Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc8f7de-74c3-355a-a25e-d31d153b573b.roa
File:                     1bc8f7de-74c3-355a-a25e-d31d153b573b.roa (raw, json)
Hash identifier:          15eFzpGjfTYlFWMRuT+MTjyZnUIaQtu72rFJeZRFh0c=
Subject key identifier:   B2:F3:5B:94:0B:15:5E:41:11:90:BE:90:E9:DE:18:E1:8A:B0:FF:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB1D5E3BECEFF4F7BEE580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc8f7de-74c3-355a-a25e-d31d153b573b.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     36632
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:1d:5e:3b:ec:ef:f4:f7:be:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=67e7ae11-a7a7-4b89-8463-1b4a2f80c3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:2d:03:1a:82:78:81:92:70:9f:35:2c:3f:
                    4e:14:1d:b3:cc:ad:0a:7a:92:02:b7:0b:60:bf:0a:
                    09:ac:00:d0:66:d9:a1:01:c0:37:92:70:67:15:d3:
                    30:3b:53:ab:3e:ea:bb:4a:c7:0c:12:64:3f:fc:45:
                    97:3f:ec:d2:3c:77:68:da:a1:7a:b8:ba:7c:9e:35:
                    4e:88:1c:3e:37:9d:00:72:4f:2c:52:ba:8c:bd:4a:
                    22:e2:aa:f4:eb:35:ac:cd:ff:d7:7f:72:f7:d4:9c:
                    d5:2e:32:4c:ba:9b:70:48:1c:fe:2f:e5:e1:a3:4d:
                    46:11:ab:78:3b:11:2e:51:25:9b:32:f8:35:dd:e8:
                    b3:44:42:a3:87:91:59:92:8a:ca:42:d9:7f:ad:94:
                    53:08:e2:03:4c:99:16:e6:ae:e6:2f:4a:1b:b4:af:
                    f5:3d:7e:59:02:22:ce:c6:9d:7a:cf:35:b7:e8:12:
                    99:2b:81:4f:24:56:20:ed:80:79:82:50:73:ea:ef:
                    9e:bb:53:e5:79:78:bd:0e:37:5f:19:52:36:da:7a:
                    1d:d2:cf:47:76:18:0c:e4:76:7b:42:70:c5:25:bf:
                    7d:90:51:b5:8b:18:77:6b:aa:af:bd:a2:30:1f:2b:
                    d1:41:ab:93:85:cc:14:f8:ab:b6:77:f9:fc:6f:9c:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F3:5B:94:0B:15:5E:41:11:90:BE:90:E9:DE:18:E1:8A:B0:FF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bc8f7de-74c3-355a-a25e-d31d153b573b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:58:8d:f2:d0:25:cc:3b:0d:35:07:86:e0:05:1a:79:f7:c1:
         8c:d6:3e:1d:f4:73:21:e2:2d:ed:52:2f:b2:9b:32:76:c5:0a:
         d5:e4:81:15:7e:83:84:cc:6b:d6:31:60:3b:ab:e4:7c:6f:d6:
         31:d4:1a:17:a4:01:5c:31:54:2f:88:34:31:45:31:ad:f1:fb:
         8b:52:c7:bf:1d:cd:1f:1e:72:9a:87:57:8d:df:8d:72:2f:ff:
         88:29:e3:d4:6c:03:95:78:c4:a3:65:26:e8:c1:af:a1:b5:c7:
         96:ed:9c:7d:8c:32:dc:9f:66:90:5b:ec:85:49:3c:27:93:6f:
         cc:0f:de:e3:f5:ab:4c:87:6b:34:ad:1a:0c:c1:48:3d:7a:2d:
         f8:12:67:49:65:71:69:80:b2:e7:4f:cd:8d:21:d2:55:fc:97:
         53:ab:12:e2:81:3e:c8:66:70:ec:09:84:d7:35:6c:c3:74:22:
         e1:58:49:3a:36:09:d8:a9:ff:19:b7:95:e2:46:dc:e3:e4:bd:
         22:9f:bd:86:b9:3c:ce:00:75:1f:d6:9e:32:0d:a9:bc:58:70:
         5f:14:dc:f8:39:66:ca:55:00:0c:9d:c0:8d:20:7e:81:89:48:
         e3:eb:ea:77:3f:1f:b1:5a:a1:68:c1:dc:1f:81:8a:8c:ae:48:
         41:97:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:32:57 2025 by rpki-client