Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa
File:                     8caf640c-3e1d-3441-a59c-1d937eb66080.roa (raw, json)
Hash identifier:          eVg4OxpQhdQA9S9vpMSRBPxexR7/Nrqx98Bg/tU0KVc=
Subject key identifier:   30:4E:9D:87:B8:CB:20:AC:26:6B:B5:4F:2B:AC:69:19:79:9B:7A:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F5B7D2ADE2AB5FCE86540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     396572
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:5b:7d:2a:de:2a:b5:fc:e8:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=6742debf-376c-4ebe-8366-a4d107712ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:62:53:b9:67:c0:57:f9:78:96:21:5c:9b:
                    e1:87:fc:af:63:11:94:90:9f:64:32:e8:4a:be:68:
                    48:2c:b3:9a:f0:da:48:40:e1:6f:9f:9a:ec:a6:4e:
                    49:9e:a7:76:86:c6:6d:0e:87:03:5f:13:46:d0:c3:
                    f1:ec:f2:1f:49:a8:b0:ef:27:d7:c6:f2:2c:ec:f0:
                    10:23:ad:ff:84:7e:71:66:11:bc:41:60:b1:29:93:
                    47:2b:52:38:93:5f:71:9c:a7:1a:1e:80:12:68:67:
                    89:ef:00:97:89:51:72:41:c0:19:cf:8d:0f:16:12:
                    be:52:52:8b:ec:1f:e8:f3:e1:e7:22:02:8c:89:be:
                    86:17:58:65:43:17:d2:c8:b5:cf:8d:8d:4f:87:4e:
                    8c:3a:31:8a:f7:84:82:13:e6:11:b9:11:ba:2d:36:
                    06:81:38:d1:39:89:9a:3a:ee:6e:6c:c4:22:79:b8:
                    76:6b:9e:2a:fd:f3:54:8b:ee:e6:d7:06:9c:23:87:
                    ba:ae:37:3c:1d:28:7c:52:52:63:75:0e:1e:2d:48:
                    a3:b5:02:be:78:4c:28:04:2f:da:b0:58:f0:45:0b:
                    e8:f7:7f:7f:b4:e6:41:27:be:7d:e8:9f:c8:d5:0e:
                    0d:48:ad:24:0f:29:8d:e3:94:86:7c:9c:2e:7a:bc:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:9D:87:B8:CB:20:AC:26:6B:B5:4F:2B:AC:69:19:79:9B:7A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8caf640c-3e1d-3441-a59c-1d937eb66080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:5f:a0:8d:58:ee:ef:cf:46:60:46:b5:c5:df:38:6d:ff:
         a0:83:6f:a2:8c:79:11:71:a3:99:e6:0a:90:bc:14:6b:76:f4:
         30:41:bb:43:2c:dd:ec:ef:a1:3c:53:5c:ff:9d:77:01:ce:3d:
         6b:47:a6:ad:96:11:76:11:6f:7c:0c:18:1e:a3:6a:89:35:62:
         fb:51:e2:b5:c7:df:dd:c8:5b:55:2f:2b:96:6b:48:75:84:e1:
         55:82:00:b3:c4:32:05:95:6e:15:e5:0f:f8:b7:cf:c0:03:24:
         ee:6e:bc:78:ac:f3:88:02:b4:ea:4a:c6:ba:f3:d1:b8:9f:59:
         83:51:eb:ad:e0:f4:f8:01:f4:ac:49:fe:44:cd:da:3c:61:f3:
         17:29:4e:5c:a5:6e:5e:c3:4f:7d:d2:ed:2e:0e:9c:c1:24:c5:
         0a:41:35:14:96:c6:6d:06:7c:e6:66:96:f2:55:03:63:e0:85:
         60:02:08:96:08:d4:e1:a9:64:6b:b7:95:52:bf:49:3b:5e:4a:
         5a:fe:a6:c5:f5:d0:0d:7c:24:64:51:7d:de:4a:cd:f1:6e:fb:
         79:88:2a:29:da:ef:87:a5:9b:90:c4:68:4b:f4:e1:91:6f:1e:
         60:4d:1e:8b:1a:bf:3c:fe:92:1e:e3:ae:07:35:0a:26:22:98:
         11:2f:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:28:52 2025 by rpki-client