Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
File:                     d1c30235-155d-318d-8f14-3d6b80290aee.roa (raw, json)
Hash identifier:          LTD/QUySpsU75EcEwZOgJOzjdcD7duQxgw0tJ8HqdYk=
Subject key identifier:   1B:84:42:D3:04:5E:05:6C:8F:D0:93:8D:76:14:2B:F6:06:72:46:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB1011218B2F3684FCA580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396593
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:10:11:21:8b:2f:36:84:fc:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=21b234a9-fa7f-45d1-9051-cbe29607f833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:82:c4:e1:46:23:9b:3a:45:a0:f4:c2:21:
                    3d:04:87:e9:1e:f0:c3:83:2d:41:df:d4:19:a9:66:
                    cf:61:55:c8:f1:1d:f6:8c:e8:c5:8b:92:52:78:f0:
                    d5:2d:3e:f7:76:13:3d:f2:3d:45:7b:bf:34:04:e2:
                    84:d4:cc:30:e1:8e:5d:48:8a:fb:ae:3b:f0:22:ff:
                    6a:0a:18:fc:6e:fd:16:31:53:11:58:b8:e6:fb:2c:
                    c1:74:c7:78:8f:c8:a9:a0:71:71:67:dc:08:d7:f4:
                    0e:2c:7f:c5:82:68:3b:d8:7f:f0:c0:3f:eb:11:e5:
                    df:b0:1b:be:72:d5:5f:b8:ec:2b:76:08:7d:d0:38:
                    fd:74:ad:48:ce:6d:0e:4a:e6:e9:8f:fb:d6:57:92:
                    e8:13:8f:ed:77:e9:67:44:a7:89:1c:8f:f7:e0:19:
                    be:8b:ac:07:b1:7c:87:76:43:fb:26:c6:6e:d0:c0:
                    b5:f6:ec:51:0d:1d:4b:3b:64:99:86:74:15:5e:43:
                    21:96:01:b8:c6:07:20:ca:d7:81:f9:6f:2b:b0:af:
                    6a:00:ae:9d:91:7b:8c:e6:72:9e:e2:07:87:25:29:
                    04:a4:2e:0e:6e:03:ac:ac:fd:19:ad:bb:b2:d1:82:
                    48:fb:07:35:21:39:87:36:f7:f9:a7:53:68:5e:af:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:42:D3:04:5E:05:6C:8F:D0:93:8D:76:14:2B:F6:06:72:46:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1c30235-155d-318d-8f14-3d6b80290aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:44:76:91:ea:5e:0a:99:f4:b1:fa:5e:67:8e:a3:39:92:
         c5:5d:10:6d:61:95:d0:b1:b3:fa:fb:44:30:ec:38:10:a5:88:
         27:fc:e8:88:83:75:20:ae:ea:6c:e2:de:d4:94:e8:9e:80:ee:
         1b:b5:bf:9c:f7:5e:84:f2:33:65:64:ff:57:aa:bc:5c:f3:f3:
         a2:c5:6a:2c:c6:4c:d5:83:96:cb:25:66:6b:45:2f:c8:a9:7d:
         dc:65:58:cc:6d:f6:c1:da:60:14:98:c7:09:2f:5c:08:be:9c:
         b5:ef:a3:66:62:fd:09:27:20:16:dd:3c:8c:4d:b7:88:d9:23:
         1f:76:dc:0d:fd:5d:d2:b6:17:cc:70:a5:e3:21:da:07:b0:1f:
         2d:bf:df:f6:bf:b6:b8:dd:cd:a7:1f:46:b8:4a:ba:91:48:23:
         e7:15:d2:7e:b4:bf:b8:fd:22:f9:94:d8:39:92:98:38:a9:42:
         cf:f2:7a:d6:92:0f:55:5b:73:48:b5:b1:37:01:8f:6c:a9:5e:
         88:73:41:40:da:50:b0:b8:64:f0:9b:d5:4f:9e:00:36:dd:31:
         8d:57:b6:9d:5f:ec:27:a3:9f:d4:58:c8:fe:bb:70:a3:d6:d6:
         dd:3d:a6:48:da:25:28:20:c4:36:a4:92:ea:57:bd:3e:83:fa:
         8f:15:9c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:56:37 2025 by rpki-client