Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cdb6165-c026-3968-a4ad-a5d8bea1f6d2.roa
File:                     6cdb6165-c026-3968-a4ad-a5d8bea1f6d2.roa (raw, json)
Hash identifier:          rL0gtI0JuskjBhQ1ddKbItT/BwZ5GWRwl5NRe7sZZ2M=
Subject key identifier:   91:8B:A3:39:48:1B:4C:E0:2F:91:EF:A0:2A:27:35:DC:FC:98:E4:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2CB492C95B6351ED7FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cdb6165-c026-3968-a4ad-a5d8bea1f6d2.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396569
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:2c:b4:92:c9:5b:63:51:ed:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3b1520f9-21b3-4f70-95d9-b358136b4f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:b0:f2:8d:d4:3f:1b:52:12:af:c2:00:d9:
                    60:c1:b9:2a:89:b8:5f:23:d8:ea:50:9f:51:04:c6:
                    b5:eb:61:f5:9b:9b:07:a3:06:e1:0c:cc:03:2b:14:
                    00:b1:9d:9a:2e:9a:73:19:ab:a3:54:bf:97:98:a5:
                    c5:77:3c:0d:7d:78:f8:42:de:01:2f:b6:58:65:d0:
                    ab:e5:b2:a4:58:7c:25:eb:dd:a5:f5:15:ad:da:14:
                    0f:ee:63:2a:17:00:ff:14:29:aa:ec:71:d9:ac:33:
                    37:d7:94:12:2d:0f:6a:f5:0f:b8:c6:1d:1a:99:d0:
                    4f:7c:a1:30:a3:9a:47:f0:55:5b:cb:aa:20:c0:dc:
                    e0:71:ee:1a:ab:c8:60:11:fe:09:43:f6:fe:eb:ed:
                    9a:05:7c:f8:5e:7b:74:6e:9a:3d:bc:89:19:38:c3:
                    24:8f:1f:d2:c7:e6:32:aa:cf:e4:22:47:f6:6c:23:
                    23:bf:b5:3d:31:94:c3:fa:ca:b2:8c:e2:59:f8:f5:
                    3d:ab:6b:1e:a9:9f:76:7a:cf:c8:9d:33:ff:42:ca:
                    5e:e4:51:38:1f:a8:c4:18:d3:01:b8:a7:2c:e2:02:
                    df:50:1d:9e:54:6d:ac:64:da:05:71:59:71:56:ed:
                    36:dc:9f:68:25:fa:c7:9d:f8:f3:cc:7f:7d:73:d9:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8B:A3:39:48:1B:4C:E0:2F:91:EF:A0:2A:27:35:DC:FC:98:E4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cdb6165-c026-3968-a4ad-a5d8bea1f6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:6b:22:97:f8:79:e9:19:e2:8e:a3:82:64:43:9c:73:2c:bb:
         24:4d:3b:e3:8c:f1:88:a9:af:f2:86:ee:4d:9b:bc:e0:2d:6c:
         2a:24:2d:22:a6:34:7c:43:0b:23:c7:88:b8:cb:be:4e:7a:ee:
         58:54:2a:78:2e:0f:13:1b:19:0e:44:c3:c7:93:a6:13:79:9f:
         ec:aa:c8:2d:72:b6:cd:15:1d:7b:2e:fb:95:c5:b9:7b:9c:61:
         9e:da:d7:84:dc:93:bb:c3:3c:51:35:7a:2e:39:3b:9f:04:6a:
         ac:f6:64:25:b0:c3:04:04:b0:99:29:8a:1c:cd:6d:9b:6c:af:
         31:75:28:93:9c:55:d1:e6:9d:a6:f8:a4:c8:fb:80:69:94:94:
         2f:37:f1:65:cb:e1:5c:3b:e8:3d:85:e2:b0:91:b8:19:f5:03:
         86:92:6a:e6:16:54:7a:d3:11:ad:8a:80:cc:91:5c:97:c4:d6:
         91:62:6b:1b:48:1f:b4:4e:02:4d:3c:2f:68:51:1b:4f:2d:9d:
         c2:55:57:0b:2e:2c:a2:72:06:6d:38:0e:da:90:81:7e:55:6a:
         e9:2d:74:11:a9:22:7f:b5:2e:a0:9f:9f:68:98:d5:33:c4:2c:
         f1:48:62:34:c2:2a:f8:b0:25:fb:ef:c5:aa:ff:a6:cb:6b:e7:
         57:b3:dd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:57:25 2025 by rpki-client