Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa
File:                     8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa (raw, json)
Hash identifier:          tQ0soS4vgBGzeuN81+ZjkwS0O1wDYCzBFGiJs8hRQ2s=
Subject key identifier:   4E:22:D8:03:5B:C9:56:66:6D:BC:FE:EB:58:3E:1C:14:F7:A5:FD:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0C663318DB3F766C5140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     397201
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0c:66:33:18:db:3f:76:6c:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=c44c9b54-b88a-408b-b973-d01e06dbc465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:98:4d:a9:16:1e:00:9d:e7:37:62:94:79:
                    47:af:03:66:57:19:39:ff:2c:99:ae:66:c3:bf:71:
                    a9:3b:7f:0b:9c:ea:aa:c0:26:6e:7d:4e:e7:70:80:
                    8c:78:a5:ee:36:1a:ee:14:7c:bd:7f:37:48:f8:ab:
                    f1:4a:19:29:a4:b8:2b:cd:4a:06:17:38:df:b5:dd:
                    00:41:e6:d3:4d:f8:b5:c5:36:e2:92:08:33:f5:d0:
                    d8:dd:ef:65:6f:c0:86:00:73:8c:11:be:3b:fc:54:
                    99:21:b5:a0:a9:d0:80:e8:4d:a4:a3:e4:49:4a:61:
                    a8:30:9f:65:0c:fd:d7:e0:29:61:ee:58:49:d8:22:
                    1b:f3:92:ba:d8:a8:a0:78:00:1f:9b:0c:9a:19:9b:
                    f1:50:33:75:4d:d2:c6:a7:be:83:43:9f:c4:8e:91:
                    1c:8e:ac:b9:3a:8b:44:f1:19:29:53:b5:51:76:1e:
                    34:b3:33:3c:d5:62:e8:30:f9:fe:36:77:f3:b0:af:
                    e1:35:3e:d5:0e:b4:3e:f7:86:2e:6c:c3:f4:50:bb:
                    85:55:a9:78:68:c7:6b:e4:cf:ec:82:de:c5:cf:5c:
                    99:36:60:68:db:9d:c6:c2:d8:15:7d:2e:47:4a:a4:
                    c9:39:e9:10:96:42:ca:4e:14:80:4e:03:f9:8e:c8:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:D8:03:5B:C9:56:66:6D:BC:FE:EB:58:3E:1C:14:F7:A5:FD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6d5a05-951f-3818-8c8b-f2b9e0237d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:d0:9f:05:c0:8a:49:10:39:a8:ab:65:c1:2c:17:c2:c7:
         76:97:50:17:36:0b:9e:28:4c:6b:94:2d:f7:3b:26:ff:db:d6:
         42:25:fc:05:55:63:26:14:e8:2a:c4:46:77:4d:1c:b9:a2:df:
         1d:63:19:fe:38:02:19:8e:f5:fa:70:45:24:e5:86:36:b9:fa:
         f6:fc:49:4a:1d:93:70:79:72:fa:bc:6e:35:79:e5:8f:32:3b:
         24:7b:30:2c:bb:60:d6:0a:81:16:f9:b3:de:07:60:41:ee:b9:
         4e:c7:98:e7:27:06:66:96:62:2b:2f:2a:38:33:7f:da:ec:76:
         18:fa:63:ea:af:79:fa:f6:2e:32:71:78:f6:00:cc:12:39:ab:
         64:26:11:5e:92:4b:18:82:44:6a:98:1a:7c:8a:b6:f0:2b:4c:
         e2:e3:d8:f6:df:0e:c5:08:2a:15:61:33:66:83:f8:6c:1b:01:
         3b:a9:bf:9f:8e:2a:6f:73:e9:9c:19:04:04:03:1a:c5:73:a9:
         79:3b:19:ad:d1:0e:d0:57:60:35:8b:39:d5:ae:49:31:ed:b0:
         df:3a:0f:2a:54:60:a4:c1:6b:f3:c5:e1:36:2b:dd:83:b1:3c:
         ca:08:08:54:40:5f:dd:49:65:25:3f:f7:68:69:6d:c4:2c:e9:
         58:64:23:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:57:37 2025 by rpki-client