Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47da8695-9585-3b73-b7d0-607a5f056aa5.roa
File:                     47da8695-9585-3b73-b7d0-607a5f056aa5.roa (raw, json)
Hash identifier:          7UYdNWB2xQXKzjeMULsUmQ0AcdnZvS78u8n6JAUi9oE=
Subject key identifier:   DA:8B:9E:A2:09:AF:66:92:30:16:3B:86:33:B7:FA:07:52:4C:A6:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331AFF74BE72BED50A505A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47da8695-9585-3b73-b7d0-607a5f056aa5.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     10515
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ff:74:be:72:be:d5:0a:50:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=15da6677-e832-4738-8ddd-c5c3823f3f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:19:e3:26:eb:9f:d4:2a:d8:02:f4:9f:58:
                    32:5f:c7:48:09:83:9d:a7:1f:84:1d:98:06:9f:88:
                    eb:1d:5e:88:dd:7a:19:57:a7:88:0b:05:6c:30:43:
                    a3:21:d7:76:d3:51:3d:11:80:15:82:bc:01:37:3c:
                    09:ba:0f:36:e2:b7:9e:eb:17:d0:4a:f6:e4:b2:9d:
                    3e:b8:f5:61:42:45:93:ad:44:9e:18:b3:97:6b:04:
                    e9:57:b0:60:c4:9c:70:7d:98:37:05:90:1e:62:c2:
                    43:c0:be:e5:58:9c:4a:62:8e:bf:f0:ee:55:7d:14:
                    d5:38:8c:e7:49:77:3d:52:70:63:db:4c:aa:61:a6:
                    29:bc:e7:cf:9d:02:21:00:03:43:0a:1f:91:4f:69:
                    43:b3:45:42:84:83:dd:fa:3a:e9:54:06:86:2a:34:
                    77:75:67:ae:4c:ce:b0:7a:84:01:a2:03:56:29:d5:
                    f4:70:13:e1:73:ee:1d:65:e3:01:6a:9a:e7:ac:59:
                    3b:dd:25:0d:ad:7e:72:72:48:d4:32:e3:42:65:82:
                    bb:89:dc:01:21:de:5c:72:c9:5d:44:79:f3:a2:e5:
                    dd:d7:2b:e1:0c:1c:eb:f0:27:7c:fc:51:57:b7:2b:
                    7b:60:50:b2:af:51:56:9a:7c:4e:48:54:cd:1f:0e:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:9E:A2:09:AF:66:92:30:16:3B:86:33:B7:FA:07:52:4C:A6:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47da8695-9585-3b73-b7d0-607a5f056aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:67:de:39:9d:52:9d:3b:dd:b6:26:ab:98:ed:40:4c:c7:0c:
         a3:6c:2c:9e:5d:de:b7:a1:f5:5a:8f:5f:26:1a:9d:5e:41:91:
         31:b8:5a:13:1c:8a:1b:13:db:9f:7e:7a:0d:c4:c4:44:2d:74:
         bb:c7:4c:c5:83:72:ac:29:99:5b:db:ce:c6:9a:89:ea:b7:84:
         cc:94:60:9e:ff:97:d1:27:5c:dc:a5:6f:56:14:7b:a2:bf:53:
         93:7b:f1:32:96:db:0d:2f:53:40:97:f5:ed:d2:1d:3e:70:be:
         8e:d8:af:bc:13:83:b2:53:e4:24:c9:e4:e3:cb:f1:ad:b6:d2:
         a7:b5:23:5c:16:e5:a7:8a:b0:0b:9b:e3:c7:cb:31:3a:d3:7a:
         5e:42:93:d9:78:0b:c3:b8:3c:4b:a7:d6:99:f8:8e:56:8d:e0:
         86:3e:3f:25:1e:ae:c6:20:2c:50:50:6c:f5:7b:b5:9f:53:e1:
         6f:7c:df:cf:d8:5b:48:c2:4d:5e:fc:39:67:57:51:b8:85:8c:
         ff:3b:39:52:60:af:af:f0:37:bd:49:5b:ff:90:ce:f5:2a:49:
         e1:56:1a:8a:e0:af:08:d7:4b:30:28:5b:e8:e3:31:bb:63:ec:
         30:85:3a:db:8f:f0:2d:3b:1b:51:03:37:73:ce:ef:a5:98:09:
         79:45:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:31:49 2025 by rpki-client