Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b1a599-8bac-3ad4-93ce-9fc049547805.roa
File:                     01b1a599-8bac-3ad4-93ce-9fc049547805.roa (raw, json)
Hash identifier:          pw2Iq+7LBkn/IyPLkxECO9bXXeWHUnHMY2cnXALJmZM=
Subject key identifier:   5A:65:55:0E:7F:3E:CB:23:C8:3B:CE:80:0B:8D:37:07:93:D7:15:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FD74A8C4B797CB8D6EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b1a599-8bac-3ad4-93ce-9fc049547805.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     36620
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fd:74:a8:c4:b7:97:cb:8d:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=27e60b01-eca4-4372-91ae-7865da0d730a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:f9:39:ad:bc:77:29:72:bf:37:e4:27:20:
                    2b:aa:dd:d4:e0:18:a6:10:bd:87:e4:4c:0d:38:1c:
                    d7:51:bf:c8:52:5e:30:fc:73:5c:39:52:71:6e:9d:
                    4b:81:d8:de:84:f4:9b:14:a6:b5:b8:2f:06:eb:c0:
                    66:84:08:fe:9a:60:76:73:a9:59:c1:d0:2e:f5:19:
                    18:8b:60:4c:a6:d8:81:83:6f:d3:f7:fc:9f:2a:cc:
                    2a:e8:bc:0d:0d:ac:8c:3c:aa:71:ca:87:33:72:10:
                    5b:96:3c:b0:ea:cd:d7:33:3d:ea:c0:22:23:8f:0f:
                    82:a4:5c:65:dd:42:2a:26:26:e6:81:ac:04:29:90:
                    b3:e7:e6:39:f0:fe:00:7c:db:c8:2d:1a:63:b7:cd:
                    26:5b:70:9f:21:46:71:f0:6a:eb:be:b8:ec:2c:a0:
                    b6:67:23:06:85:45:f4:db:2b:fb:34:02:38:72:0c:
                    27:61:3c:fc:56:07:67:5f:cb:1a:e1:73:df:4f:8c:
                    76:ac:52:bf:67:69:9f:ce:e7:82:47:a4:83:2a:0c:
                    b0:f4:9e:c2:d8:51:9b:e5:1a:d5:40:d3:43:e5:72:
                    e0:38:1e:13:f3:9d:b1:1a:b2:79:e5:c2:45:19:4f:
                    b6:67:c9:4a:be:90:df:0f:8c:62:45:94:bb:f6:5d:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:65:55:0E:7F:3E:CB:23:C8:3B:CE:80:0B:8D:37:07:93:D7:15:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b1a599-8bac-3ad4-93ce-9fc049547805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a1:a2:39:13:f5:b6:5a:db:8d:43:5f:7d:99:ec:09:17:12:
         32:78:81:28:10:37:fc:58:7b:84:0f:18:47:08:43:e7:fe:cf:
         20:77:74:52:23:cf:8a:e0:82:ec:59:94:95:8a:b3:a7:18:8e:
         b9:dc:f1:0a:56:81:69:31:57:08:6e:76:d8:67:ed:ea:03:af:
         c7:df:d3:3d:5a:15:5e:50:d7:3d:f6:06:11:e2:19:ce:e4:75:
         c9:3a:60:da:fb:c2:b7:82:6a:0b:fb:29:95:60:16:b6:6b:f2:
         5f:3f:49:67:52:1f:8b:a9:fc:b2:37:18:78:bb:ff:c0:24:2a:
         fa:3b:64:f3:78:c4:35:dd:68:f4:db:d8:53:1f:72:09:5a:2d:
         28:c6:35:f9:70:f9:24:8a:5d:a3:b6:ea:db:09:08:b8:71:79:
         e1:58:71:f7:97:79:29:aa:03:86:58:be:73:e2:4e:44:3c:f2:
         a4:df:c6:41:72:ca:51:14:f8:ed:ee:9b:b3:71:8a:9f:2b:79:
         4d:14:ca:f9:6e:fb:93:25:31:e3:f5:d3:85:0f:41:cc:ac:16:
         37:d4:24:0f:10:20:62:d8:f8:6b:f9:8a:6f:3e:c1:2f:e0:6d:
         4f:80:9c:8e:e0:86:8e:37:bf:65:92:7b:cb:ed:29:76:73:07:
         05:3b:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:44:43 2025 by rpki-client