Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
File:                     60db1c24-6a73-3330-bf67-63ba94c1beeb.roa (raw, json)
Hash identifier:          MGVHpW/fCVyHRExn89rVTdWFlIQNFZRvS0e7Mpww+xg=
Subject key identifier:   06:6A:CC:14:C6:59:F0:86:DE:9D:B5:1A:F5:C0:F9:36:79:B7:F6:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0F3DBA0C51803CE61E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396600
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0f:3d:ba:0c:51:80:3c:e6:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=559d728b-26b2-47f0-a275-b1aa17127004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:ae:90:77:d1:5e:a9:8f:05:29:47:40:b2:
                    0e:b6:5a:27:fb:8a:7b:21:b7:85:e2:a0:ba:8a:33:
                    e2:0f:eb:65:2f:72:ed:15:db:d1:a6:ea:52:6e:80:
                    87:ff:2a:bd:98:d6:34:63:45:21:65:62:b9:7b:37:
                    f6:49:1c:bf:24:e4:a0:c4:d7:5c:a0:77:62:8a:33:
                    e7:5e:ef:d5:9d:ae:79:72:5a:1c:15:82:c1:c6:96:
                    c4:21:29:c8:cc:d8:4d:21:06:1d:41:04:6f:27:a6:
                    40:40:28:5f:de:2b:54:2c:c5:ee:6f:42:e0:3f:04:
                    f7:d1:7a:a9:89:57:10:98:b3:e9:86:7b:a4:9d:98:
                    e5:67:d4:c2:43:ed:96:ca:44:cb:de:a3:42:c4:78:
                    2e:40:37:f1:41:92:6e:51:20:2c:69:67:9c:5c:90:
                    c3:22:83:5c:7c:42:00:a4:9a:5f:61:34:5b:5b:d7:
                    3a:e1:63:6e:09:af:54:e4:43:a4:65:a1:d0:df:7e:
                    ca:82:f7:2b:13:98:09:cf:34:ac:05:a3:e2:ea:e9:
                    1f:67:4d:15:a1:c4:f2:0a:26:97:eb:45:13:5b:ba:
                    f5:7d:10:b4:aa:6b:e0:67:83:ec:88:da:5b:69:e9:
                    db:29:1f:b5:27:77:20:a1:1a:5b:82:34:f2:a6:73:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6A:CC:14:C6:59:F0:86:DE:9D:B5:1A:F5:C0:F9:36:79:B7:F6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b4:01:f2:91:70:a5:79:31:e9:69:2a:d2:a8:a8:bb:d9:ed:
         f7:2e:db:44:f2:fe:f0:e6:55:47:4f:59:ea:55:16:6a:51:9b:
         47:c4:20:af:6d:f5:02:1f:95:1f:27:5d:e1:cd:03:cc:9b:a5:
         c6:62:02:f8:eb:9b:37:53:7d:a1:f9:ec:e8:33:67:6c:e9:0f:
         62:f1:c4:da:b9:ca:c0:2a:7f:40:60:4e:a4:2b:3e:b6:65:f0:
         1a:e7:f2:47:5e:4b:e0:d2:a9:3d:b5:56:00:fa:af:79:e4:7a:
         08:bc:ed:9e:24:6a:95:45:8a:5b:d4:1a:a3:bb:62:3a:18:04:
         29:d5:99:5b:06:46:0a:43:2b:38:c1:23:05:f0:ce:9e:68:45:
         63:a9:5d:8e:11:38:50:bd:34:d5:b4:22:40:0b:2e:12:44:29:
         bc:06:dd:6b:3c:b1:46:76:16:6a:26:73:28:af:21:47:7e:e3:
         62:72:a4:6e:7b:66:7a:aa:c9:1b:db:74:0d:e2:44:b7:03:e3:
         7d:33:4f:1a:db:09:e9:c4:31:85:42:98:38:14:ae:ff:73:93:
         70:00:5c:e6:b5:72:e5:23:70:d4:86:1c:dc:2c:3c:fc:d8:23:
         36:48:f5:54:b6:5b:c5:50:f9:80:61:f1:a9:9b:93:35:ef:85:
         cc:59:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:05 2025 by rpki-client