Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f82cce45-c114-35d9-b4a3-133c46a70c3b.roa
File:                     f82cce45-c114-35d9-b4a3-133c46a70c3b.roa (raw, json)
Hash identifier:          7ENnupIL6/xE0ikA6/a6GyBmb0ueSKCqDwODNNp0+ms=
Subject key identifier:   18:05:D4:3A:ED:99:4B:AF:42:40:13:78:E5:D5:75:6A:CB:7C:49:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744B9D5D0A5A5A45AB21C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f82cce45-c114-35d9-b4a3-133c46a70c3b.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396567
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4b:9d:5d:0a:5a:5a:45:ab:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=f94b764d-d2fa-4959-b233-76122f1ab81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:2c:11:a2:8f:4e:f7:76:0c:ea:0b:e7:e4:
                    1d:57:07:d6:2d:d5:aa:d9:b7:60:ec:7b:1a:40:09:
                    95:e8:7f:b1:44:a5:f8:8a:4d:9c:05:a0:9b:a5:1a:
                    39:1f:de:eb:62:4a:76:15:4c:08:a7:4c:3c:65:13:
                    a1:8e:7d:54:6b:40:26:c7:35:23:1b:5d:52:58:00:
                    76:da:8e:c6:83:2a:2b:06:a4:0a:b3:59:af:98:fd:
                    98:b4:a2:67:85:f1:58:d5:5c:96:1f:df:4a:7b:d7:
                    8e:31:73:1b:7a:8c:a5:15:66:df:20:68:2a:9b:41:
                    81:f3:90:6a:b8:ae:a3:f1:6f:64:fe:b9:12:67:8d:
                    52:50:d9:fe:c6:e2:b0:6c:d5:e5:fb:cb:ce:9c:ab:
                    23:42:74:0c:f1:08:45:87:c0:fe:ee:fe:60:43:d9:
                    a2:41:f1:46:76:4e:e4:48:d0:68:64:97:0d:2f:8a:
                    87:e5:20:69:b0:0c:bf:ef:c4:55:d3:13:f6:33:bb:
                    22:d2:2a:e0:83:01:f9:8e:d1:de:5c:be:b2:d8:93:
                    aa:f2:5c:35:0d:8b:8b:6d:78:bf:ea:86:f4:91:0c:
                    03:75:43:85:21:1f:a2:d4:99:b0:34:7a:51:2b:a3:
                    28:82:b1:44:b7:ce:38:36:c3:75:90:a6:67:0a:83:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:D4:3A:ED:99:4B:AF:42:40:13:78:E5:D5:75:6A:CB:7C:49:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f82cce45-c114-35d9-b4a3-133c46a70c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:00:a4:97:f6:ec:6a:a9:84:fe:54:77:a9:07:cb:bd:c7:
         18:37:bd:23:2a:71:70:01:0d:94:d1:b4:b7:41:0b:3e:5b:37:
         e8:02:55:9d:02:5e:84:5b:92:d3:4f:21:a7:aa:75:9d:50:14:
         53:ca:c5:7f:a1:71:24:42:9b:85:67:83:b1:e8:a4:49:4e:7b:
         08:42:2c:95:b8:cd:18:b6:91:22:00:f0:90:4c:d2:ee:d2:31:
         bd:d0:a8:d3:b3:a6:26:9a:dd:ff:f0:b4:c0:d8:2b:02:fc:c6:
         21:51:11:b9:0c:b7:e8:3f:12:e7:7c:8c:9d:56:02:0f:58:22:
         39:1a:89:c2:60:7b:77:72:a9:65:fa:d3:2c:07:1a:7b:52:91:
         19:2e:f6:fe:a1:11:5a:8e:e3:b1:4b:ce:bf:dd:53:58:3e:4b:
         7d:b6:37:24:84:e4:c5:e4:b5:e7:5b:04:03:8c:ed:f6:ae:2b:
         9a:af:83:58:35:12:28:9c:54:9a:16:7f:4c:a7:a6:65:3a:70:
         dd:8c:fe:ac:00:86:af:8e:e1:19:f2:03:c9:b1:1a:25:fa:ec:
         cc:26:d0:ed:18:53:8d:1d:15:12:7d:4c:43:82:2f:db:95:f1:
         7a:d2:b1:3d:ce:05:be:7f:33:6c:d1:fe:af:f9:d2:fc:ab:bf:
         8b:81:55:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:08:12 2025 by rpki-client