Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71949d24-4317-3d99-9581-03ffc88a93dc.roa
File:                     71949d24-4317-3d99-9581-03ffc88a93dc.roa (raw, json)
Hash identifier:          tsvDt23n6yEr2koSStCHH0UvoLo49jdSndvsV12rGJs=
Subject key identifier:   54:1E:94:D4:48:D2:42:58:1C:00:3B:3A:F0:44:F2:AA:9D:37:93:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0DFEF49E9DF82CB04700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71949d24-4317-3d99-9581-03ffc88a93dc.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     397197
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0d:fe:f4:9e:9d:f8:2c:b0:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=05b3708c-ea14-4053-b752-c58c93aea8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:c3:b4:33:d0:c8:c0:c9:89:cc:36:5e:03:
                    5c:2f:b3:c1:0e:a0:48:53:cf:d2:d6:65:8c:3e:ed:
                    29:94:b9:7f:76:ad:24:74:12:98:3b:35:56:ac:85:
                    20:4a:23:45:96:0a:75:68:a5:54:e9:39:2c:28:1e:
                    ed:31:31:0b:b5:b6:a3:94:28:e2:e6:0e:64:a3:15:
                    9e:c0:ef:10:11:a2:f0:eb:78:f4:1f:bf:db:fa:95:
                    75:5f:de:8a:60:53:7f:b6:74:f5:05:8e:ca:17:53:
                    59:c8:69:68:8f:05:0b:d9:ce:d3:21:45:7c:cc:5a:
                    e4:cc:d7:66:ba:c4:bf:dc:ee:89:97:1f:5f:cc:a6:
                    3c:e4:aa:05:fc:a2:80:67:7b:07:49:70:06:15:3d:
                    a1:2f:f2:b4:94:e3:86:25:df:fe:8c:54:fb:87:2a:
                    60:cb:ed:5b:b5:3c:84:54:08:b8:a5:ac:34:1f:b2:
                    ae:a9:bf:ef:1a:f1:60:5b:1d:5b:82:a8:80:e5:c4:
                    a5:26:4c:3e:e9:25:6c:a6:43:e1:e7:54:63:fc:dd:
                    29:67:48:68:f9:3c:3f:88:1c:e3:27:5a:86:9e:5b:
                    33:20:e3:05:a1:fa:c1:c6:23:7d:3c:0a:f8:65:e8:
                    08:a4:c8:48:77:d0:25:27:cb:21:2f:d5:3d:4a:a7:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:94:D4:48:D2:42:58:1C:00:3B:3A:F0:44:F2:AA:9D:37:93:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71949d24-4317-3d99-9581-03ffc88a93dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:d7:99:63:d8:14:94:5e:ee:c0:bd:4a:52:6e:ff:30:28:
         94:48:a9:53:57:cc:b2:6e:2d:b3:5a:b0:99:eb:36:f3:97:3d:
         36:ed:62:0b:f3:34:41:cb:d1:14:13:db:9b:93:cc:72:23:f9:
         6f:e6:36:a9:1e:6a:86:a9:39:21:af:a1:e0:1f:de:5f:9a:86:
         6b:ca:38:79:3c:63:1f:ac:48:ad:6d:8c:9c:cd:b2:7f:e4:04:
         45:24:77:69:32:d5:0f:f3:41:76:2e:0f:1f:89:28:26:1f:f7:
         fd:13:6a:e3:0b:4d:6a:fc:5f:9f:ba:65:dc:14:01:49:64:1a:
         01:04:3f:9f:4e:ea:36:f5:f2:70:dc:3b:37:da:e8:a0:49:ed:
         d6:fc:39:3b:ed:dc:6a:1a:03:47:26:3c:bb:f6:3a:29:f2:dd:
         af:22:09:6b:fc:fb:c0:c1:aa:64:a2:6b:b1:54:17:64:5b:67:
         13:f0:cb:61:be:15:a4:56:77:bc:f0:14:3e:83:e4:db:91:a2:
         1e:68:cb:86:5a:28:60:c5:18:c2:5c:f6:e3:03:d2:c3:f4:71:
         81:29:31:31:1a:6a:2f:d7:23:09:08:e1:b4:f3:0f:28:60:41:
         c5:64:9c:c6:a6:cc:b6:85:94:7d:a5:70:7b:63:ff:8f:f4:d4:
         15:a1:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:29 2025 by rpki-client