Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bee9c2df-0424-3d6f-9869-92170433f5d9.roa
File:                     bee9c2df-0424-3d6f-9869-92170433f5d9.roa (raw, json)
Hash identifier:          kVWR40ehpiCajy3cJdIDelRkQ+zcScxAjPV/Tcgsbdo=
Subject key identifier:   3A:1D:47:63:C0:22:E5:A2:0E:1B:F1:94:C6:7D:A5:91:C2:43:38:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB19D2385DC6B1E2EDEA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bee9c2df-0424-3d6f-9869-92170433f5d9.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     32651
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:19:d2:38:5d:c6:b1:e2:ed:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=4e8b3dfe-6aad-44b6-a6a6-c3dc205f878a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:28:85:86:0a:94:27:73:f5:0c:ec:de:17:
                    d5:11:52:9e:71:30:d2:02:a4:95:24:aa:0b:4a:eb:
                    54:ef:59:2d:b9:08:38:79:f3:1f:3f:c9:a1:38:af:
                    ec:fb:14:43:92:ea:2f:9b:c3:01:38:bb:08:a8:0b:
                    6f:c2:42:08:46:2e:63:80:9a:98:a4:f5:4e:7a:ab:
                    ea:ed:87:f8:5a:90:de:68:2e:c7:82:2f:6a:cd:c4:
                    cf:d9:dc:32:d1:d5:7a:e9:73:cc:5d:df:25:62:c6:
                    0a:2e:f3:25:b6:47:2d:ea:7a:52:45:19:ec:82:81:
                    27:f1:68:7e:a3:d8:52:d6:6a:27:09:78:69:1c:f7:
                    bd:2b:cf:85:ea:c0:30:25:12:53:ce:cf:9d:af:c1:
                    f1:45:e4:16:81:42:23:7f:ff:5f:a2:b6:a5:c2:f1:
                    bc:a8:0e:a3:be:f9:b6:05:59:07:33:ca:44:23:5f:
                    27:11:72:41:1a:63:c3:b3:3c:e9:67:3c:ce:dd:69:
                    1f:2d:e8:c8:c6:ed:e5:a1:67:2e:2b:0a:ac:69:a6:
                    3d:bd:33:47:19:eb:e6:11:ac:ff:17:02:6e:58:ed:
                    62:d6:1b:20:6c:e8:01:10:ed:9e:ee:f4:a8:e5:a2:
                    8c:fe:2d:86:f3:1c:85:cb:5a:4f:36:05:89:33:dc:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1D:47:63:C0:22:E5:A2:0E:1B:F1:94:C6:7D:A5:91:C2:43:38:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bee9c2df-0424-3d6f-9869-92170433f5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:85:0f:33:84:bc:dd:f1:7a:53:58:d5:9f:a1:00:bc:9e:08:
         bb:a1:10:62:2b:ad:94:6a:25:c1:85:0b:63:b8:64:0e:92:51:
         b4:49:ff:f3:45:b8:9e:13:62:58:12:84:a0:f5:9a:ff:23:16:
         a3:9c:91:eb:50:6f:60:ca:8f:43:27:0d:c1:5b:28:ae:08:db:
         88:17:6b:85:81:f0:e3:97:0e:89:b4:be:d7:e4:9a:e3:67:2a:
         18:b9:dc:05:e0:6d:74:e4:97:3b:16:df:eb:6f:0f:e9:b6:46:
         eb:13:69:16:23:a0:7a:da:d5:2b:cc:92:d3:8c:8e:32:2f:80:
         1d:7e:93:89:c9:66:a9:b8:f9:b3:43:f8:f2:1b:7e:2f:a8:dc:
         e8:f0:75:9e:d5:f9:33:38:da:a6:10:b5:11:67:ba:d1:30:1c:
         ed:0a:bd:d1:7f:f4:95:9e:9b:2d:24:fd:40:44:d2:a7:5a:5a:
         07:56:06:a9:96:93:da:6e:00:46:75:2a:f0:94:fd:50:38:a2:
         9d:8c:80:b5:63:e0:61:38:e6:0e:4a:5f:86:57:b5:00:95:45:
         9a:79:b4:b3:63:a7:ab:77:a3:dd:47:13:c0:1b:59:6c:43:d7:
         c9:7f:96:e3:52:40:1c:2f:6a:49:4a:4d:7f:ad:11:84:98:17:
         21:5c:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:33 2025 by rpki-client