Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f434c018-8ddf-3449-90e9-d5f39d75eff5.roa
File:                     f434c018-8ddf-3449-90e9-d5f39d75eff5.roa (raw, json)
Hash identifier:          8NvgDuFEOS/tFcit/5Xi3/tqY8HuipDwoEsqVH8GqFs=
Subject key identifier:   09:ED:67:7B:48:0D:0F:FC:C0:AA:A8:CE:30:7F:B6:A8:39:B5:52:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584953C450D95180C7595C151280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f434c018-8ddf-3449-90e9-d5f39d75eff5.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396543
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:50:d9:51:80:c7:59:5c:15:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=40b0af5f-4e7f-4740-a3c2-c3428c89c5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:99:e8:c1:c6:b8:1e:77:61:c7:38:17:2c:
                    9a:bb:ea:94:80:43:ce:ee:99:62:b0:cc:28:85:0d:
                    0b:00:15:9e:12:6e:65:da:40:e7:35:83:19:37:ab:
                    e6:52:f0:42:86:fa:95:99:8b:03:51:d1:98:9f:c4:
                    b4:ad:c3:12:7c:71:df:af:08:9f:f9:70:78:68:31:
                    bb:50:c5:f9:11:71:d3:d0:23:08:f2:f6:f7:8d:f1:
                    21:f3:8f:16:04:ad:35:b9:07:8c:1b:dc:84:11:2e:
                    64:f9:7b:4e:76:5f:4a:27:9d:cb:a1:6c:ce:65:41:
                    a1:a5:e3:f8:55:c8:41:e4:a0:46:d3:52:94:84:3a:
                    29:ec:f9:e4:d2:58:32:1a:c7:18:b1:cf:b5:9d:73:
                    87:c2:a3:ca:93:f6:5d:61:1b:b4:7c:08:c2:29:41:
                    95:91:32:d7:99:5e:84:d1:1a:1a:8d:e0:9c:b6:bd:
                    82:60:18:5b:44:b1:83:f4:bc:37:70:a9:c5:00:55:
                    b1:44:50:14:14:7a:72:55:36:da:41:73:05:05:90:
                    c2:7c:ca:56:3c:b3:72:e9:ad:a5:b5:e9:66:46:b8:
                    26:b6:be:6a:44:8d:e7:81:51:fe:66:02:0b:c4:02:
                    b9:09:78:a8:95:33:12:a0:f4:4f:a7:4e:19:5c:d0:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:ED:67:7B:48:0D:0F:FC:C0:AA:A8:CE:30:7F:B6:A8:39:B5:52:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f434c018-8ddf-3449-90e9-d5f39d75eff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:85:b9:be:e6:15:ff:61:01:1d:96:6e:d0:bf:1d:80:46:3d:
         15:f1:f0:b5:ce:37:4f:bd:a1:c6:29:d9:a4:89:41:5d:d4:0e:
         61:f4:6b:58:56:0b:82:a7:4f:ad:04:2b:c3:f6:45:24:82:98:
         fb:47:4e:59:c0:04:e5:85:11:35:c0:83:19:bf:55:20:4f:50:
         0f:0e:33:05:e0:d7:0a:27:e9:f4:e6:8a:7c:49:39:40:3c:90:
         06:26:11:2d:d6:fa:9b:1b:b6:56:df:97:de:1c:32:12:f4:15:
         50:e4:d8:bd:d4:bb:d3:4e:76:56:7e:c0:3c:ce:e9:b0:e3:c5:
         24:4b:d1:7f:01:5a:24:ed:80:31:c3:9c:1a:5b:65:28:e5:6b:
         1c:8b:89:c5:40:25:2c:22:38:f1:b2:c5:c6:f5:a9:64:41:bf:
         7e:7e:70:6d:1c:4a:2e:dd:f4:01:da:ef:3f:7f:b4:00:37:10:
         da:a0:ae:32:81:ea:24:94:8a:3a:f5:4e:2f:68:8f:f1:a8:1e:
         2e:90:b1:a5:39:de:ea:0b:50:27:3c:12:d5:cb:0c:a6:fe:07:
         09:8b:00:a2:08:ab:26:da:79:d1:9a:76:33:d8:63:95:e9:bf:
         fe:21:5c:3b:be:44:9e:cb:a6:32:5a:fc:a6:4d:12:31:4a:fc:
         11:62:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:57 2025 by rpki-client