Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af651625-e00f-3fbb-b8d8-de0520638fb3.roa
File:                     af651625-e00f-3fbb-b8d8-de0520638fb3.roa (raw, json)
Hash identifier:          useBIJxvA+QjkQuZ6JlnS+vUJrjucrXVpvHyQ+ytIK8=
Subject key identifier:   5D:58:91:CB:39:F9:2C:EA:FC:F0:DC:EC:F6:79:A2:FE:67:C9:F2:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB1D3EC7F58E61B5098C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af651625-e00f-3fbb-b8d8-de0520638fb3.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     396552
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:1d:3e:c7:f5:8e:61:b5:09:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=6a346c6b-94cc-4a0c-b5ec-128f9676f455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:cd:0b:f2:3f:79:97:0e:d3:77:cb:48:54:
                    55:a7:0f:3f:43:15:6e:0d:36:d3:64:95:51:9b:a4:
                    b7:63:97:2a:de:4b:58:3c:3b:fa:dd:9b:7c:b1:a7:
                    0a:fd:f7:b7:31:fd:3a:e6:07:05:dd:dc:82:3b:53:
                    a8:fe:89:78:d8:2c:87:77:14:e7:69:7b:12:43:eb:
                    dd:e1:a5:9c:65:ad:a2:30:ca:c3:02:35:e0:18:57:
                    2d:92:5d:63:46:1a:1e:d1:fe:ae:69:9b:7f:3c:90:
                    07:cb:60:4c:92:9f:02:e9:7d:9f:4f:18:84:74:45:
                    46:76:6c:10:b2:ac:53:95:c8:5a:70:49:59:83:f6:
                    ad:d9:31:a8:22:13:77:99:6d:28:f8:6c:12:e2:6f:
                    6c:3e:3e:44:db:a2:82:61:7b:25:36:5c:42:a6:8d:
                    23:2e:4d:08:8c:17:0a:39:1f:95:cc:98:13:da:98:
                    e5:30:b9:46:a1:53:97:83:e9:7e:fa:4e:fa:cb:59:
                    39:dd:bb:e9:01:6d:ef:2f:7a:14:69:e2:53:af:d3:
                    69:dc:d1:09:0d:de:47:14:84:6f:c8:62:50:a2:f6:
                    f0:48:34:a0:c4:0e:e9:3d:be:04:b6:2f:5f:fb:2f:
                    dd:c3:b5:70:ea:66:1e:d8:5b:ce:50:54:43:16:8b:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:91:CB:39:F9:2C:EA:FC:F0:DC:EC:F6:79:A2:FE:67:C9:F2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af651625-e00f-3fbb-b8d8-de0520638fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:27:4e:f8:3b:a8:2b:21:b7:69:70:21:b4:50:37:6e:f4:35:
         b0:f1:ba:08:fd:7f:e1:6d:df:d6:92:98:41:e5:79:18:fb:cc:
         67:f6:5b:53:88:fe:5c:47:97:f0:30:36:ec:67:8e:a2:6f:b1:
         90:bb:90:57:23:95:a9:c7:30:4a:30:11:30:e5:ba:0d:33:c2:
         37:a7:4f:84:d3:b9:8c:9f:36:f8:c2:91:5f:39:b8:3b:63:71:
         3e:52:64:00:3b:e1:30:ef:cf:a8:35:2f:6d:6c:1b:4a:3a:e7:
         68:c6:fa:e0:f1:39:ff:3b:0a:dd:42:b8:69:4e:63:db:7e:d9:
         7b:76:9d:c5:47:63:01:d9:10:ee:0e:f6:6e:dc:b5:88:75:84:
         58:24:0a:03:17:24:75:cb:c1:6f:c8:6b:38:c7:4a:c9:01:ec:
         09:a6:7f:7b:55:01:43:51:5b:e4:68:65:6b:f0:68:d3:be:87:
         6d:6c:25:5b:58:45:d4:16:e1:78:63:1e:4d:7a:4f:76:f2:f7:
         bd:13:2e:46:2a:6e:bf:7b:1f:41:87:43:13:a5:3a:8e:46:3d:
         9b:51:4a:d6:58:27:c1:18:f2:58:b0:fd:de:dd:53:c8:98:51:
         eb:3b:ae:77:b9:04:6c:67:6a:cc:45:73:62:ee:c3:cb:22:c2:
         e3:e5:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:11:42 2025 by rpki-client