Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa
File:                     00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa (raw, json)
Hash identifier:          5gsud+tl8rLf2R7VQ/6Ib4RQiv9AgIvBI2sMYvlrXWg=
Subject key identifier:   09:38:41:D7:B6:F2:E5:9B:F3:94:49:49:D7:72:F3:5E:9E:72:79:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A783F9FB0966D7FF81A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396606
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a7:83:f9:fb:09:66:d7:ff:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=18f72ff0-35ef-4538-b21a-4d58f4f5d06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:15:96:d2:61:10:28:71:f8:8d:e5:11:ef:
                    9b:3a:e8:99:95:de:ee:1d:36:c6:f3:fc:86:bf:61:
                    42:f0:b4:3d:7e:26:03:b8:3b:60:fb:e1:ad:dd:21:
                    e1:77:b4:96:4f:42:dd:e4:56:7d:ef:c9:bb:76:e5:
                    66:a7:2a:22:d3:55:7e:a2:db:c7:43:06:96:6c:13:
                    6f:e0:5d:07:26:f5:8a:d9:66:66:f9:eb:97:31:78:
                    4c:c4:56:c4:c7:f1:bf:ca:15:15:0b:a5:44:36:a6:
                    b8:a6:c8:a5:b6:13:74:ed:8b:6d:8e:d2:8d:0a:39:
                    73:92:f9:45:48:d5:18:61:ae:4e:4e:13:86:21:bf:
                    34:b1:7f:6d:87:9e:59:42:ae:96:d7:07:ed:b1:c1:
                    b0:90:9f:d6:62:0b:7b:bb:9d:00:7b:b5:82:f3:83:
                    e4:53:5d:8a:12:19:af:e4:56:57:3a:0f:1e:de:8c:
                    dd:d9:c0:e4:84:32:fc:50:7d:4b:a4:47:c2:15:21:
                    20:40:4a:04:44:d8:d3:09:d6:22:c5:96:c0:7f:7c:
                    9f:d1:51:f8:63:85:65:33:92:f3:59:d3:e0:39:4c:
                    b9:fc:ae:1b:29:cc:9e:ce:44:f5:67:02:3b:70:f3:
                    39:68:54:b8:1a:2c:51:f9:ce:18:9f:d5:fa:9a:7c:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:38:41:D7:B6:F2:E5:9B:F3:94:49:49:D7:72:F3:5E:9E:72:79:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:02:fc:2c:5a:b3:eb:45:7c:01:3e:d2:f1:29:ba:c2:14:8e:
         24:0e:d0:a8:03:13:19:71:88:fa:9e:43:1b:0d:bf:8c:f3:16:
         62:1f:3c:e6:39:3c:c8:09:31:b9:b0:f9:3b:9b:42:c2:2c:87:
         7d:ea:f2:e4:27:f9:08:b0:27:1b:1a:81:93:47:d2:f6:b8:1a:
         b2:74:f3:9b:1a:28:26:11:23:73:d0:ec:ee:a7:34:4f:f3:25:
         a1:1b:9d:7a:75:32:64:9d:da:a5:f7:a7:ea:74:8d:26:c9:cf:
         89:b8:d5:d7:6c:4d:ba:d7:64:2d:6a:1a:60:39:e8:1d:c6:61:
         bd:d3:7e:73:6c:23:12:51:a4:25:42:8a:32:aa:27:a7:2f:12:
         95:9e:08:5d:65:8a:1e:2d:4f:ea:85:97:a7:70:db:60:80:86:
         27:2f:4e:26:91:27:27:46:1a:0a:6e:15:d1:19:ba:fd:25:6f:
         a9:18:a4:c3:c9:60:64:d8:fe:58:37:d4:62:64:46:03:36:8e:
         2f:88:69:10:c9:45:ba:3e:4b:71:82:53:a8:dc:de:28:de:41:
         98:53:69:7f:60:05:89:a5:a6:7a:87:dc:b8:07:ec:6d:a6:a8:
         35:c3:d7:9c:17:ab:94:3b:e0:da:82:0a:06:51:d7:d4:45:23:
         b8:b4:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:37:44 2025 by rpki-client