Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
File:                     a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa (raw, json)
Hash identifier:          v+gCNnBTh6ISkUlUu51Ttt+nDo19YA+92jZVdqX5gio=
Subject key identifier:   E2:74:6C:4B:E9:CC:B7:C8:5F:B3:4F:47:CC:66:F6:6F:00:DC:8A:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB0FEF80A482D55783BBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     10515
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0f:ef:80:a4:82:d5:57:83:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=af97e64f-9059-405b-b046-cf00a4f6dab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:db:9a:a1:9f:d4:ce:87:6d:b4:ff:a9:ed:
                    2d:00:c6:96:32:b4:0e:1b:fe:80:b4:fb:8f:a0:57:
                    99:4b:69:ea:9a:e8:0b:3b:ab:9f:cd:aa:64:8a:c7:
                    c9:fd:f2:d0:35:9e:2a:38:5d:3d:5b:68:91:80:7b:
                    39:d8:0f:4b:40:8a:35:a4:b0:28:47:db:b7:3a:b1:
                    08:83:b2:f9:fc:92:4f:02:07:88:e8:0e:57:fe:16:
                    ae:d6:59:29:03:17:13:a5:0f:00:6f:fe:74:f9:18:
                    c1:a4:01:3e:26:de:ff:85:cf:b0:34:bf:ae:c3:95:
                    74:22:56:2b:9f:3e:93:d7:e6:91:38:e9:48:4f:a2:
                    e9:80:7c:70:03:01:71:72:d4:ec:12:df:dd:f5:9d:
                    e7:ef:00:84:98:06:ee:16:98:16:e5:35:29:96:fa:
                    60:84:d1:ce:14:39:11:48:64:12:39:53:96:e8:2b:
                    5b:d6:d5:85:02:4f:74:81:2c:fb:5f:a0:4d:8e:a9:
                    be:26:ad:9b:63:2e:bd:08:29:2c:ba:ee:6c:68:25:
                    ed:59:fc:97:6a:24:cd:68:78:b0:12:3e:c4:d9:a9:
                    38:50:cd:1b:27:0f:47:06:91:f4:92:cd:07:75:4b:
                    4f:69:bc:e2:02:80:2f:ac:b9:ce:ec:f5:17:b1:0d:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:6C:4B:E9:CC:B7:C8:5F:B3:4F:47:CC:66:F6:6F:00:DC:8A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a82dbe19-0e25-3c54-a287-0bedb81a60f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:fc:72:73:e2:2f:32:26:8f:68:10:1d:a4:f0:da:68:55:
         f4:65:c7:d1:7e:60:59:17:62:6d:59:cd:48:4f:23:48:46:3e:
         db:15:a5:39:20:07:99:27:24:ba:e2:a7:fa:a7:03:56:ec:8c:
         a0:5b:b4:7d:31:cf:99:32:48:45:5c:02:f1:fd:99:2e:9e:ab:
         d0:a0:bd:23:9a:60:45:e8:b1:30:00:62:9b:ef:a0:e7:73:ba:
         c3:d1:cb:8b:5c:11:bc:6b:c8:28:31:c7:74:89:c2:5c:f2:9e:
         5c:08:56:f5:65:b1:28:74:91:cd:6f:c9:b7:61:37:4c:13:c6:
         2e:8c:f6:c4:72:37:8f:6a:8a:c9:9a:51:65:d6:5b:5a:5b:6c:
         aa:d0:d3:1f:6f:10:e0:9c:d4:7d:57:ea:0d:e5:3a:a8:c7:97:
         71:d1:d2:97:db:b8:f4:fe:06:ba:cd:38:e2:63:ee:d9:91:67:
         4f:f4:dc:ce:7e:e7:1d:29:96:57:42:70:b7:4c:2b:4a:3c:54:
         9f:d0:85:57:2f:48:4a:75:4c:96:10:3f:be:41:83:39:89:71:
         bd:e4:2b:f4:99:ea:01:c7:14:31:58:6b:33:c4:2d:90:e2:f4:
         cb:42:9d:83:4f:51:45:4e:29:3e:11:59:c9:a9:c8:27:71:7c:
         2a:16:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:33:02 2025 by rpki-client