Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ba6609c-4eca-3d28-bf73-8bc7e75c8419.roa
File:                     3ba6609c-4eca-3d28-bf73-8bc7e75c8419.roa (raw, json)
Hash identifier:          6/XZP4t8Yhc7Rao0liuYjeKr/6qEGB58CUMbWGEXMx8=
Subject key identifier:   8E:98:A2:E4:62:9B:70:F4:E4:10:45:96:D7:B9:8D:F0:93:0A:F7:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A529B1DA5E0060CFA880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ba6609c-4eca-3d28-bf73-8bc7e75c8419.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     20172
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a5:29:b1:da:5e:00:60:cf:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=19072110-1fe2-4736-981e-d011327ee949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:bf:32:05:8d:ca:d1:7a:f6:8f:b2:e5:32:
                    27:d2:10:8e:7f:cb:f3:eb:7f:c5:48:8d:7b:52:52:
                    05:06:8c:84:65:8d:1f:2d:a7:dd:cb:69:42:1d:71:
                    4a:4f:4e:65:fe:49:cd:39:44:dd:a3:0a:79:c2:00:
                    9c:a5:ca:ae:54:01:d5:82:b2:df:7d:d2:da:30:73:
                    e4:45:ff:39:fa:71:21:45:c4:d4:29:78:ba:b7:7a:
                    03:d2:3f:d6:9c:d8:30:fb:f1:c0:e6:d5:73:eb:cf:
                    2a:aa:6f:97:67:2f:1c:60:fa:39:2c:1f:40:ac:4b:
                    0a:c8:e7:eb:d0:0b:9f:23:58:d3:7b:59:b6:87:16:
                    2e:ae:e1:8e:cf:71:67:e7:d3:e8:5b:ff:08:2a:fa:
                    25:c6:a7:f9:2a:04:9e:9f:1e:8b:83:27:4f:66:e7:
                    be:32:7d:cd:e3:8a:9b:9b:9a:42:7f:2f:ef:d4:08:
                    3e:bd:9a:12:92:ea:55:00:95:1a:17:19:26:81:70:
                    ba:01:59:05:b7:d9:b8:85:8b:9d:32:ae:e3:d7:83:
                    65:80:b1:0a:41:e7:e9:bf:d9:91:20:bd:af:d0:d6:
                    4e:b3:de:3c:22:19:6c:ce:df:e7:8d:38:02:92:25:
                    26:f4:8e:9f:f7:74:eb:35:cf:e1:3c:c6:13:a4:e9:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:A2:E4:62:9B:70:F4:E4:10:45:96:D7:B9:8D:F0:93:0A:F7:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ba6609c-4eca-3d28-bf73-8bc7e75c8419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:fb:36:fd:b5:33:32:c5:8e:5f:00:02:50:4a:b4:c3:86:
         31:23:61:e8:72:c9:31:5e:1e:27:6a:29:1f:b9:a6:53:a9:20:
         c3:90:13:43:a9:69:78:dc:98:3b:82:98:98:61:82:96:4b:e1:
         41:dd:79:66:03:ea:39:32:a3:6e:1b:26:82:a3:a1:12:b7:9d:
         90:2e:fc:95:48:39:ef:36:de:4f:8a:ec:4e:d2:32:ef:5f:ac:
         16:35:a1:6c:64:f1:ce:12:a9:ef:2c:eb:4c:de:9e:a1:66:75:
         bc:cf:ee:df:50:f7:0c:39:75:0e:31:b0:4a:9e:3f:1a:8a:c6:
         59:b3:77:39:25:34:a1:80:fd:0d:68:fa:52:6e:80:ad:ae:2e:
         c8:6f:0c:9a:ce:ee:fe:28:db:40:9e:e1:0d:b8:b3:1e:88:36:
         ff:c7:ab:d5:4b:e2:1a:92:76:25:05:12:31:df:cf:e4:74:94:
         a2:36:ba:91:18:60:5f:96:0b:92:a0:a2:0e:04:b8:28:eb:cb:
         5e:5f:fc:c4:a2:48:a3:10:ed:48:83:3a:74:86:82:6a:26:e3:
         10:08:e2:00:28:6d:42:90:a6:7d:ee:95:82:39:5e:74:5e:2e:
         c2:64:05:06:0f:f9:0f:e6:65:ef:f2:5c:e3:30:b7:08:4c:37:
         8d:cf:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:41:08 2025 by rpki-client