Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0050b733-df02-3757-9e0d-50f6bd9f98da.roa
File:                     0050b733-df02-3757-9e0d-50f6bd9f98da.roa (raw, json)
Hash identifier:          ab1h2yTaDtRmoIte3TW2CTxOKaahIk7ZL/i4v2Z+ZAQ=
Subject key identifier:   05:99:A3:2B:9D:57:4D:74:BE:7B:25:A5:BD:D8:96:9E:F9:23:3C:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1712724F56A4BD9204C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0050b733-df02-3757-9e0d-50f6bd9f98da.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36632
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:17:12:72:4f:56:a4:bd:92:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7ef14148-bbe8-4308-b91d-7d3db70118db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:ff:11:e2:03:14:06:90:80:c4:b8:04:cb:
                    15:62:86:2a:46:e0:93:52:f2:ad:48:4e:10:ed:16:
                    62:69:5b:2d:80:1b:87:6b:3b:37:d1:01:15:a5:5d:
                    6a:cc:4f:17:34:7e:9e:01:aa:8a:91:b5:be:99:2e:
                    b5:30:0d:d3:55:b2:b3:0f:d0:3f:fb:6e:e3:3a:e7:
                    87:8a:8f:2b:bf:b4:d7:62:4d:9e:1f:0d:a4:e7:40:
                    50:4e:7b:28:be:7c:a3:f1:66:3f:00:5b:cb:79:17:
                    a2:19:69:d7:d0:30:63:96:8d:02:0b:7f:ae:84:eb:
                    43:fe:93:89:5d:63:64:8a:1a:9b:69:6c:16:ad:60:
                    a1:e5:a0:5a:bc:d7:b8:2b:d8:33:d7:bd:c1:68:87:
                    31:b7:d1:8f:2f:6e:ff:f9:23:98:6c:49:50:20:2c:
                    f1:c8:7a:eb:74:77:6d:e9:a1:57:63:9d:19:2f:14:
                    07:9f:b7:9d:5a:9a:5a:8d:53:56:a4:a7:3a:e6:f7:
                    5a:87:12:fb:9a:e2:ac:55:9b:1d:b2:9d:79:55:18:
                    0b:94:b6:f9:9b:2a:c4:87:b6:61:be:c2:0e:7a:d4:
                    b9:f5:1e:23:af:33:58:37:7f:e3:5b:9e:8d:ed:08:
                    bc:58:66:90:b1:6e:9f:43:22:7b:c6:5d:66:e9:93:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:A3:2B:9D:57:4D:74:BE:7B:25:A5:BD:D8:96:9E:F9:23:3C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0050b733-df02-3757-9e0d-50f6bd9f98da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:33:c6:27:da:21:01:81:56:8b:62:4a:06:db:fc:f6:16:f8:
         57:88:a8:c1:6a:eb:ec:61:d3:fb:02:d6:bf:5a:53:7f:df:76:
         40:01:3c:a3:19:b3:4a:6f:42:e2:5f:96:bc:2c:7c:26:64:4c:
         c3:18:f5:58:e3:4e:64:05:bd:f5:c0:db:b7:34:b5:64:50:50:
         cf:93:82:04:5f:43:27:a1:cc:7a:8d:e4:e2:2c:52:00:05:a0:
         17:51:4c:12:db:4d:a5:cf:22:a7:14:62:50:7c:75:d1:ca:16:
         31:e6:f2:16:78:4a:73:4d:cd:08:4f:89:6e:0f:5c:7d:e3:5b:
         96:b0:6c:93:a4:04:09:ed:bd:8a:85:5e:63:31:85:99:7e:74:
         f5:89:ec:4e:ec:72:f9:8c:7b:3f:17:09:ba:9a:76:98:7e:33:
         3a:cc:95:34:ed:2f:af:8c:fc:20:e6:27:17:32:89:84:e2:ff:
         c9:d0:0a:26:8d:a8:85:98:13:05:51:e8:e5:bc:5e:4e:4f:b4:
         f2:c3:c5:1e:a6:e6:4e:7b:e2:2e:b2:f7:f0:1c:9e:83:a8:a2:
         4e:da:cb:67:68:82:93:d6:d4:5f:b0:62:fe:0b:79:fc:25:38:
         6d:bd:c6:a5:c4:ca:1a:35:67:63:52:58:64:f6:96:49:09:5f:
         9c:69:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:47 2025 by rpki-client