Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d04166-c7a6-3189-b454-9d7d19ea271d.roa
File:                     d8d04166-c7a6-3189-b454-9d7d19ea271d.roa (raw, json)
Hash identifier:          fQHc8mjrgn6by2mMMk8rI8HOkOqxLqFo7gyprex7tjs=
Subject key identifier:   01:FE:A9:5C:B5:DB:61:51:17:39:E7:95:D2:9F:B4:F9:D5:95:4B:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5335B3283A64D52B6DF782A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d04166-c7a6-3189-b454-9d7d19ea271d.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     396582
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:b3:28:3a:64:d5:2b:6d:f7:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=60b414bd-5576-42f9-90a4-efa4c5972f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:e5:f5:f1:d2:72:e3:02:5a:a8:55:b4:81:
                    c3:05:d6:30:63:93:3b:22:7e:15:d2:fc:24:0c:6c:
                    ff:9b:ca:cf:a5:05:ef:50:32:83:8c:d9:a0:6e:31:
                    68:d7:0b:03:fa:40:3a:11:1d:a1:86:4a:95:8a:47:
                    6e:17:6b:f5:60:ba:ec:61:01:64:db:48:a6:c7:e6:
                    97:31:d2:98:f0:97:d4:c6:60:a8:9a:ad:12:b3:4b:
                    c6:75:4a:d3:fb:22:a0:0a:90:dd:b7:48:e0:ee:85:
                    7f:c1:34:c1:c0:f2:59:f4:40:ec:5c:80:2a:e9:c9:
                    85:81:57:33:29:4c:14:9e:56:1d:38:2c:df:1b:aa:
                    e7:1b:42:58:3f:21:51:3b:ff:ac:c7:bd:f1:28:b0:
                    09:35:0a:43:c1:f1:83:74:1f:b9:cd:c2:d5:9d:a1:
                    ce:d9:92:e6:7c:d0:d1:8a:6e:81:34:31:a3:46:ae:
                    3c:ea:60:e9:07:6d:a9:3f:b9:78:5e:14:2b:5a:8c:
                    3a:76:56:c0:c0:eb:e1:cb:9e:e6:e2:ed:14:8d:81:
                    85:e7:3f:44:4a:57:b6:ae:c2:8c:ba:7a:73:5c:f1:
                    48:e4:db:c5:82:f8:6e:d2:1c:b4:37:38:da:d7:42:
                    27:4e:2a:1a:1a:cf:86:fa:6c:06:c3:1d:df:47:cb:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FE:A9:5C:B5:DB:61:51:17:39:E7:95:D2:9F:B4:F9:D5:95:4B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d04166-c7a6-3189-b454-9d7d19ea271d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e3:96:8b:1b:e3:ef:13:89:0f:ae:87:1c:b4:a1:ac:c7:12:
         4d:97:34:a0:2b:8d:c2:28:cc:96:e9:19:86:10:ef:94:c5:2e:
         59:63:54:68:e0:f0:7a:5c:e4:f2:aa:6b:71:64:25:61:eb:b3:
         76:90:39:4a:92:e2:67:4b:8d:d5:24:a2:2f:ed:b9:43:27:bb:
         4a:2e:bd:6b:06:f7:18:8a:2c:8b:00:77:0f:19:eb:4f:98:ed:
         b1:1d:c2:7a:63:14:68:64:57:64:97:27:64:46:ec:b5:55:a6:
         67:8d:40:8b:4b:04:55:7f:ca:32:6c:40:c5:29:b8:e7:50:d4:
         d2:f2:9c:ed:42:c6:49:1f:6d:c2:41:dd:24:5b:5c:56:5c:2e:
         77:2b:f8:c1:ed:6a:50:02:65:44:b0:cb:37:fe:8f:81:44:53:
         91:9b:5c:fd:86:6b:dd:a0:21:67:86:b2:71:81:1b:85:33:01:
         92:ed:bc:52:1f:df:f9:a1:7f:81:fd:c8:c4:04:dd:2c:1a:cb:
         f4:4a:a9:26:4f:97:76:ff:7c:d2:c5:76:11:87:b3:8f:0f:a0:
         a0:f0:4b:78:43:a1:c8:13:04:bf:53:82:1a:b7:87:24:31:ae:
         9e:49:ca:b9:e9:fd:99:26:4a:ef:e0:64:da:4b:e6:5f:44:06:
         af:d4:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:10:00 2025 by rpki-client