Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40c581a-a2b3-39b1-abd6-525318b571a4.roa
File:                     b40c581a-a2b3-39b1-abd6-525318b571a4.roa (raw, json)
Hash identifier:          ra+ALX4zI6SeINR5WpB8Uc0nLdL/Rnmk/ICt+sPukOo=
Subject key identifier:   81:AF:FA:A3:42:1E:DA:8A:EB:1D:C3:A4:AA:81:22:0C:50:32:08:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0A88AADB3ED5D36727A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40c581a-a2b3-39b1-abd6-525318b571a4.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397199
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0a:88:aa:db:3e:d5:d3:67:27:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3540a561-4dc4-4f64-a1a3-71f17767cbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:2e:23:49:60:8c:c9:57:c1:7c:40:78:a2:
                    13:2f:7f:c7:55:bb:0f:b4:aa:7e:d7:1b:6d:a1:7c:
                    56:27:dd:98:0f:8a:95:f7:33:5f:b1:06:8d:7a:10:
                    32:5b:fd:af:5f:08:eb:fb:73:cd:36:ae:fb:f9:86:
                    2c:1c:e0:b7:a1:ae:f9:1b:b1:db:45:34:75:d0:65:
                    03:1e:ab:79:1b:78:87:85:2a:dc:95:32:86:37:c5:
                    58:59:1f:10:f7:12:7e:11:1c:ff:8e:18:f4:f8:79:
                    e3:b0:a5:95:ff:4c:f4:19:6f:ec:aa:69:93:e2:d5:
                    52:80:c6:2a:48:45:e7:70:bf:93:16:07:e0:a7:53:
                    17:60:6d:31:b0:dd:91:db:e2:13:cf:46:f1:55:6d:
                    d6:2e:02:c3:6b:c6:67:42:c0:96:1e:b4:15:8e:0a:
                    da:cd:05:1d:f0:46:1b:5f:c9:60:77:98:a4:8e:59:
                    60:87:10:86:c3:5c:6a:7a:fa:67:ee:e8:a2:4e:62:
                    99:22:df:33:22:67:0a:a3:47:cd:62:e8:6f:00:2a:
                    d5:19:1b:43:82:96:aa:ae:bd:4e:87:1a:2b:81:50:
                    39:8d:94:64:5a:a6:8c:fd:3b:da:4b:89:1b:57:aa:
                    48:be:d8:5b:1d:ec:1e:57:ba:0b:fe:64:0b:1f:18:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:FA:A3:42:1E:DA:8A:EB:1D:C3:A4:AA:81:22:0C:50:32:08:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40c581a-a2b3-39b1-abd6-525318b571a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:06:89:cf:48:48:6b:03:dc:65:7a:5b:4a:32:d7:4f:fc:
         44:fa:f4:ee:13:ed:1b:f2:52:80:a5:30:20:e3:2e:5b:83:59:
         8f:aa:ba:f1:cb:bf:29:68:45:40:d9:66:40:47:32:9a:af:9c:
         e8:3b:35:19:8e:f0:19:ae:eb:17:47:cc:43:0c:6c:82:f4:d3:
         08:ab:05:63:de:d5:e6:73:dd:43:47:d4:84:95:1f:79:48:30:
         d8:9c:21:4a:15:5b:8f:21:54:d1:63:57:fc:8c:0c:a0:f8:26:
         12:20:4c:e4:6c:11:4d:18:e5:98:0e:22:6b:32:c8:01:3a:d2:
         76:9f:5d:ff:02:6f:5a:e4:99:45:50:24:8d:64:f6:6c:90:85:
         b5:c9:d7:e6:49:f7:d7:dd:88:6d:db:19:55:a8:89:9c:53:74:
         d9:40:c4:45:77:17:69:f9:a2:e3:b3:5f:07:80:df:9f:18:60:
         9f:e8:51:89:fe:82:9b:e5:14:6c:cc:78:c4:3e:91:d7:eb:a9:
         0d:48:78:79:d5:4d:d0:c2:03:63:ab:99:6a:d2:76:59:45:55:
         82:81:af:79:2f:eb:21:36:83:1b:92:ee:55:79:96:f3:19:ca:
         12:ef:60:81:00:8e:2f:aa:e0:51:2d:dd:ca:2b:25:19:09:51:
         3b:a7:90:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:03:06 2025 by rpki-client