Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9585189d-d62a-3856-927d-4f7e9dd65a76.roa
File:                     9585189d-d62a-3856-927d-4f7e9dd65a76.roa (raw, json)
Hash identifier:          alWu3QzVWLFwCx53LClW8mXAfnva1I62Kq+7WA+D5hU=
Subject key identifier:   79:BA:20:4C:34:84:A6:2F:35:60:4E:D2:14:68:D4:00:74:16:C6:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A9B25EB2491E1067F700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9585189d-d62a-3856-927d-4f7e9dd65a76.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396545
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a9:b2:5e:b2:49:1e:10:67:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=dac869e0-c68e-4a1f-80df-977a94f35bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:69:73:04:0d:33:24:0d:fb:22:98:29:03:
                    a4:6d:29:65:7f:3f:6c:a5:94:3d:b5:a8:d3:b9:c9:
                    3d:14:95:99:9a:a9:fd:6c:90:7b:d5:46:26:01:9a:
                    21:cd:25:52:ab:2c:45:cf:38:46:aa:30:ed:7b:c6:
                    da:98:89:26:17:d9:99:6f:fa:7e:f0:ce:d8:ea:9f:
                    5e:62:94:bc:d8:21:ce:0a:64:a3:71:3d:67:7d:63:
                    82:2a:7f:fd:cb:af:10:92:b7:3a:50:2c:8b:4c:d4:
                    7b:97:e2:ff:4b:f0:eb:2b:e4:0f:23:1f:c0:e4:e8:
                    cb:1f:60:bc:ff:ac:a4:11:2f:5d:e7:14:88:40:70:
                    24:9c:2d:8f:6f:de:7b:54:5f:96:4c:4d:51:e8:3b:
                    1a:bc:69:e2:e4:80:83:44:cf:32:ef:c6:7a:4b:e6:
                    6f:23:93:52:76:31:d4:e9:69:00:85:ee:1b:2f:5f:
                    f3:ce:ca:55:ee:7e:0c:21:ee:6e:29:ed:3d:81:6f:
                    ca:01:74:2d:41:89:c5:71:48:8c:86:b2:91:4a:d8:
                    6d:5a:f1:a8:ec:54:77:c8:72:0a:f0:2a:31:b9:e8:
                    23:d3:c4:df:76:94:fe:e5:75:d1:5a:1c:bd:0a:12:
                    ba:dd:a9:63:57:35:2a:0d:77:42:8c:2c:65:97:06:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:20:4C:34:84:A6:2F:35:60:4E:D2:14:68:D4:00:74:16:C6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9585189d-d62a-3856-927d-4f7e9dd65a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:7b:e0:7e:87:37:43:2c:46:d8:17:9f:2c:03:24:a4:79:
         d2:24:db:cf:68:ce:10:8d:f5:3e:76:30:d7:41:30:78:aa:fe:
         b1:fd:23:54:95:bd:53:28:79:3c:ef:74:c7:e8:fc:0e:73:98:
         a6:4c:50:1a:c8:7e:24:93:b6:21:0f:9b:a1:3e:df:68:65:24:
         aa:e6:f8:52:7f:bf:cc:39:8f:f1:0f:77:f9:d5:19:33:66:7c:
         02:44:c4:04:9d:7f:9e:ac:86:b6:15:99:98:ac:a8:23:6c:7f:
         94:66:92:b4:8c:80:cc:0a:d7:f4:da:c5:f5:87:27:01:ae:8e:
         49:3a:d8:4c:45:ab:3a:19:12:46:77:ae:3c:7f:e9:4a:8f:35:
         a2:2a:a6:1c:45:5d:76:ca:0d:10:ae:a5:b9:9c:06:08:1d:fe:
         d0:48:0b:f0:03:7b:a9:a3:0e:e8:ab:ad:c6:0a:7d:5d:8a:fc:
         ed:eb:0d:83:28:66:f5:42:4a:39:83:1b:2a:e2:f7:13:81:f4:
         e8:5e:87:c2:bf:99:f2:9e:55:02:ac:c6:c0:d3:28:5d:c0:bf:
         6d:14:c2:c9:8e:83:af:af:28:f8:be:df:84:13:e8:df:7b:fb:
         de:78:10:60:fb:3c:26:76:07:d8:68:7a:58:f2:23:e5:de:35:
         03:27:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:59:42 2025 by rpki-client