Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce7d560-13ce-3f0a-a7d8-05ef0f9fdb9c.roa
File:                     7ce7d560-13ce-3f0a-a7d8-05ef0f9fdb9c.roa (raw, json)
Hash identifier:          PYBtOXT4hS3jvhEQ/JkRArZxL+eLjCLTgWNzNIxmNZU=
Subject key identifier:   10:F6:00:60:FA:6F:66:EC:CF:B1:C9:41:26:9D:CB:CA:69:6B:08:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F62084A1FF19B91BC3800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce7d560-13ce-3f0a-a7d8-05ef0f9fdb9c.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     396589
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:62:08:4a:1f:f1:9b:91:bc:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=faa998fe-b170-44e6-b0a8-15e6c7c08731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:0e:e3:cd:f8:6d:cd:fb:6d:6b:da:65:91:
                    44:f3:3b:cd:c3:15:09:10:c3:fa:a0:b0:ce:27:6c:
                    59:26:85:3d:3b:df:95:35:1f:20:84:17:18:68:a4:
                    13:13:8b:9a:8a:b6:8e:c6:40:81:24:70:a6:b6:e0:
                    fe:df:f6:34:e3:e1:28:13:e7:fc:07:22:59:85:ff:
                    2a:39:28:d3:41:de:9e:90:f2:04:9b:e9:ed:25:1e:
                    1e:20:7e:0c:ed:0b:fe:ee:64:13:c3:87:1b:eb:27:
                    c8:13:d7:b6:a7:95:77:3e:e5:fc:66:49:d2:73:4c:
                    5b:3e:1a:be:cd:6d:01:2c:c5:70:6e:b5:aa:32:bf:
                    1a:6b:c9:0b:b7:1a:60:dd:74:02:9d:46:6c:ed:8e:
                    8c:9e:b6:6d:bf:f8:5c:ab:fb:6a:de:e7:41:cb:53:
                    14:a7:b5:56:e4:ea:08:5b:a5:cd:3d:71:01:e3:96:
                    d7:bf:fe:76:aa:00:20:66:15:54:0e:ec:c5:aa:ea:
                    6c:fc:5a:24:c9:da:23:72:cb:1d:4a:9a:c3:f9:4a:
                    15:74:1b:1e:26:4d:33:89:d4:c5:b0:ea:97:98:ff:
                    b7:bc:e9:0d:38:a7:87:13:79:c5:f8:4c:27:b2:f2:
                    25:c0:24:95:41:a7:ca:08:4a:cf:b7:c0:4e:02:8d:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F6:00:60:FA:6F:66:EC:CF:B1:C9:41:26:9D:CB:CA:69:6B:08:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce7d560-13ce-3f0a-a7d8-05ef0f9fdb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:96:a5:90:20:ec:b1:20:5b:ce:fe:d7:e2:75:d9:30:ec:
         3e:22:0e:64:8d:61:6e:e9:64:8d:03:79:7c:9a:f3:9a:07:72:
         0a:8c:76:e8:db:06:38:9c:f7:e8:b8:4c:23:8c:d4:d9:10:04:
         40:ea:f8:52:42:84:6b:55:80:2c:40:86:1a:0b:e5:51:57:90:
         eb:47:40:47:00:e0:e8:09:8a:9b:43:89:0d:58:e2:6d:52:7b:
         0c:3f:a4:a2:52:9b:68:f5:98:f6:ca:c6:2f:98:94:98:62:e7:
         42:4b:90:32:87:6a:3b:91:13:f9:fb:0d:6d:63:f7:45:be:81:
         c2:d1:1c:08:83:05:6f:60:3a:d8:c2:0c:c2:bc:0b:a8:1a:27:
         e0:ef:cb:85:d3:3c:45:20:b5:56:45:80:18:41:99:d0:97:84:
         c7:8e:78:4b:6c:d5:f7:25:4b:ab:05:7b:e3:e1:da:98:79:8d:
         f9:a9:f3:0f:70:04:2a:d0:f9:4d:fe:7e:44:7f:e5:d3:b1:02:
         e3:68:d0:7e:bd:6b:75:d4:bf:12:d5:9b:3a:14:56:11:c7:a9:
         8c:4f:41:7b:4b:4c:0d:b3:fc:53:ca:94:b7:de:87:74:26:86:
         a9:27:b3:9a:ea:94:ad:72:48:07:d5:9d:ae:38:82:8e:e0:b5:
         3e:ae:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:26:44 2025 by rpki-client