Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf21e2b-cfe3-320d-8c72-6aef53868c2e.roa
File:                     ddf21e2b-cfe3-320d-8c72-6aef53868c2e.roa (raw, json)
Hash identifier:          z62+oe13WSMMcLd5wBoIdHCeKJXf81EeQ/fpKmvVf9k=
Subject key identifier:   E1:10:FB:A4:F1:7A:13:2F:9D:4F:F8:02:86:59:1B:6E:DC:C1:93:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64A7BEECE82A69D7A25380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf21e2b-cfe3-320d-8c72-6aef53868c2e.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     397212
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a7:be:ec:e8:2a:69:d7:a2:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=941116f5-09c2-4b51-978f-d76477732fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:ac:47:d7:f9:c5:8a:98:31:f3:e5:55:1e:
                    79:8c:32:4d:bb:4e:a0:e2:fe:cc:d3:32:e7:70:7a:
                    e7:be:8c:2b:be:53:22:72:d1:c9:80:bd:18:e7:17:
                    d1:57:df:5a:c0:78:44:7c:cb:6c:5a:af:56:ad:14:
                    a2:ef:2c:b8:5a:7a:de:a8:17:1d:37:01:d5:5c:5a:
                    9c:e9:07:5e:6b:14:80:61:74:be:38:44:e5:3e:f3:
                    cc:b4:35:61:7d:05:d2:5d:21:28:5e:3a:6c:d2:32:
                    0c:0a:54:96:0d:d0:d5:1b:31:28:18:e1:ea:42:09:
                    a6:db:5e:34:f6:2d:69:a9:c6:41:c4:a3:82:80:2d:
                    7f:2c:a1:97:9d:ac:5b:9a:7d:30:3d:f9:d3:c2:e5:
                    fb:ef:16:1b:98:86:4d:f9:ab:c0:02:e7:be:2a:7d:
                    b6:57:46:62:e5:21:41:c0:e5:f5:95:dd:4c:93:5b:
                    9c:55:95:e7:af:b4:f0:47:c3:5b:d9:ca:27:26:0a:
                    2e:a7:c5:a5:fb:3c:5a:85:e9:d2:80:e0:6c:3e:88:
                    98:73:96:3a:ba:24:47:8d:59:08:e5:15:44:70:e0:
                    f1:1e:f6:a5:3b:ea:93:a6:3b:30:fb:da:89:c4:40:
                    89:b2:ce:e3:84:fd:ba:d0:d3:04:e2:0e:48:78:31:
                    29:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:10:FB:A4:F1:7A:13:2F:9D:4F:F8:02:86:59:1B:6E:DC:C1:93:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf21e2b-cfe3-320d-8c72-6aef53868c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:12:e0:50:cd:f3:d5:91:02:91:54:dd:9f:8e:2f:46:ef:0a:
         be:fe:29:40:5a:0e:c4:e9:e4:85:aa:46:f9:e6:16:12:7f:16:
         9b:fb:a6:0f:ce:74:37:f1:c7:6d:df:5e:a1:ed:49:e7:ea:b9:
         5a:78:61:6e:05:88:46:45:3f:09:e6:17:00:65:de:03:e9:9c:
         cb:59:60:ee:00:11:39:a5:5d:55:10:c5:eb:be:c5:38:7f:59:
         84:f1:d8:df:27:8b:a4:8a:82:c3:81:e1:58:1d:60:2b:6b:a2:
         ed:55:2a:6a:9d:97:f8:c0:6e:48:da:4f:d9:1f:e4:7b:ed:37:
         ec:fb:08:03:26:7f:fa:b8:07:90:4f:d7:79:90:b0:83:ca:03:
         ae:40:26:91:23:26:c9:67:a3:a0:cf:e7:4d:ac:b0:af:f2:60:
         c2:d4:0f:c3:bd:d0:f9:95:67:4f:65:9e:dc:a2:ec:e1:db:04:
         60:9e:1f:5c:02:80:77:41:e5:72:11:a8:50:fc:57:02:85:db:
         cb:a0:af:18:d3:be:ef:2b:a3:58:85:87:59:6d:50:7e:12:59:
         7d:bb:b8:76:b6:b3:0a:ee:7b:ad:a9:cc:18:ed:db:18:38:f4:
         2e:7f:9d:92:07:0e:87:c5:b7:47:98:19:e7:19:7a:15:e1:f6:
         5b:32:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:26:43 2025 by rpki-client