Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb6ed784-6852-32a9-a6cc-eb58d8168766.roa
File:                     fb6ed784-6852-32a9-a6cc-eb58d8168766.roa (raw, json)
Hash identifier:          +xcAkZPYYZO6E03BkS8+skimcQIgHNppMa3TASRJSWw=
Subject key identifier:   12:97:3B:B0:99:BF:BB:29:93:FA:6F:E8:92:30:AF:B3:C6:D5:AC:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848CB089E62E5207BD84FC8DF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb6ed784-6852-32a9-a6cc-eb58d8168766.roa
Signing time:             Thu 06 Feb 2025 13:33:21 +0000
ROA not before:           Thu 06 Feb 2025 13:33:21 +0000
ROA not after:            Wed 07 May 2025 12:33:21 +0000
asID:                     397207
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:08:9e:62:e5:20:7b:d8:4f:c8:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  6 13:33:21 2025 GMT
            Not After : May  7 12:33:21 2025 GMT
        Subject: CN=e3eb00fa-6f32-4d2f-9710-29850c85c972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:31:24:c0:18:35:7c:c2:17:97:6e:1b:82:
                    68:61:4d:89:f4:d7:b5:8f:66:88:bf:eb:fd:fc:cd:
                    95:37:74:4e:2c:d2:fe:ef:c3:5f:48:de:31:68:f8:
                    75:19:ae:35:96:e3:0b:bd:ea:73:c6:04:1a:2a:45:
                    d0:45:bb:27:71:86:1b:e9:d7:de:a9:31:a7:39:35:
                    eb:28:a9:e2:c9:aa:20:b3:d3:b8:d6:73:f4:b7:40:
                    75:d8:ef:34:4f:63:97:42:40:4d:e2:00:20:60:78:
                    15:ce:8c:fe:95:19:4d:49:dc:30:6c:32:7e:5a:e7:
                    f2:a3:e7:c8:67:84:ed:eb:24:e6:ec:c9:20:68:3f:
                    a3:bb:24:d2:50:33:07:4d:f5:63:4c:f0:e1:8c:b0:
                    cd:94:ea:4a:cb:ab:5d:76:3e:53:39:5b:c1:48:cf:
                    f1:50:78:af:15:1a:5a:f0:99:f8:14:4d:83:88:e8:
                    b6:dd:ff:ae:74:9f:f8:a4:6f:66:4f:e4:3c:b7:88:
                    1c:aa:4b:35:d4:7d:de:26:0b:3a:bc:88:a1:b6:87:
                    43:62:fa:35:e6:e5:e2:9f:e7:d6:6d:b5:cf:c0:ff:
                    ee:3d:a5:f8:bc:1b:95:dc:8d:fe:bc:8d:b7:2a:33:
                    40:2c:8b:86:28:11:8e:17:4c:23:36:0e:a5:bf:43:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:97:3B:B0:99:BF:BB:29:93:FA:6F:E8:92:30:AF:B3:C6:D5:AC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb6ed784-6852-32a9-a6cc-eb58d8168766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:09:84:60:a0:92:1b:bd:d7:d6:db:8d:44:95:63:b0:df:a9:
         c9:97:0a:50:09:88:3c:00:f2:3a:d4:23:e7:4b:90:69:bd:28:
         8d:9c:3c:36:de:c3:4c:76:af:b8:9d:71:eb:a1:dd:38:25:1c:
         b1:70:bd:31:9c:78:fb:76:c1:0d:52:26:9b:2a:49:34:d8:fc:
         44:a8:14:c0:98:de:15:49:38:28:7b:50:e5:83:d2:8a:3e:67:
         6a:b5:cd:e6:a1:5f:2f:33:57:a5:61:65:d1:cd:e2:65:56:b9:
         3f:34:a5:a0:24:cb:8b:2d:4d:7e:a8:e4:9a:4a:d6:08:96:09:
         41:fa:5d:a2:ab:69:9e:66:32:ae:89:65:5b:30:42:be:4f:a6:
         7a:27:ca:a9:20:6b:ce:22:a7:fd:50:41:34:a4:07:a1:d2:a9:
         d9:d9:2b:69:47:9c:60:51:6c:d7:2b:f3:d3:b3:1d:0f:22:38:
         36:c1:e7:d5:04:08:ce:86:8e:dd:15:72:1c:c8:e7:92:1e:33:
         69:34:be:16:a0:ae:b8:d8:13:9e:2a:62:c9:f4:92:ec:87:8c:
         87:2e:81:2c:ad:c0:28:4d:57:0c:98:39:16:35:22:61:7c:ed:
         63:dc:13:7a:15:7a:15:07:b9:81:65:86:c2:4a:cd:b1:8c:5a:
         9e:c8:c4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:25 2025 by rpki-client