Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b029021-bf5b-3a70-85a1-61028c24980b.roa
File:                     4b029021-bf5b-3a70-85a1-61028c24980b.roa (raw, json)
Hash identifier:          rVMd+A1BHVHZjxVP6Z40nqK3GiVOO+x9diOd80juDb0=
Subject key identifier:   B5:11:D9:48:87:B6:B6:E3:72:8D:ED:96:D6:4B:8D:76:78:0E:69:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F631B1EF5CB1280FC7A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b029021-bf5b-3a70-85a1-61028c24980b.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     396826
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:63:1b:1e:f5:cb:12:80:fc:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=5f5dccaa-424d-4673-a64e-b7b2485b5471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:aa:87:8a:92:ca:01:f0:4c:ed:a5:81:b0:
                    c7:90:5f:36:d3:a6:92:99:97:16:14:ee:1a:50:86:
                    29:ce:e4:d6:92:e5:3b:87:44:fd:68:45:90:5e:0e:
                    c7:0f:60:ca:0e:19:d4:e5:88:d9:a0:19:5b:8f:42:
                    3f:8b:20:d0:f5:4e:11:c7:cf:8e:48:bd:70:e1:32:
                    0c:dd:58:c8:44:1a:57:d2:b7:41:19:d5:dd:61:cd:
                    31:94:8a:fb:b9:e9:3b:fb:a6:14:15:19:08:ff:58:
                    55:20:5c:8f:9a:68:8f:a4:f0:18:53:ab:82:ff:0a:
                    55:04:22:f5:f3:9e:c8:6a:cc:d7:7f:6b:74:47:a5:
                    4b:0a:53:d0:c4:2e:5b:19:76:d7:d0:8b:95:e5:4d:
                    16:b3:41:97:fa:90:93:6f:e5:fb:c4:ed:d9:70:28:
                    e5:60:71:4a:57:9f:1d:77:2d:4f:f7:ec:38:fe:79:
                    32:e5:26:f1:ff:18:b9:6c:bd:51:8d:0a:c7:30:e5:
                    7b:a9:48:db:14:cd:92:8f:e5:b8:95:dd:b8:4f:e8:
                    84:39:94:48:58:9b:32:fa:1f:30:77:9e:98:0d:52:
                    8d:ef:97:0a:52:02:9d:ee:60:30:b8:58:65:3c:19:
                    0f:86:c3:b3:a1:83:55:17:49:84:6f:68:19:75:28:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:11:D9:48:87:B6:B6:E3:72:8D:ED:96:D6:4B:8D:76:78:0E:69:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b029021-bf5b-3a70-85a1-61028c24980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:88:7a:d8:12:16:b5:74:cf:79:b5:88:28:23:92:0e:33:78:
         51:7c:7c:cd:aa:ae:47:f5:af:8c:22:1d:e3:96:76:67:94:d6:
         19:1d:e4:9c:40:ae:0e:44:dc:78:5a:e1:47:b4:e5:4c:7e:5a:
         f9:1b:26:98:b1:08:7d:4a:4b:21:cd:82:64:b8:7f:7f:5a:51:
         ec:0c:0b:d7:5b:95:55:36:66:77:3b:f6:6e:93:60:d8:66:78:
         f9:07:a6:ae:b8:8d:4e:12:23:db:65:7f:36:31:41:b7:87:c2:
         43:66:bd:d8:3b:ca:f3:0d:91:aa:72:ee:22:4a:65:c8:c3:50:
         5b:39:11:d4:b2:68:2e:ea:06:ac:d0:87:b9:4f:10:a7:c2:61:
         70:a7:f2:bc:d0:03:e1:f5:d4:9a:04:a8:08:2f:cd:15:5a:63:
         2e:65:97:3a:84:a1:bf:d0:4b:04:02:fa:0b:f1:7c:49:24:5f:
         a4:2e:6f:72:e0:f1:ed:5a:ae:45:2f:bf:1e:30:4d:68:b2:50:
         1a:61:f0:65:07:e2:22:8e:03:c5:8f:17:fb:bb:7a:e2:09:83:
         5e:0e:cf:d4:6f:36:6c:11:65:9e:92:c4:c2:0e:46:49:81:9f:
         bd:90:83:0d:9c:8a:8b:9e:31:bc:65:bc:b2:34:89:db:b2:fb:
         6e:b8:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:33:50 2025 by rpki-client