Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa
File:                     4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa (raw, json)
Hash identifier:          fYoanyRvJ57hFir4ZYHm3NPDkn5A3zeYyjQRYi7vtm8=
Subject key identifier:   B7:43:DB:35:51:1A:23:6C:D1:12:B4:6D:6F:0F:5B:0D:E3:A8:65:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64ACC3B2CFFB70FC72F380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     396594
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:ac:c3:b2:cf:fb:70:fc:72:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=bbf61021-8c52-436c-86c7-ff81d3ad5421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:00:11:a7:b8:41:bc:c1:7f:34:5e:b9:5c:
                    d4:ce:c5:92:a0:e8:ca:a9:7c:b2:20:32:11:51:e3:
                    91:78:cd:15:82:9a:d6:e7:5d:31:9d:b4:1a:f4:6f:
                    d3:53:3c:37:4f:62:3a:f8:b3:2b:fa:d9:99:2e:6f:
                    e2:ce:d8:bd:e2:15:d3:4c:8a:9b:cb:66:23:08:1c:
                    7b:c9:3f:d4:16:f3:88:3a:fa:0f:fc:96:b3:a8:a1:
                    9c:10:32:d0:7a:27:e5:c2:f3:18:66:09:ed:fc:63:
                    6b:e3:8d:17:19:da:24:2e:0a:17:45:a0:1f:4d:3a:
                    c7:86:9a:bf:06:ad:a1:21:07:f5:a6:77:c6:e6:9b:
                    12:d1:0f:17:5b:02:62:e5:af:68:77:e9:c4:78:20:
                    93:e2:c8:fd:ae:fd:07:5b:ca:c2:eb:0f:5a:3c:de:
                    34:a0:d5:a2:bb:02:59:f9:1f:2b:40:1c:36:c2:55:
                    60:35:bc:32:0a:6e:06:b8:0f:77:a4:89:63:f7:06:
                    bb:66:3c:83:02:54:36:73:04:e7:cb:b2:ec:b0:04:
                    98:97:a3:54:68:6a:6a:61:23:81:f2:9b:57:6b:4f:
                    ce:dc:08:29:54:57:3e:e1:45:34:2b:7c:7f:02:3a:
                    c3:39:74:6e:7d:73:82:91:e2:9f:4c:18:d9:52:6d:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:DB:35:51:1A:23:6C:D1:12:B4:6D:6F:0F:5B:0D:E3:A8:65:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:cb:56:84:fa:2d:e7:86:48:82:19:4a:0e:a3:b2:8a:28:
         66:f4:3a:ea:aa:78:4a:e8:95:27:fe:34:e2:81:0e:73:21:4f:
         f1:74:ba:a0:c3:fa:75:fb:4d:bb:eb:b3:51:6f:ba:25:4c:0c:
         44:f5:22:0c:31:92:2a:fa:ed:6b:3a:15:5e:35:6d:43:8d:16:
         e9:87:1d:34:37:37:e1:b8:8e:77:39:68:71:f7:7d:d6:90:a8:
         3a:8e:a1:00:16:ad:5d:8a:69:c6:99:fc:4a:a4:b1:73:e4:52:
         4e:a4:13:fb:f0:a4:15:69:e0:3f:66:cd:92:de:3a:1c:18:22:
         a3:ae:75:56:41:4b:83:95:99:c5:bb:e9:9b:f1:e6:4b:34:16:
         d4:47:ff:08:67:9b:0d:5e:72:6a:61:cf:f6:55:0d:3d:60:88:
         f7:38:e6:f9:59:6b:7e:cb:27:13:45:15:4b:7a:30:d3:a5:50:
         6f:68:a6:d5:e7:79:c0:a0:02:25:0a:42:1f:b0:0b:9f:56:6b:
         9a:9a:54:4c:23:48:97:ea:97:e9:52:7d:46:fc:65:b7:6f:f8:
         93:9e:e1:d5:c8:0b:d9:14:6a:34:7d:6d:87:96:76:4a:cf:a8:
         a4:c4:92:7b:0c:f9:d7:96:dc:ec:f6:76:ac:d5:78:4d:49:3c:
         0c:16:cb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:10:53 2025 by rpki-client