Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/891c51a3-61f9-3ae3-a5f8-4da07700b58f.roa
File:                     891c51a3-61f9-3ae3-a5f8-4da07700b58f.roa (raw, json)
Hash identifier:          tm6cO/TVAJjcy4nw/FuCQctdR2bcqYHrp31y/GwmW3I=
Subject key identifier:   EF:D8:28:21:CB:00:03:EA:EF:F8:43:91:D8:EE:A5:2D:53:CC:62:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993FA018E2D87A763BE6C91C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/891c51a3-61f9-3ae3-a5f8-4da07700b58f.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396543
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:01:8e:2d:87:a7:63:be:6c:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=dac26a56-a5c1-4dee-9507-73e767bab475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:aa:0a:80:be:0e:6b:33:ae:74:91:89:69:87:
                    f6:42:11:cc:a3:64:f2:36:9d:bb:e2:74:85:75:0f:
                    53:28:05:65:bb:12:91:48:9b:d4:e8:98:c3:ef:20:
                    ad:fd:57:9d:46:88:2b:1b:36:a3:10:9b:45:6f:b0:
                    cd:6f:e8:aa:b5:85:4d:a2:ed:55:7a:c6:12:3e:87:
                    50:78:17:29:dd:dd:f5:2d:07:c1:2c:6b:c7:e8:00:
                    6b:79:4b:64:00:2e:49:00:4b:34:65:38:c4:a2:3e:
                    1a:e4:59:8c:c1:ba:53:0a:0a:5d:78:1a:c0:bf:77:
                    ff:1d:c5:9d:68:99:24:1d:81:fb:67:d0:40:3a:04:
                    db:33:9a:e7:d8:8f:e9:6d:08:1f:f6:58:50:e8:7a:
                    4e:5c:16:93:a0:e2:ac:43:90:90:7e:44:8e:a9:7f:
                    67:55:98:87:8d:2c:85:33:a8:1d:e1:c0:da:63:31:
                    2e:10:bf:c8:c2:58:0f:b9:9b:bf:03:2f:00:cb:f3:
                    e9:67:7d:11:73:1d:c8:eb:48:df:44:15:d8:91:4b:
                    5b:7f:16:83:9b:6d:00:69:2c:8b:dc:8b:b9:16:f4:
                    78:03:be:a8:7d:96:b6:00:fe:48:d8:ea:bd:f0:5a:
                    d6:a0:e4:dc:2d:97:8c:4a:c2:52:90:3a:4d:c2:7b:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:28:21:CB:00:03:EA:EF:F8:43:91:D8:EE:A5:2D:53:CC:62:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/891c51a3-61f9-3ae3-a5f8-4da07700b58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:18:0d:77:d0:df:6b:dc:0e:22:c4:e7:78:73:ea:a1:84:d7:
         46:08:4c:bd:03:81:af:3b:e0:80:01:93:6a:b3:50:88:39:1d:
         45:08:0c:b4:3a:57:c2:b4:b7:63:01:38:63:05:3e:65:c4:a3:
         8e:16:74:39:7c:eb:54:54:64:fe:00:0b:0e:48:a9:d7:80:6a:
         6a:e2:52:92:e1:2f:0a:35:ec:ec:66:ff:71:f0:17:2a:2f:dc:
         25:10:57:7e:80:37:46:11:0b:f6:79:a0:2f:8c:cc:42:db:be:
         9f:d5:b6:bd:30:45:03:ec:2c:d0:0b:4a:54:ca:16:ae:b6:f9:
         96:66:33:29:19:ff:9d:32:f7:43:9f:a5:75:e5:ed:e6:24:65:
         b8:e7:36:be:40:65:11:0e:45:c9:15:bd:09:f1:5c:b0:4f:cb:
         ff:63:01:08:a9:90:1e:51:91:16:78:de:10:84:73:40:b8:64:
         cc:44:d5:e1:6f:dc:37:b9:e9:de:9a:b4:6f:ba:77:2b:35:24:
         92:12:28:d6:71:f3:eb:a6:ba:ae:ef:6f:4e:33:ee:85:9e:23:
         ed:4d:b3:c5:21:8a:63:4d:8c:c5:5c:9a:fd:8f:07:72:fe:c6:
         17:1c:f5:85:84:24:69:30:22:0e:f4:55:54:0a:0c:a9:73:c1:
         f3:24:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:09:33 2025 by rpki-client