Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cfda4aa-02db-362e-9ec4-5651b5273bfe.roa
File:                     2cfda4aa-02db-362e-9ec4-5651b5273bfe.roa (raw, json)
Hash identifier:          2N4igE6gZI9kcgttUeO8Aqz6yNdIInuCyCE570ntFOs=
Subject key identifier:   57:D6:A3:3E:12:F3:D4:B1:8B:7C:6A:9C:53:E4:AF:4B:FD:8A:EB:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC56A7A173CC083FF2300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cfda4aa-02db-362e-9ec4-5651b5273bfe.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396555
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c5:6a:7a:17:3c:c0:83:ff:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=c4917bdb-df42-4e05-a246-262466c441a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:b2:89:d6:74:0b:7b:e7:78:95:61:24:b8:
                    44:dd:04:ad:e0:3b:10:dc:12:ec:cf:94:07:77:b1:
                    4a:d7:1f:53:cd:e0:cf:10:07:51:6a:d2:83:f7:be:
                    5b:9b:b2:f5:ee:d4:83:36:11:3f:ab:90:90:ab:94:
                    81:ad:f0:de:b3:43:a4:07:16:d2:fb:b6:0f:3e:14:
                    77:49:d8:c2:83:73:1f:c3:14:f0:40:03:2e:57:84:
                    b8:d8:f9:9e:f2:0a:79:6b:8d:62:76:58:d0:ea:f9:
                    cb:c1:00:75:b3:3c:65:60:18:02:2d:10:20:0c:53:
                    a3:56:59:82:22:7f:c5:a0:91:44:72:5f:d9:00:c1:
                    60:79:e5:87:65:14:52:cb:9e:fe:2d:40:82:22:ad:
                    da:98:50:a0:fa:b7:3e:b4:17:a6:5e:87:0d:3b:d6:
                    fc:28:e7:d7:37:6b:dd:5b:5c:1c:e2:65:72:89:d0:
                    85:05:46:0a:4c:08:a5:63:fb:e1:84:20:6b:f0:5b:
                    38:70:33:dd:b9:c1:ec:bc:71:df:a6:b0:54:b0:46:
                    db:6f:19:55:d7:cb:0b:61:c6:16:45:85:ed:6b:ff:
                    ef:c3:4c:ff:07:d7:eb:53:59:58:50:a5:65:96:dc:
                    fb:94:de:9c:2b:ee:4d:b1:bc:bb:ae:fb:b7:c8:ef:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:A3:3E:12:F3:D4:B1:8B:7C:6A:9C:53:E4:AF:4B:FD:8A:EB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cfda4aa-02db-362e-9ec4-5651b5273bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:52:b3:4f:69:1e:82:db:a1:2f:af:ad:d9:83:ca:9d:9a:
         ac:15:49:ae:55:dd:e5:85:9d:6e:be:60:17:10:7c:f4:b3:c8:
         c8:f9:cd:61:54:d6:bd:bc:f8:69:73:ba:02:be:a4:e8:5c:ed:
         1f:0a:e2:bd:64:3c:24:b2:55:3b:59:da:dc:ac:48:bc:e4:7b:
         eb:0e:9f:24:3c:60:f1:2b:eb:ec:bb:c3:02:cb:1b:9b:20:a0:
         2f:9d:7c:ff:f2:bc:5c:bb:1e:5b:14:01:58:95:96:16:f7:32:
         f5:88:b6:8a:ae:30:d1:2f:64:88:90:17:99:2c:e6:c8:a4:40:
         b8:58:6f:f7:75:25:f0:bb:46:46:7a:84:f1:bd:90:70:9b:da:
         da:8f:e3:e3:6b:cc:ac:ea:ab:38:32:b7:74:22:9f:e1:aa:2c:
         e2:b6:23:11:89:fb:a5:89:5e:26:ce:45:37:48:13:f4:85:0e:
         06:85:88:e1:50:a7:c8:a1:f5:3a:29:45:7b:e3:7d:3f:da:6e:
         b6:be:e1:2e:02:5c:99:31:d2:17:c1:4d:5c:76:9a:03:69:66:
         de:89:44:e0:32:72:63:6c:6b:ba:a1:d2:11:7f:81:f4:e0:95:
         2a:1a:68:41:45:b7:f8:5f:7e:9f:cd:a3:f7:81:e8:07:9c:be:
         4f:e4:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:34:30 2025 by rpki-client