Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f42fef59-2cff-390b-af2c-9a93511d2e17.roa
File:                     f42fef59-2cff-390b-af2c-9a93511d2e17.roa (raw, json)
Hash identifier:          KWC44vTsta1hlIbxoScihZVeTKmmmEHtuFUh99MKrvc=
Subject key identifier:   D8:5C:C1:AE:EA:8F:2B:F5:51:20:A6:F6:12:DF:56:62:D3:8E:A1:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A43DB1C0466E958F872389700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f42fef59-2cff-390b-af2c-9a93511d2e17.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     397200
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:1c:04:66:e9:58:f8:72:38:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=43c335c3-5c43-49a9-a85f-7ef47df472b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:f9:ae:ad:da:bd:d2:c8:e4:8c:11:f8:2b:
                    8a:a8:4e:30:f2:0f:12:a1:68:09:3f:aa:51:2d:6b:
                    21:c0:68:cc:3b:97:c4:2f:5d:6e:56:b8:65:a9:ed:
                    b9:47:9d:d8:5e:77:c9:65:b7:af:1c:0a:3b:4b:1e:
                    28:04:9d:e0:87:2c:8a:a7:c1:72:89:2e:11:cd:ff:
                    5b:97:49:f1:a3:07:99:6c:08:ce:3c:f6:f3:8f:9a:
                    f7:e7:75:86:e6:01:51:bc:68:33:99:59:f4:91:3c:
                    aa:27:a8:a2:a1:dc:d0:e1:9b:4c:36:7a:20:a2:a8:
                    95:53:e4:0b:d4:af:a2:1c:0e:7c:82:83:d1:bb:21:
                    d5:2d:a6:9c:94:43:e5:e9:e7:b5:64:e8:98:db:d9:
                    c7:c0:7b:4a:7b:32:8d:ac:eb:db:05:d3:09:74:7b:
                    6e:f4:cf:ed:85:ef:11:e1:ca:b1:fc:69:62:2e:c6:
                    35:ad:44:d0:46:36:21:b0:22:03:96:e8:04:3f:77:
                    3f:10:1f:c0:68:64:a1:5d:a2:c2:55:56:33:6e:cd:
                    90:25:bf:b4:1d:4a:8a:e6:04:69:a6:53:23:da:fd:
                    38:c8:0c:85:cd:3b:43:1b:2c:2c:c0:51:78:3f:fc:
                    7c:9c:0d:7a:6b:fe:36:8c:4f:c6:d1:8b:b1:88:c0:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:C1:AE:EA:8F:2B:F5:51:20:A6:F6:12:DF:56:62:D3:8E:A1:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f42fef59-2cff-390b-af2c-9a93511d2e17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:97:0f:71:27:c1:47:33:51:4f:eb:2e:0b:61:e2:16:03:
         d8:1d:c7:83:b8:34:47:55:8d:cf:e7:69:0e:9a:96:b1:20:c2:
         e1:d9:71:5f:17:77:ba:8e:bf:44:e7:12:be:cc:aa:95:3a:42:
         60:6b:a7:65:96:47:1b:e0:e5:8c:62:5a:48:5d:d4:3e:8e:89:
         05:ca:e6:3a:44:57:ad:ac:1d:44:df:23:fc:c3:01:0c:09:2e:
         19:e1:d2:10:f6:f7:c9:0d:a4:7f:6a:de:ca:9a:72:8e:fc:4f:
         51:1b:00:99:2a:c7:1f:d1:36:c1:23:42:dc:06:d5:50:4c:b4:
         74:85:13:46:eb:0d:d4:8e:fd:31:87:14:7e:85:6c:56:66:a7:
         29:48:e1:29:8a:f3:9c:21:b3:5a:0a:6a:da:d1:78:d8:fc:77:
         3f:79:6d:cd:25:f2:aa:af:53:9f:4e:f6:02:03:70:3e:1f:e6:
         c1:15:6e:c9:46:50:94:5b:27:37:44:4e:47:d2:a7:98:53:51:
         d4:7e:88:82:a5:5b:6a:63:3c:b2:95:63:7e:de:ae:c8:0f:3d:
         58:7e:75:49:8a:4d:91:c0:e0:ff:be:a1:e2:af:53:a8:bd:fb:
         52:ea:ba:fd:bc:e2:a8:63:56:74:7b:45:b8:5a:96:7f:d5:8e:
         57:59:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:43:08 2025 by rpki-client