc-f3bb-3974-bfe8-457a0d138fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:60:20:f4:8a:51:a4:78:07:ea:db:74:53:5a:b9:29:45:f0:
         e6:e6:2c:69:bb:f5:0f:a3:43:c2:2d:c2:64:c7:23:ee:7f:a2:
         cd:f6:25:c3:35:9d:ba:33:6a:ae:34:df:2c:29:ae:f8:9d:33:
         9a:ce:96:25:9c:59:d8:81:81:64:50:83:01:e9:0f:9c:7f:5c:
         ca:44:4b:da:fc:c5:78:00:3f:11:0a:65:1b:19:68:5e:c3:0d:
         a3:0e:f6:fa:21:5c:26:bc:b0:de:00:1e:e4:b5:a3:a0:14:2c:
         e2:db:b7:ce:95:f0:61:6d:60:af:28:68:17:5e:a8:d3:93:fd:
         54:91:73:df:41:9a:b7:dd:6e:66:73:aa:0f:3a:b1:06:f8:60:
         ef:8c:b4:d6:92:ff:75:1d:92:ab:22:29:1c:97:df:de:72:46:
         1c:20:7f:66:e1:af:5d:c0:8e:fd:8c:22:72:71:2a:6e:5b:ae:
         01:0d:31:d3:d6:76:21:2e:91:bb:3d:9d:93:86:f5:5c:f6:f9:
         5a:f1:2e:b6:e9:43:7d:8d:52:5c:7f:44:32:64:33:bc:63:02:
         0b:5a:e5:98:6d:72:e6:ad:41:d8:c1:c9:58:11:f8:ff:df:bd:
         fe:d4:08:75:0e:1a:d8:b6:9d:84:ca:71:62:a9:d8:8f:e4:38:
         c8:83:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:39 2025 by rpki-client