Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f37306f3-59a8-3b2f-8bc9-f4e30acea30c.roa
File:                     f37306f3-59a8-3b2f-8bc9-f4e30acea30c.roa (raw, json)
Hash identifier:          vHFjETefbN/BS9ElIBRYu9Po1jic3ny59Ftv1Ime55U=
Subject key identifier:   6A:1B:4F:36:5B:E6:1B:66:ED:0C:10:86:5E:A8:29:3C:C5:FA:95:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAF886A19C79FA86A2F388
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f37306f3-59a8-3b2f-8bc9-f4e30acea30c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396616
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f8:86:a1:9c:79:fa:86:a2:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=40165ac7-17c4-473b-824b-a7487e0738d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:08:d6:11:cb:ba:eb:3c:63:da:fb:50:24:
                    b1:d2:16:eb:8c:fc:94:51:8a:42:f9:7d:45:56:e9:
                    0a:d4:7b:b6:45:38:52:f1:cb:f8:b4:1d:c7:8b:c1:
                    19:99:fc:39:c4:aa:89:17:4f:51:e9:91:12:db:37:
                    10:de:c8:fa:ab:83:2c:51:56:2c:c6:09:63:9d:2d:
                    47:27:21:0b:ca:40:8d:47:92:c9:d0:0c:99:be:0b:
                    29:69:04:a5:51:a6:d9:f0:3b:3f:ab:20:6b:84:07:
                    82:65:53:d4:64:6a:81:8c:7c:ec:15:dd:68:14:10:
                    64:8b:90:56:76:4f:72:e6:4b:2a:8b:dd:64:5e:cb:
                    1e:98:b3:2c:9a:26:d8:9c:7b:00:1f:e1:7e:aa:39:
                    63:fd:ab:1c:8d:33:a3:21:86:3e:b1:23:68:82:7d:
                    bb:c0:46:d1:b2:a5:08:78:69:73:3d:03:67:c7:ef:
                    47:d7:25:e8:b9:b7:f3:27:5a:65:d4:de:a1:a1:fb:
                    ef:fd:3c:e1:d4:7a:2e:b5:6c:ef:64:47:2b:03:fe:
                    09:3f:2d:9f:a4:89:fd:e9:4c:52:fa:99:bf:56:96:
                    29:58:24:66:1a:fb:22:3a:8e:02:34:03:2c:89:aa:
                    d7:7a:0d:6f:ab:d2:21:1f:fe:a0:9c:9d:4a:dc:2a:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1B:4F:36:5B:E6:1B:66:ED:0C:10:86:5E:A8:29:3C:C5:FA:95:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f37306f3-59a8-3b2f-8bc9-f4e30acea30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:b8:5f:23:5e:2f:24:78:57:bf:8f:d3:03:c2:56:18:1a:
         41:ef:92:ad:84:1b:ba:2f:9b:a2:bd:3a:45:1c:d9:e6:c1:c9:
         1f:c7:10:b8:e6:b7:7a:e5:1f:09:b3:a8:9c:da:85:5f:65:f6:
         5d:21:bd:91:d7:4b:8a:56:e6:d7:0a:dd:f5:87:78:03:b8:91:
         ea:91:a1:ec:e7:a9:fc:e9:11:90:93:15:d3:cc:e5:9d:08:07:
         31:c6:7b:00:c9:b8:1f:c3:72:3d:ca:90:ce:09:20:46:c2:a1:
         dd:45:99:d6:eb:17:b5:8e:84:dc:60:fe:b4:4c:2c:e0:18:b5:
         20:16:0f:ad:03:53:51:06:a3:75:51:32:41:02:47:c8:ae:d1:
         12:c6:06:a7:8f:24:64:5f:85:ef:8f:7d:7d:7f:fe:c1:37:2c:
         28:99:49:2a:cb:31:a9:d3:b3:d0:f5:fe:e1:c2:83:1f:54:be:
         a7:a2:8f:03:5c:78:2f:3b:47:bc:a8:2c:06:2c:c7:42:07:8f:
         76:d8:c0:c6:fe:69:cf:b8:1a:e6:08:bc:21:2e:75:cc:f1:a0:
         20:85:02:17:e1:5b:62:71:d7:17:e5:da:20:01:c9:20:65:c7:
         92:f0:6a:09:e4:00:2a:0b:37:c5:e6:8d:b4:02:bb:37:dd:fc:
         ac:c0:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:26:23 2025 by rpki-client