Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ae9f731-8172-39df-af01-1fc9946e5892.roa
File:                     2ae9f731-8172-39df-af01-1fc9946e5892.roa (raw, json)
Hash identifier:          UiN5sNTaQcSWvrp0Jc+kIxqUXHL09qgW9NyyuwHMbno=
Subject key identifier:   AD:4A:4E:4C:3E:28:AF:DF:B9:6A:18:93:A6:9E:A8:1D:DF:13:DF:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B016E8DC9F38966306F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ae9f731-8172-39df-af01-1fc9946e5892.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     20362
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:01:6e:8d:c9:f3:89:66:30:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=05219e4d-fb59-4434-ace8-cebd279966bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:42:38:fc:19:90:75:86:43:fc:28:46:f7:
                    c5:bd:de:b7:b8:d6:8c:2a:c9:d0:b5:79:bc:af:27:
                    fd:48:b0:ca:5c:16:ee:86:3d:9e:0a:56:71:d3:fc:
                    2c:80:98:0f:c2:13:4c:9a:61:02:d8:17:d7:a9:55:
                    aa:a0:6b:d2:65:d7:a5:82:8a:c0:ed:b2:01:2c:32:
                    48:7b:01:c9:79:2f:5e:bb:b8:f8:cd:35:95:cc:f0:
                    c7:ac:1f:83:e7:21:bd:56:3e:8d:6d:ca:1a:24:fe:
                    55:0b:24:be:04:ef:b9:b7:c4:e3:c1:3c:09:9f:e0:
                    b5:20:3e:90:a3:fc:05:fd:af:75:2b:80:93:33:6f:
                    62:ec:b7:0a:07:27:16:d4:41:95:42:47:d1:c4:23:
                    0e:25:c8:1e:de:39:fb:96:c1:e6:1b:6c:dc:51:35:
                    4c:d7:de:16:93:a0:5c:48:0c:e7:cd:f8:6a:23:e6:
                    cd:80:27:88:ed:9b:07:26:0a:61:d5:49:f9:a2:a3:
                    a8:59:54:b8:a7:c1:61:dc:4a:f6:f7:eb:66:d2:59:
                    dc:04:82:17:17:e9:01:e2:c6:fc:19:fe:43:20:dd:
                    88:c1:f8:51:7c:a9:a2:ba:9e:4f:ad:95:26:23:50:
                    2f:09:d8:b5:48:70:84:09:3e:eb:de:8b:58:48:2f:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4A:4E:4C:3E:28:AF:DF:B9:6A:18:93:A6:9E:A8:1D:DF:13:DF:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ae9f731-8172-39df-af01-1fc9946e5892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:45:21:7b:0b:b2:5e:45:0e:36:1a:c0:e9:d4:93:b1:51:ce:
         52:08:af:45:fa:29:a9:06:f3:9b:4d:96:81:d1:86:a8:3a:3a:
         2e:74:f0:64:78:16:c5:e8:a2:d1:4c:ee:55:4d:1c:7b:9a:91:
         a6:01:d8:74:6d:a5:5d:9c:f4:d8:41:42:93:77:5b:b0:79:fb:
         12:d8:eb:0a:05:7b:c7:36:92:b9:6d:38:d8:8b:dd:72:8c:65:
         ea:75:c7:0e:5b:c5:fd:eb:46:a3:e8:ee:75:a9:73:a7:d9:ab:
         1c:9a:af:a7:b8:6b:ce:21:9e:fa:3b:8f:0e:d7:a1:14:94:da:
         95:03:c1:15:d3:38:e9:4a:87:c1:f0:ab:19:2a:cc:c1:8d:28:
         d2:b7:72:41:08:51:8b:0a:51:09:4a:8f:51:19:9a:ec:cc:97:
         d9:aa:9b:53:db:c5:c9:72:12:ef:29:3f:52:40:ba:6d:93:dc:
         fd:13:25:1e:ec:64:d8:88:dc:0b:2f:2a:f2:d4:50:ef:b8:82:
         6e:24:ed:19:3a:3b:5e:6d:9e:f7:7e:d5:7d:af:5c:ec:7f:06:
         a1:f5:df:93:a0:db:aa:a5:32:33:c1:8b:a5:28:38:c1:a9:78:
         25:86:f7:e1:7b:44:00:1f:b3:05:6e:13:98:ef:52:c1:03:0d:
         ed:17:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:03:39 2025 by rpki-client