Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e67fd118-7918-3c4e-8415-68a340e20e9f.roa
File:                     e67fd118-7918-3c4e-8415-68a340e20e9f.roa (raw, json)
Hash identifier:          CmK0ymAP776HuRWAqQI7FEo99rCM2/o9be0Se/vm7Yo=
Subject key identifier:   75:B0:51:1E:D2:B7:07:7C:ED:82:09:FC:F4:E3:BB:13:8F:16:7E:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB19946C0ACB12E29EE700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e67fd118-7918-3c4e-8415-68a340e20e9f.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     396543
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:19:94:6c:0a:cb:12:e2:9e:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=d2e06991-ee6a-4377-82a5-d39bd6d3efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:f4:d4:c2:5c:8b:b2:ec:6d:99:8d:d3:b1:
                    5c:5a:26:33:ac:63:69:cb:87:b0:3c:9c:7c:c5:6f:
                    7a:3a:50:31:3a:bb:6e:af:d6:a0:bc:85:ef:2b:02:
                    16:5d:53:00:22:21:93:c5:90:00:89:15:c7:a5:95:
                    57:22:c7:e1:ba:dc:0d:bb:15:d7:8f:31:9c:c2:cf:
                    d7:25:b9:70:3e:20:1b:7a:c6:98:12:6d:02:dd:51:
                    87:cd:6a:19:53:db:b6:d6:ec:1a:a6:31:bf:03:d5:
                    db:fb:07:91:62:28:44:56:89:b3:fd:11:91:49:f9:
                    b2:e4:e3:fd:9d:c8:67:8e:16:17:6f:0f:b7:36:ec:
                    cf:66:b2:14:96:cb:94:9c:a7:fa:99:5e:9b:5c:5f:
                    46:69:27:df:3e:4f:ce:3f:d4:ac:6a:51:7d:ed:fd:
                    c9:c8:56:3b:d1:3a:94:44:68:37:b8:78:dc:70:c1:
                    f7:46:89:05:02:85:e7:be:c5:85:24:49:62:3e:89:
                    46:e6:a8:d3:b1:ec:97:82:4d:98:80:44:12:d2:f2:
                    22:d3:64:08:28:f3:7c:41:64:98:cc:f0:5a:c1:0d:
                    52:9a:b7:82:b6:fb:54:d7:c7:09:d2:38:68:09:4e:
                    60:c2:6f:80:4a:61:34:6f:bf:6f:ce:0d:78:0f:21:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:51:1E:D2:B7:07:7C:ED:82:09:FC:F4:E3:BB:13:8F:16:7E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e67fd118-7918-3c4e-8415-68a340e20e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:4e:61:44:62:2d:7e:25:dc:fd:f3:04:41:ca:dc:ae:21:d4:
         72:ef:ba:bd:a5:07:88:a2:2a:f7:c0:0d:32:67:61:9e:5c:0c:
         f6:b9:c3:b3:23:80:33:eb:cc:9f:e3:6c:dd:0e:4c:02:ee:f8:
         08:fa:37:53:91:d1:14:18:a7:39:a5:0b:9a:17:4b:5b:a9:a1:
         9f:88:82:66:ef:95:d5:ff:55:b7:3d:c5:7b:06:3c:69:60:aa:
         5b:70:3f:5d:7c:61:1c:44:7f:fb:1d:e2:6e:b3:75:f2:3b:ed:
         69:da:b7:c5:6f:63:80:ae:33:02:68:d9:61:c8:6c:9e:f1:14:
         f9:3e:6f:ab:28:11:da:26:ff:16:87:50:c0:56:11:09:5f:94:
         6b:30:06:aa:bd:3d:e7:59:f3:c9:72:88:16:b7:c7:b2:75:6b:
         90:68:eb:c0:fa:1a:66:4a:36:66:4d:1a:9b:1a:7b:b0:7e:99:
         dc:e4:8c:a4:bf:00:56:39:e9:09:9c:f6:28:21:37:2e:51:dc:
         a6:67:3c:31:54:7d:9f:ec:ad:f4:2a:47:f4:66:ff:ba:25:d7:
         24:33:05:82:ac:84:4b:96:98:ce:7d:52:91:08:8c:0f:28:1a:
         6b:92:8c:f0:99:80:31:af:84:e3:e3:94:39:54:aa:77:30:7b:
         59:1c:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:50:23 2025 by rpki-client