Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/580fb4ea-eec2-326b-8569-204148a6af09.roa
File:                     580fb4ea-eec2-326b-8569-204148a6af09.roa (raw, json)
Hash identifier:          ZYjNaF10mMAJLsmjECGPFEm+Iwq2Qhk65/kWcU03A7M=
Subject key identifier:   2B:2D:5D:B1:1D:5B:65:DB:12:DC:BB:24:EE:8E:F5:EA:69:EA:EB:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB1B4138DD51F0CAFD2B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/580fb4ea-eec2-326b-8569-204148a6af09.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     10515
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:1b:41:38:dd:51:f0:ca:fd:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=46c3cfea-23e8-45af-b275-fa3fd630c35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:c8:90:f0:39:bf:b9:c8:1f:d7:13:92:11:
                    6e:48:c2:6a:96:c2:0e:4a:0b:ce:95:76:b1:99:2d:
                    dc:31:23:e1:8d:c9:00:13:db:c4:e7:2f:00:dc:5a:
                    fb:62:da:8e:02:4d:2b:ca:9b:dc:e7:5b:3c:99:d9:
                    30:21:bb:58:6f:38:bb:dc:ee:7f:a5:1e:eb:f2:57:
                    e1:8e:ad:f5:1c:ce:4a:ad:14:07:b7:bd:33:bb:a0:
                    4a:a2:cd:e1:8d:bb:51:b0:f2:c5:d0:a9:a6:80:60:
                    bf:e4:5b:b5:04:08:ae:d0:f7:ef:08:3c:68:61:f4:
                    28:67:54:ad:61:83:41:17:5a:db:6f:22:12:10:dd:
                    fa:81:3c:09:38:c3:94:b5:a6:db:1d:b3:a6:d4:6b:
                    9d:20:e1:e7:c4:73:2b:13:9d:d6:49:d9:dc:29:fa:
                    df:af:66:e0:15:d2:23:7c:45:27:2c:40:60:53:e5:
                    12:4a:e9:cc:c5:d3:60:82:5a:bb:f9:85:bc:0c:ae:
                    0a:19:c3:34:76:80:49:2a:e3:5a:ab:e5:ee:7b:70:
                    21:36:0e:cc:be:56:fb:54:e9:1f:39:2b:c7:ff:57:
                    ff:38:c3:17:68:c1:02:29:bf:bc:1f:69:b4:96:23:
                    6a:01:35:0c:0a:31:39:9d:5c:f7:b4:9b:fc:19:5d:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2D:5D:B1:1D:5B:65:DB:12:DC:BB:24:EE:8E:F5:EA:69:EA:EB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/580fb4ea-eec2-326b-8569-204148a6af09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e7:18:9d:df:a1:1e:a4:e3:84:38:10:57:be:f8:88:1c:cc:
         32:d3:1b:5c:a0:b1:1c:ba:44:db:d5:d4:44:8a:24:46:61:ec:
         cb:d5:e7:62:da:b8:1c:39:c7:0f:b7:57:33:b0:4d:88:bc:fd:
         02:f5:36:bc:27:02:10:88:7b:6e:e0:2c:bd:22:14:10:11:b9:
         08:ca:07:bf:ea:3d:92:9a:53:a9:d7:30:88:e6:5e:91:23:2d:
         f9:36:43:3e:15:38:7e:98:bb:d7:68:b2:09:7a:26:0c:bd:d3:
         00:63:8d:88:25:57:a1:60:c5:75:e0:0d:4c:28:5d:be:3a:d2:
         e1:6a:53:39:64:51:7b:5c:a7:f6:d1:75:01:9f:f1:99:bb:2a:
         7f:9b:b7:53:d4:e5:02:92:29:1b:c8:15:66:1b:95:47:18:d8:
         8f:24:2b:ba:3e:d5:51:3b:e6:d4:04:56:aa:07:f7:cd:f2:d4:
         d8:85:ff:12:f5:50:53:c7:fd:e9:eb:b7:0a:2e:c7:ef:b7:92:
         68:42:c1:58:21:f6:c2:b9:66:ec:ff:ca:aa:32:90:7d:3e:37:
         6c:a9:61:84:d1:af:75:b0:af:2f:14:98:09:90:06:61:7f:90:
         97:64:54:2c:8c:df:17:4f:e3:4a:5b:79:2a:16:a9:61:41:41:
         af:1e:c9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:04:30 2025 by rpki-client