Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/022fae4c-af42-331c-b6c8-de2d2088685d.roa
File:                     022fae4c-af42-331c-b6c8-de2d2088685d.roa (raw, json)
Hash identifier:          RVboXYeX1LkHMpHA5vBN4ytaCpyN2sZsWrfdUcZlI48=
Subject key identifier:   CB:51:66:EE:65:B6:7F:77:66:A6:84:89:C6:C4:59:A0:3C:FC:E0:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB067A8DCDBA9FD95B09C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/022fae4c-af42-331c-b6c8-de2d2088685d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36621
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:06:7a:8d:cd:ba:9f:d9:5b:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=968a9bc9-d0a6-47c3-8355-0d4d73f2f8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:40:c9:1d:03:79:93:8c:1d:ca:37:10:06:
                    ba:4a:98:f6:ab:1c:26:9b:62:8a:e9:fa:17:b4:6c:
                    3b:f0:58:11:a8:47:94:79:7f:ab:b6:fe:43:17:58:
                    36:d4:0b:1e:a0:42:09:a2:29:94:d7:81:d9:7a:d6:
                    2e:1f:5f:04:5e:b3:20:93:62:b6:cf:d3:09:73:91:
                    af:69:d5:f6:cd:15:2d:cc:08:eb:0f:4d:78:dd:13:
                    54:f1:a1:1d:e2:ba:1e:89:b3:a5:93:d6:50:49:fa:
                    68:dd:d7:b4:75:4f:af:6c:2b:f1:86:6a:dc:d7:26:
                    94:52:f0:6d:ea:a0:91:8a:55:c5:54:23:ce:e7:0a:
                    e8:cb:03:93:64:5d:70:f0:bf:b8:57:69:43:42:a6:
                    60:9b:ba:86:9b:04:95:bc:d9:e1:e9:5b:20:e9:c5:
                    fc:26:84:e5:e5:56:aa:b4:c5:76:b7:21:b0:9d:cc:
                    cf:98:5e:0a:5f:b7:d4:ba:39:10:79:04:10:c4:33:
                    23:3a:86:8c:b4:7f:ad:42:95:1b:e4:1b:45:49:be:
                    43:f7:c4:93:68:16:65:08:3b:95:dd:ec:22:ce:36:
                    38:98:18:4f:79:72:e9:71:5c:9f:e0:35:cd:cd:b4:
                    d8:9f:af:14:ad:7f:90:1e:d4:96:28:9c:86:e6:61:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:51:66:EE:65:B6:7F:77:66:A6:84:89:C6:C4:59:A0:3C:FC:E0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/022fae4c-af42-331c-b6c8-de2d2088685d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:68:bf:eb:3e:da:10:6e:bb:55:43:ed:ff:de:bb:c2:3f:25:
         13:05:0c:0e:1b:5c:cd:27:2b:8d:2b:46:6c:0f:0d:54:ab:ab:
         00:67:ed:04:28:3a:df:b2:47:e8:bc:a6:0f:2a:6b:8b:1a:fc:
         48:5d:7f:50:73:f9:92:70:7a:23:38:db:0d:4c:05:b2:1e:57:
         d9:7a:51:d9:9c:c8:af:de:29:9e:b7:d3:d7:96:95:ac:09:96:
         98:1a:95:f5:51:ac:d3:7c:a7:21:23:93:80:c4:2f:7a:70:13:
         64:66:9f:dc:bc:f4:66:33:4f:f3:98:3c:c1:32:3b:c3:cf:d4:
         c7:2f:fd:e3:bd:d3:c6:be:eb:a6:ef:50:9e:93:86:b7:bf:d4:
         35:a3:a0:56:ac:d7:0e:d4:09:13:f8:b3:da:bd:c5:3d:22:8e:
         46:e5:a9:11:32:fb:be:31:f6:c6:13:b7:28:9d:10:d1:60:e8:
         7f:f3:09:c5:a7:96:b7:ce:76:a9:d4:57:72:e9:6d:73:b8:68:
         b5:d8:58:d3:12:d2:5a:44:00:4f:ad:ba:12:a7:86:d7:6b:1a:
         d6:94:d1:46:14:fe:60:74:75:0e:bf:51:97:7e:55:0a:cb:d2:
         cd:08:53:6f:73:28:0a:9b:93:45:a0:d5:38:8a:c5:c8:c9:8e:
         7a:08:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:19:47 2025 by rpki-client