Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f5f167-0b04-3bd0-909c-7f44a5c79b6f.roa
File:                     a2f5f167-0b04-3bd0-909c-7f44a5c79b6f.roa (raw, json)
Hash identifier:          /ZC/Mc3NrP6rmQswP115p3Ieri3A/EY05a+Y/v61Z8g=
Subject key identifier:   87:9E:7B:F9:3C:FF:33:93:BD:A4:AC:82:36:54:A9:A5:0B:E3:63:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993FA00C50B074DBB9DC4DDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f5f167-0b04-3bd0-909c-7f44a5c79b6f.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396557
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:00:c5:0b:07:4d:bb:9d:c4:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=81cb7633-f386-4bfa-b179-d1e587e195c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:e9:36:e2:40:76:07:6d:b8:91:91:4a:f7:
                    97:ab:b6:86:e9:66:94:8f:e7:5b:2c:74:c0:3e:2f:
                    a8:ae:f5:b3:08:ad:f7:72:9a:54:ae:81:0d:6d:40:
                    85:4b:91:3d:cb:ee:d6:f6:23:27:f0:69:f9:f7:bc:
                    3f:06:10:99:31:d1:0d:a7:48:9b:60:c9:a8:d9:2b:
                    11:ed:c5:f2:fc:22:ac:70:eb:45:22:ab:5c:74:38:
                    60:1d:13:de:a1:d4:ee:4f:71:86:84:4d:c5:69:6b:
                    c0:a8:04:12:9f:42:a1:33:97:1e:e4:33:31:fa:3b:
                    ef:d6:95:1d:b9:e4:0c:e2:d9:f4:4a:c0:42:ad:1d:
                    a9:25:8b:f4:1e:99:63:fd:38:53:69:ef:4c:fc:07:
                    9e:a6:64:50:3f:fc:2d:df:9e:34:95:90:53:b8:f7:
                    5f:de:14:22:59:14:96:91:94:18:48:b4:a9:d6:a7:
                    01:26:8c:4b:e6:58:d2:74:6d:45:eb:60:9d:ec:c7:
                    35:a7:65:c4:05:d2:6c:58:3a:b8:db:4d:cd:73:dc:
                    1f:70:b9:d0:7d:d5:af:79:c5:bc:5a:e4:d9:9d:4e:
                    3d:56:80:c2:28:f6:1f:72:87:86:95:1e:79:29:88:
                    0b:15:8f:4c:7b:34:bb:23:32:d9:84:77:b9:d0:37:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9E:7B:F9:3C:FF:33:93:BD:A4:AC:82:36:54:A9:A5:0B:E3:63:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f5f167-0b04-3bd0-909c-7f44a5c79b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:34:6a:38:b1:8d:68:6b:2f:ab:ab:67:5a:82:47:b7:12:
         7b:81:69:c7:e0:cf:d2:be:ac:15:73:c0:91:56:d4:f3:55:c8:
         8d:0b:bc:4d:b9:78:a9:08:26:c1:9a:6f:3b:52:b3:f1:23:f8:
         ea:6b:d3:cd:bf:bf:a5:26:b9:57:cd:03:c3:e2:d4:a9:63:3a:
         e2:e9:ef:bc:2d:55:a9:98:6c:dc:58:95:0e:9e:80:16:f5:f9:
         ad:74:90:e8:c8:d3:7b:f4:9e:27:bb:80:f5:a2:bf:6b:b3:b8:
         21:83:9e:48:51:3d:50:7d:13:85:72:20:36:6a:18:7a:fe:79:
         9c:da:b2:21:55:2b:25:c4:9a:e2:46:46:89:9c:e2:83:a2:a7:
         2f:54:f6:b2:95:84:5c:b5:38:53:8c:fa:ac:27:3c:a2:03:eb:
         36:3b:8f:c1:3e:9a:27:8b:6b:d3:d5:c5:b2:1e:9f:dc:81:cf:
         f4:f5:2d:f7:dd:a0:2f:0d:70:4c:e7:80:18:61:58:3c:fc:06:
         e3:2b:6e:4d:99:7b:34:e8:3b:50:0e:a5:4e:01:4a:22:53:39:
         23:2c:1a:51:35:2b:30:af:ff:e9:a6:33:1a:e3:bb:03:18:3c:
         b2:60:3c:a8:ca:98:47:3f:82:68:63:19:e2:16:7b:fb:4e:f6:
         a5:ca:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:21 2025 by rpki-client