Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44c067f-e8cf-3bd1-9190-093b7cec3dcb.roa
File:                     f44c067f-e8cf-3bd1-9190-093b7cec3dcb.roa (raw, json)
Hash identifier:          Vxfrzxn+SKQuoLaMM1snOE054vYhfirb/S/h6DE8LXE=
Subject key identifier:   E7:90:7D:A0:3F:DE:81:98:CD:A9:E1:90:83:7C:A7:00:80:C0:58:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F7D4AA1CC77F1FAEF680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44c067f-e8cf-3bd1-9190-093b7cec3dcb.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396583
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f7:d4:aa:1c:c7:7f:1f:ae:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=494b2d70-808d-4bbf-85fe-bcd7c80d13fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:aa:7b:58:21:e3:73:36:2d:be:6c:c7:84:9f:
                    93:b6:2e:6b:c9:b9:58:b2:66:3a:56:fa:c8:cf:e6:
                    c3:85:8d:ed:f4:d4:84:3e:5b:f0:9d:09:a8:44:69:
                    45:57:b5:69:4d:eb:b7:40:47:5f:7b:46:f7:79:22:
                    cd:6a:95:de:2b:3a:d8:eb:e9:00:cb:df:97:30:cb:
                    fc:71:87:6b:74:86:10:29:d7:c8:09:96:3a:64:f1:
                    53:de:78:b6:87:55:ce:0e:e5:9a:7e:63:0c:36:de:
                    c7:7f:26:ef:7a:ff:c0:a3:53:25:7a:f6:73:6d:a0:
                    50:c6:58:f3:0c:30:73:46:80:d0:00:16:2d:39:c6:
                    d8:d0:59:cc:1a:09:8d:e4:68:0d:bf:a7:7d:e4:e0:
                    f7:22:ee:05:25:71:48:a0:7d:d7:c2:a5:28:86:f8:
                    62:40:4c:57:9f:13:5a:1c:c5:f4:b3:6a:11:be:6f:
                    1c:2c:6b:e6:e1:bd:71:62:7c:bc:2e:42:bd:97:ec:
                    cb:c5:72:2e:00:66:a1:b8:1d:27:04:04:7e:be:58:
                    a4:43:00:34:a6:fc:8a:6f:fa:f0:8f:0e:13:3f:42:
                    f4:06:8a:2f:2d:45:82:94:bf:b7:c3:d5:f5:6b:d9:
                    86:b1:49:f3:94:5b:aa:96:e5:dd:8a:a6:51:67:15:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:90:7D:A0:3F:DE:81:98:CD:A9:E1:90:83:7C:A7:00:80:C0:58:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44c067f-e8cf-3bd1-9190-093b7cec3dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:44:6a:db:08:af:cc:b4:f1:0d:dd:5c:d5:0e:fd:6a:1d:6c:
         17:77:45:d2:ec:9f:35:68:5d:b2:4b:0f:72:95:d1:af:cd:6f:
         15:4a:b1:cb:3d:43:76:a0:ae:60:7a:04:68:2d:b7:22:5c:13:
         3c:19:9c:49:16:4d:2d:f1:a4:b6:1a:8d:17:a5:55:68:d2:0c:
         e4:2b:8d:66:b2:ae:0b:d2:f6:c1:12:d2:4d:53:e4:cc:ce:55:
         38:5a:e6:20:0e:ab:61:51:25:c7:f7:36:a5:8b:9e:e0:c8:48:
         6b:44:fe:c2:de:24:b4:97:f7:b3:4c:08:20:50:62:9d:f6:7e:
         92:67:ed:2f:32:92:72:5d:f6:b8:74:64:3f:eb:1f:07:de:2f:
         af:b6:50:f3:63:95:91:d7:5c:3c:cb:70:a7:40:44:cd:b2:43:
         e6:94:6d:96:eb:ed:a8:df:8a:79:0f:79:f1:bf:c2:9d:15:4f:
         57:76:22:c9:3f:cb:97:f2:33:c4:a3:fb:5e:a5:29:82:ae:03:
         61:e6:1f:16:83:e2:83:01:80:0f:bc:e7:8e:66:45:0c:88:65:
         bc:ea:3d:15:32:d1:72:c6:9b:fd:e2:69:2a:9b:cb:29:c4:30:
         59:12:09:98:8f:e6:9f:b0:10:7e:c5:ed:47:57:f0:73:9c:a7:
         e4:c2:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:38 2025 by rpki-client