Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
File:                     ff815538-39d0-348e-910a-f73be4832b91.roa (raw, json)
Hash identifier:          mMWOzt1C+rIt5pHh+7wdazg2TLzQAyVSs2im4P+oY3A=
Subject key identifier:   12:C6:18:04:75:26:49:84:56:3A:31:03:3E:76:44:66:31:E5:B6:EC
Certificate issuer:       /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
Certificate serial:       010D0C9F43285849C0A4E3F2B014B2F401E34B80
Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     32334
IP address blocks:        192.30.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e3:f2:b0:14:b2:f4:01:e3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=d67fbde7-4ed7-42a9-b691-354777085b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:ed:a8:0f:0a:89:41:35:0c:22:6d:a3:7b:
                    6f:17:b7:b6:7b:78:c3:5b:4d:cb:49:41:d7:38:f8:
                    b1:5b:35:a4:2b:47:70:b5:35:75:75:42:5f:7d:72:
                    b4:ee:55:fd:71:19:08:6a:cc:23:97:e6:06:c4:fe:
                    cf:8d:f8:32:50:df:27:3e:d4:ba:12:e1:96:48:41:
                    5f:9f:78:58:86:54:4a:56:8d:43:80:9c:6f:b1:fe:
                    ca:dd:5d:e4:22:2a:c0:b4:bd:3f:f8:66:24:b8:81:
                    89:b9:93:d1:55:35:b8:99:c1:0d:82:fb:80:12:23:
                    da:3f:5d:b0:e5:76:c7:5b:3b:c8:4b:05:95:0c:18:
                    fa:df:64:91:ba:7e:b3:23:d0:2d:25:09:34:4e:68:
                    e9:51:08:81:a1:9a:c8:cb:f4:92:bd:a2:7e:bc:ec:
                    09:f6:67:b2:e9:10:a1:57:f2:94:76:65:fb:0a:cd:
                    73:c7:42:b1:d7:ad:5c:64:23:65:1b:a0:40:67:89:
                    7c:09:57:69:fe:44:d1:d1:be:97:78:07:cc:47:bf:
                    cf:1c:0d:40:0a:b6:5f:39:f7:92:6e:00:ea:ba:fd:
                    83:9e:85:87:c9:46:4a:32:90:ce:02:3c:66:d5:77:
                    4a:94:90:8b:e1:44:b5:c3:c1:41:49:d8:9f:ee:6c:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C6:18:04:75:26:49:84:56:3A:31:03:3E:76:44:66:31:E5:B6:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:ef:c2:01:da:31:99:23:94:74:ec:5e:b6:8b:23:4b:b8:
         71:8a:d2:49:da:27:a4:4b:ee:b7:a6:55:84:a8:12:7b:69:c1:
         6e:59:60:33:25:17:86:d3:66:28:0b:42:a2:ca:ef:e4:76:7c:
         ba:e1:78:8d:c0:dd:61:31:32:59:44:ff:7f:28:15:46:a3:48:
         7e:95:f7:64:f2:3e:ad:1d:6a:6a:0f:94:9d:a8:b8:9a:f5:3f:
         46:42:0a:43:e3:ac:3a:51:e9:14:df:23:5c:84:9a:5d:1a:1f:
         f0:17:73:58:40:83:f7:d1:e5:42:e8:be:87:5d:3f:5e:4a:ca:
         ce:16:61:f6:2f:9c:d6:8e:b0:32:3a:7b:79:74:01:33:e0:c5:
         9e:15:62:08:b8:e5:49:54:73:4a:27:95:63:08:f1:41:40:d4:
         33:a8:fc:e9:ea:89:bd:0a:5d:74:8c:79:75:9c:dd:a8:fa:0f:
         3e:d8:8d:35:92:c4:39:55:52:19:6a:ac:b9:e0:74:62:60:19:
         8d:af:52:d2:69:be:32:b9:b0:24:c3:56:ed:6b:9a:50:af:16:
         21:5a:65:26:72:62:89:8f:22:36:4e:f5:90:89:16:91:64:66:
         3a:6b:25:f2:15:5f:ba:3a:93:0c:7d:39:10:b6:3c:ba:14:87:
         d0:85:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:28:13 2025 by rpki-client