Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d556e3-b522-33e0-ade3-41634eb6f71c.roa
File:                     f4d556e3-b522-33e0-ade3-41634eb6f71c.roa (raw, json)
Hash identifier:          0QGD3l6xU7UGiwKygXLTsrAHwfCY6xI9LXN877Be9l0=
Subject key identifier:   A2:D4:6F:CA:ED:66:D9:BA:B7:E4:EE:8D:D1:76:61:DF:6C:91:30:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFB92C14FD8C5B5C35600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d556e3-b522-33e0-ade3-41634eb6f71c.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396567
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fb:92:c1:4f:d8:c5:b5:c3:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1a4b13cc-44f0-4a26-91a9-462b07cfc9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:f9:85:47:79:0b:50:4d:57:e0:c9:2c:86:
                    e9:74:1e:16:13:c5:85:d8:02:09:b4:e3:85:3f:48:
                    a8:37:1a:49:80:0f:54:f7:eb:ac:7c:47:90:04:8f:
                    24:87:38:90:38:0b:13:e0:cd:a0:86:43:f3:ea:4b:
                    e9:2f:90:5a:9b:25:67:88:84:39:f0:1d:46:35:2c:
                    42:9c:05:7c:c0:c9:b7:f2:db:25:b6:0f:64:25:0e:
                    bb:93:27:83:49:1d:28:2b:e2:53:fb:1d:0b:00:71:
                    76:5d:82:2a:22:1a:4b:2a:17:6a:29:f3:3e:fb:f3:
                    f9:f8:23:16:8a:30:04:93:33:64:cf:e2:87:17:c8:
                    f4:6e:2d:14:16:5e:45:6f:1a:f4:8c:69:10:51:ad:
                    1c:17:95:90:f3:61:07:80:4c:74:83:90:81:39:6a:
                    db:a7:ee:0f:81:f7:97:a1:33:f4:48:1b:02:c5:82:
                    ea:37:bf:b0:d4:c7:df:28:69:04:d2:2b:01:21:59:
                    90:39:6e:fa:bb:a3:e1:1c:2b:73:90:2e:86:a8:e6:
                    a8:d5:0f:18:19:ee:42:17:78:4f:b0:b5:4a:64:a5:
                    c5:4f:58:2e:74:4d:2b:b0:a8:af:9f:c7:e3:5c:cc:
                    bd:06:fa:fd:59:f7:44:ac:15:97:c9:a7:29:b4:98:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:6F:CA:ED:66:D9:BA:B7:E4:EE:8D:D1:76:61:DF:6C:91:30:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d556e3-b522-33e0-ade3-41634eb6f71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:70:6b:4d:0a:22:53:30:f6:17:85:ea:3f:14:d4:0e:de:dc:
         a1:43:b1:02:51:a3:cf:ea:86:98:58:22:5c:ab:1b:9e:1d:4a:
         06:43:a5:5b:62:c0:56:22:15:70:9e:7b:89:2b:cd:36:13:ad:
         46:b2:11:5f:99:6d:8c:2d:ff:4d:cf:a2:f5:07:3d:b7:d5:ba:
         45:10:55:4d:79:6e:de:a7:ed:11:b2:f1:08:a6:44:d4:d2:08:
         50:5f:1b:1b:b6:e7:1f:b8:48:70:9d:ff:4a:56:3d:25:03:92:
         e9:6b:97:c1:e8:d9:4b:ca:31:7b:d1:22:a0:95:da:b2:d0:c2:
         24:7c:8e:0b:59:83:95:cf:24:06:ea:1a:42:46:a7:12:6b:34:
         70:5a:e8:97:a5:3b:57:b3:9e:4e:c8:0a:9d:b1:6e:06:b5:74:
         46:e0:62:da:b7:ab:f9:d3:ce:00:64:31:77:6f:ab:ba:f7:43:
         1f:f3:6f:54:ab:77:2a:1e:ae:54:5a:9f:0a:73:81:6f:56:db:
         d4:d5:08:96:40:55:8c:c5:a1:56:42:b3:5c:4c:fe:d8:09:61:
         c6:42:be:0e:0c:cc:a9:a5:c8:05:88:47:3d:67:e0:31:a4:d0:
         0f:94:f6:bd:f6:01:2e:95:09:a4:55:70:3c:ba:f2:4f:8d:44:
         c5:76:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:55 2025 by rpki-client