Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa
File:                     325418b4-a8bd-3522-a6b9-3974b428ea0a.roa (raw, json)
Hash identifier:          pq6iBR33NamoE9Eef58CEGK9CqWkFUez7Eq7sNRcHPA=
Subject key identifier:   7D:B8:70:85:22:86:5D:76:95:94:D5:45:B9:EE:81:C7:D7:58:02:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268AD10B561081A59612C100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396590
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:d1:0b:56:10:81:a5:96:12:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=2b31b5be-cf95-4828-a238-38d2aaa9224d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:52:b7:f6:49:87:08:79:39:18:70:91:2f:
                    5c:f4:68:25:43:75:a8:f7:7e:7a:aa:ec:00:ec:f1:
                    73:9a:e8:18:ab:3f:7a:8b:7f:3d:aa:50:a4:43:4b:
                    4b:b1:21:a1:fc:fa:cb:91:34:4a:1f:c9:af:d0:a0:
                    af:a6:ef:65:91:83:06:73:25:db:f2:00:61:e5:44:
                    3f:44:4f:b9:81:b5:69:c9:98:2d:17:c3:52:e5:92:
                    09:58:6b:e7:be:69:47:4e:6f:ca:b8:a5:4f:0f:c2:
                    13:fd:df:bc:49:6a:b4:86:2b:94:de:01:89:6f:02:
                    b0:44:81:59:e7:fa:2f:fd:3a:93:85:e2:9d:03:cf:
                    39:50:3a:bc:cc:08:74:6d:be:65:ae:21:c4:80:ee:
                    c9:b0:cc:9e:f8:24:9d:30:16:47:9c:c4:96:c2:d3:
                    73:77:ab:61:c7:6c:1e:74:80:e5:79:a6:27:ec:7f:
                    83:05:60:cf:3d:79:41:bd:db:eb:45:1c:dd:3f:6b:
                    f2:28:7d:73:58:64:58:9c:97:36:44:54:28:41:d9:
                    10:07:b4:8d:b2:4a:13:11:ba:bf:20:47:3a:a4:49:
                    fa:77:de:45:8f:43:96:d7:3a:5a:ad:97:55:e7:da:
                    1e:70:52:93:81:91:67:fb:ed:7c:93:e9:a9:90:cc:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:70:85:22:86:5D:76:95:94:D5:45:B9:EE:81:C7:D7:58:02:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/325418b4-a8bd-3522-a6b9-3974b428ea0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:02:fa:a5:61:1c:ee:53:1e:f6:b4:a3:a2:3b:65:73:33:
         8d:d9:71:62:68:72:90:85:c0:5e:10:de:66:15:33:e4:f8:fc:
         45:8d:a9:fd:3c:72:7a:2a:de:c3:21:5e:08:7b:5a:3d:43:8f:
         7a:8a:23:24:db:78:4a:cb:14:44:ed:1e:33:43:47:e2:31:d4:
         c1:c3:5e:88:7f:8b:fe:89:6a:5c:63:15:d9:5c:45:76:3d:c1:
         83:59:b6:f2:a9:bc:04:44:84:18:1a:3c:c9:0f:7e:23:2d:f4:
         4f:2c:5f:74:38:a5:ed:0b:ae:24:ff:f4:b7:6d:58:3c:7f:8b:
         c1:ac:c1:95:17:92:9b:47:90:f4:96:33:55:b9:ad:da:aa:58:
         64:d4:5f:cb:70:2f:5c:82:5d:a7:2a:20:b5:ee:0e:31:ec:72:
         95:3d:b1:cb:ce:2f:0f:a9:af:a8:ef:3b:bb:f5:45:42:da:81:
         46:c0:04:c1:9f:40:ac:28:eb:76:6b:8e:f3:a8:8b:e9:f4:d4:
         58:5c:55:36:e9:23:ea:c0:c3:c3:ce:5f:91:91:7c:2f:91:e5:
         26:fa:7b:f5:20:3f:60:5f:fd:89:e1:25:99:d7:67:e6:fa:56:
         cc:b2:84:7a:2e:19:e6:e9:5d:91:51:f8:74:c7:15:46:9c:55:
         84:fc:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:02:20 2025 by rpki-client