Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d38032-e5aa-3c2f-aa55-70ce2bd85509.roa
File:                     f4d38032-e5aa-3c2f-aa55-70ce2bd85509.roa (raw, json)
Hash identifier:          bgarRG1KRFzvRAgrRdx0ABTI3HWoZ0WyQhzzUL8l5A8=
Subject key identifier:   60:EC:FF:02:ED:24:B3:F3:31:5A:FC:BF:83:3E:04:EC:9C:3D:4B:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D03082566A3E570B3240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d38032-e5aa-3c2f-aa55-70ce2bd85509.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396584
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d0:30:82:56:6a:3e:57:0b:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=9c5a34e2-5354-4879-9e60-c78e9afaf86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:0e:95:c0:b7:d8:3b:7f:d0:e1:1b:20:77:
                    67:dc:47:ce:f0:00:b5:c9:53:ba:64:11:eb:b8:02:
                    31:3b:6f:7e:e7:11:2b:8d:e6:8b:91:09:1b:6e:62:
                    16:2f:a1:ad:16:45:71:b0:91:f5:5b:f1:a5:fb:aa:
                    7b:6c:ea:d6:9b:3f:99:85:34:5d:ff:3b:b5:64:05:
                    55:cf:68:19:37:98:1e:81:97:10:bc:50:0a:3a:c1:
                    ce:c9:97:69:6e:02:f7:51:be:20:7b:f2:32:7d:79:
                    a9:4c:10:3d:05:36:86:19:2b:0e:db:4b:d2:5c:66:
                    3c:3c:93:3c:46:3f:80:5b:01:40:6b:e4:fe:bc:a2:
                    32:d0:2f:c0:cd:c1:3c:e3:c3:bc:a8:1b:c1:04:87:
                    69:d3:67:d8:fd:23:f0:5b:6a:7e:a8:9b:6a:74:33:
                    95:3d:5d:54:be:32:e1:4d:76:d5:e3:29:de:da:dc:
                    8a:64:94:55:de:e8:eb:bf:93:79:8c:a4:6f:d2:e8:
                    54:25:17:5f:14:71:e8:57:60:69:fe:80:72:f7:5e:
                    a1:04:06:ca:11:50:4b:46:31:09:49:80:50:c0:8a:
                    d3:fc:bd:e7:57:5d:84:9b:23:2f:e3:b2:89:40:c2:
                    54:9c:61:2b:f2:32:e9:1d:a5:f3:a5:a0:09:2d:80:
                    2f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EC:FF:02:ED:24:B3:F3:31:5A:FC:BF:83:3E:04:EC:9C:3D:4B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d38032-e5aa-3c2f-aa55-70ce2bd85509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:7c:a7:4b:44:d6:66:4d:65:63:5e:4e:7d:5d:6a:0d:b5:
         3f:53:49:fc:6d:2b:fa:b5:2f:12:24:df:2f:3a:5a:8f:73:02:
         e0:d9:40:90:c4:1b:9c:32:16:ee:f4:d0:6b:b3:cb:94:44:3b:
         73:25:0e:20:25:f6:e8:a3:34:6a:b6:57:d3:60:94:3a:a8:5e:
         20:87:de:00:18:e7:91:e4:1a:b0:64:96:ae:01:da:bc:5a:48:
         f6:9c:27:02:54:b2:be:82:fd:46:1c:9d:4f:21:b9:bf:17:d7:
         a4:85:6a:e9:78:37:f9:5b:f4:51:53:4c:5f:23:97:77:7c:06:
         7b:b9:d7:f5:27:e7:21:4a:e1:00:97:72:dc:4d:5e:98:16:ca:
         cd:cf:40:ec:4a:61:2f:89:6e:d4:9f:26:31:a0:b8:43:94:6f:
         84:1a:07:0c:5b:0c:7a:f1:03:67:92:87:ed:c4:9a:79:ff:30:
         8d:52:05:97:93:6d:40:8a:cf:14:0c:6b:ec:d2:c3:3a:d6:f8:
         7a:b7:ec:89:ce:c4:9f:a1:cc:8c:e6:b4:03:65:f7:e0:19:8c:
         d7:79:6b:2d:aa:da:83:45:3c:ae:41:26:ce:e9:4f:f5:d6:a8:
         af:1e:61:5c:bc:08:df:ab:e6:5f:3a:55:37:1c:64:36:0d:db:
         68:26:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:22 2025 by rpki-client