Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
File:                     01b8f345-02db-30db-a42e-5b42dbfb8c85.roa (raw, json)
Hash identifier:          JWrzTq5HCvf21kLibAXtse1ZOYeeQtMaOe/6+67+nq4=
Subject key identifier:   21:8E:B9:9A:65:11:9A:04:BC:4C:68:59:68:D0:C0:E2:0A:04:BD:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0CC1D8EF339B04304D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396561
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0c:c1:d8:ef:33:9b:04:30:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=70777dba-3ea1-4714-bf48-594f9a31a063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:f9:66:26:28:8e:ec:6f:a0:82:4e:d0:26:
                    0c:e1:e9:44:68:aa:6d:01:b2:86:8e:f8:9f:fa:6b:
                    6f:54:5e:8e:f1:63:97:75:af:04:3c:b0:9a:a2:11:
                    13:36:69:48:e5:94:11:5c:e8:20:03:7a:a6:69:df:
                    cd:c1:68:51:58:b1:4e:3d:81:03:c3:26:06:89:29:
                    d0:97:c1:da:38:9f:2c:1d:a2:3c:2e:8d:17:54:15:
                    1d:a3:8f:db:2e:ca:3d:cf:c3:05:14:11:63:38:07:
                    30:5e:8b:27:1d:10:6d:4e:78:88:f1:88:08:4f:e6:
                    f3:58:34:94:35:7b:eb:e7:67:dd:02:67:12:55:dd:
                    e6:2e:10:8a:58:95:fe:89:43:16:7f:08:52:0f:51:
                    00:76:b3:ee:b4:6e:2c:f5:a7:00:59:4d:15:ee:86:
                    6c:62:be:92:c1:be:70:24:b3:4a:6f:bc:26:1a:a9:
                    31:b4:8c:ef:29:d0:39:98:69:72:3d:b8:c8:8f:08:
                    a9:b6:20:fb:3b:c1:56:ac:39:59:18:80:07:e3:9f:
                    6a:62:2f:d8:ef:ea:8f:8a:94:c3:86:cc:7f:e8:60:
                    21:99:0f:44:d1:88:2a:e8:53:53:63:56:13:8b:68:
                    17:c9:fc:03:73:5d:c5:b4:99:6a:21:84:e0:05:a7:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8E:B9:9A:65:11:9A:04:BC:4C:68:59:68:D0:C0:E2:0A:04:BD:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01b8f345-02db-30db-a42e-5b42dbfb8c85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:b6:87:b2:0b:9b:0f:91:4f:9d:1d:27:6b:4c:10:c8:f8:
         c9:e3:49:e3:33:69:6c:fa:59:e1:3f:83:3a:d0:ca:15:64:97:
         5a:0d:80:00:6d:40:50:d6:1c:b1:45:4d:76:9f:93:da:9e:3c:
         33:da:1d:0a:2c:f0:03:15:7c:b8:e2:37:e5:49:d5:ba:9e:43:
         b7:fd:81:9b:d5:2a:4f:f1:d3:2f:47:1f:52:ac:1c:81:49:3a:
         88:34:4a:c1:a7:25:2c:83:f1:42:21:5d:45:e6:92:74:37:e0:
         e7:76:84:90:c2:0b:38:eb:3e:c8:42:6e:b7:e3:74:e5:a9:1c:
         1e:f1:28:0c:cc:6e:04:ef:da:b3:60:ae:6a:35:25:dc:ef:50:
         60:1d:2a:d9:89:28:e1:da:2b:dd:e7:c8:2b:35:48:78:5b:f0:
         9e:56:5c:85:2b:ca:3d:8b:8c:40:14:88:7c:71:2a:ae:12:a2:
         c9:29:89:3f:bb:62:ab:55:a1:ec:6d:76:4f:2a:8d:98:66:04:
         65:c7:17:5e:8b:c4:3a:83:2f:d7:58:66:f3:e8:08:03:e3:0f:
         5c:b7:ae:d8:22:04:07:d8:61:58:b5:ef:3e:27:ab:a5:97:15:
         b6:8a:ef:60:ae:9f:1b:de:20:28:aa:fb:78:47:b1:f6:39:32:
         0e:b5:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:15:01 2025 by rpki-client