Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa
File:                     6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa (raw, json)
Hash identifier:          U83NbIcTwtkE4/IAML0CpB4aOg6Efs1s/4oxfTaBaFo=
Subject key identifier:   CD:F4:04:C2:9C:13:10:2A:42:0F:84:C0:A0:D1:4F:F0:C8:13:2D:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F618F5B69F14D6BAA4EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     397211
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:61:8f:5b:69:f1:4d:6b:aa:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=a14322f0-f7cf-417f-8696-32250fe19c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:2b:d7:3e:87:2b:5e:6a:46:8a:0b:10:b0:
                    c6:86:ac:16:ff:0b:ac:98:27:96:79:02:1e:02:19:
                    86:c3:6b:9d:94:16:af:45:b5:62:5c:0a:60:8e:f0:
                    49:1b:2b:29:83:60:77:48:37:ef:76:ca:a8:48:1a:
                    67:c1:df:71:06:16:0a:be:9f:6a:d3:73:eb:fd:f2:
                    1f:89:44:28:08:05:82:b1:f3:3a:a2:0a:1b:2c:79:
                    1b:c3:9f:46:82:e2:6c:d2:a6:04:9b:ed:0c:cc:cb:
                    5f:85:df:2f:e9:a4:14:d5:84:46:6c:17:28:e6:4b:
                    17:8e:3d:7b:a4:cb:f9:54:9e:15:a0:a3:6d:25:44:
                    35:47:65:5d:8f:9a:47:d0:be:36:e2:2d:5d:2e:fd:
                    36:5d:5d:53:c9:d8:a8:6b:da:fe:3c:2b:7e:0d:ee:
                    d4:b3:33:f5:25:5f:91:88:76:9b:f3:15:0d:2c:14:
                    8a:18:e9:d8:24:96:74:17:36:ef:b3:7a:92:c2:dc:
                    d0:89:d9:9d:91:6f:94:c8:1f:ba:87:07:43:d9:7a:
                    d6:2b:23:0e:49:6c:38:7c:91:74:db:1b:44:ec:f3:
                    0d:88:90:db:2f:47:01:be:38:24:0f:3a:37:d8:95:
                    4c:3d:3a:24:8c:4d:36:75:7f:a4:6c:82:f5:bb:ee:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F4:04:C2:9C:13:10:2A:42:0F:84:C0:A0:D1:4F:F0:C8:13:2D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6abd5701-05c4-3e2e-8bfa-9f82fd216763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:17:3d:9f:02:cb:a4:63:d0:3f:74:43:79:64:69:02:90:4e:
         9f:10:69:ce:7b:c0:03:5f:e1:7d:be:73:fa:50:7e:84:68:05:
         2f:27:99:d1:c2:a8:b1:c1:a0:c1:4d:7a:34:d7:e9:c3:4d:65:
         73:32:d3:31:de:60:83:d7:ab:a9:76:ff:03:67:6d:cf:9f:4c:
         67:da:d3:62:ba:04:04:83:ae:0d:68:a4:5c:36:9e:02:60:a9:
         e0:b9:4f:f4:1e:ed:24:2d:fd:68:41:3c:e5:df:4a:89:d8:78:
         76:fd:b3:11:ed:a9:5d:6b:9d:d1:a4:51:9b:1a:53:26:f7:6f:
         8f:f8:fd:90:38:ba:fe:18:3f:29:1f:30:9d:2a:6b:24:4b:fb:
         96:33:11:7b:71:a7:07:ca:8b:7a:5f:eb:22:0a:e1:ab:30:8e:
         d7:57:ab:5b:04:af:7f:3b:59:4f:59:8c:65:1d:29:61:69:22:
         60:95:67:22:fd:64:0c:2a:81:6f:0e:6c:fd:38:55:74:f1:da:
         5d:29:af:1f:d6:71:3a:0b:38:3c:14:53:03:f4:79:f2:11:e4:
         52:64:75:4f:0f:c7:3a:84:45:1c:70:e8:df:6d:22:d5:65:07:
         25:06:7e:b1:07:60:0f:ee:16:6e:a3:da:5c:23:c0:0b:39:b2:
         45:e4:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:57:39 2025 by rpki-client