Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa
File:                     ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa (raw, json)
Hash identifier:          DpL0hr6/5ra6VlZwP8/rkT1qRIBXgrlSJTD+1PnWIAM=
Subject key identifier:   C5:50:B6:60:D0:93:DD:CD:50:BC:38:1F:D5:15:22:5E:6F:A6:D4:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACC30D09B0CC51B8503C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     397194
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cc:30:d0:9b:0c:c5:1b:85:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=92cc6d82-3ce4-402c-b3bb-a855df9b9a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:1b:f4:13:aa:2a:4b:41:bc:0d:5f:9b:57:
                    87:50:4c:f2:16:7d:76:47:ab:93:bc:9d:fe:75:34:
                    d6:60:7b:c2:59:e0:26:5b:85:83:b8:d6:82:26:9e:
                    b9:7e:29:a5:f1:fd:99:b2:b0:18:61:c4:d3:49:08:
                    0c:1c:0b:43:dc:72:dc:f2:7f:72:82:4b:df:3b:22:
                    cb:bd:57:82:25:c0:74:26:48:c0:a5:d9:e1:67:f0:
                    97:c9:0f:78:1a:67:8e:05:d8:4c:00:11:ae:5c:cf:
                    98:6c:7d:44:f7:e5:57:35:06:56:64:19:4a:3e:5c:
                    a7:7c:2e:d8:2d:e6:fb:86:7a:03:43:aa:27:4d:83:
                    44:8a:f1:3e:7e:9d:0c:4c:03:7a:d6:e7:66:9f:cc:
                    76:0d:78:9a:b7:f9:f9:74:ca:38:f5:2e:20:81:52:
                    56:fc:9a:c6:ad:0c:2e:59:c4:64:a5:06:d1:8a:5f:
                    e6:c0:8a:2c:76:81:47:59:48:bc:ba:54:f8:63:89:
                    5c:0a:64:ce:36:0e:1a:f8:86:fa:9d:03:01:19:83:
                    15:bd:1f:84:6d:8a:66:c9:d6:29:48:62:d2:f4:e7:
                    b9:51:15:09:40:a8:c2:25:ff:31:05:a1:e4:a7:b0:
                    27:12:0d:cc:6f:1c:10:52:4d:49:8e:7e:21:cc:4e:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:50:B6:60:D0:93:DD:CD:50:BC:38:1F:D5:15:22:5E:6F:A6:D4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:5f:4c:12:18:54:54:22:07:d2:b0:ab:68:e7:0c:31:c5:
         d8:94:41:d6:48:39:4e:ee:d2:7f:2c:43:44:0c:64:c3:3e:7c:
         69:cf:c2:06:4a:9b:f5:90:19:5d:1d:42:13:db:c6:fb:1f:50:
         1d:7a:18:51:76:e4:13:d8:4b:26:6a:1d:a6:54:2d:33:98:0e:
         77:4e:62:86:ba:77:94:67:22:18:03:65:57:17:2d:d3:f1:fa:
         28:39:c7:4a:dc:55:71:af:84:6f:e9:b9:cd:36:6e:ab:a5:28:
         37:b9:ca:6e:2e:52:57:57:aa:51:cb:a1:eb:79:1c:20:cc:d2:
         ab:c5:b2:3d:ba:87:8a:a6:18:82:26:8d:b4:f6:0d:52:e8:ea:
         96:04:0a:7f:97:56:d1:52:a6:e4:df:11:db:5b:79:d3:75:e4:
         f6:90:94:1e:a5:dd:2e:82:ba:88:0e:46:a8:d2:16:6e:24:2d:
         6e:45:a3:ba:34:a3:bc:e8:be:7d:94:7b:8d:1e:90:6a:a4:58:
         ab:5a:9e:c1:7a:25:ee:c4:6f:a9:59:07:e9:16:93:27:86:d1:
         9b:0b:06:d4:c0:7c:a6:c6:a0:14:36:c7:c1:2a:43:88:42:b0:
         06:c3:17:2a:dc:27:36:0a:c1:0d:57:21:24:ff:81:a0:73:78:
         ba:63:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:51:59 2025 by rpki-client