Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa
File:                     08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa (raw, json)
Hash identifier:          ybtNdPI+jxXHiNRcHsmf9lQgCI3U/iTOhfYDFziFWj8=
Subject key identifier:   E1:AB:A4:0A:6F:4E:52:C0:93:91:5C:F3:24:8C:BD:73:AB:4D:A5:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACC57DA22ABB12F86DF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396612
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cc:57:da:22:ab:b1:2f:86:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=8538e581-7bfb-4609-8ebf-798c2624af2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:a6:0e:0d:a1:e3:35:1a:9f:68:f1:e0:50:
                    ae:2a:12:4c:c2:54:39:0c:dd:5f:54:8d:69:5b:50:
                    dc:bb:fd:0b:43:eb:65:4f:b6:57:ae:ab:92:c8:96:
                    b8:97:4b:e9:1e:87:c9:aa:c9:ea:e8:d6:64:06:84:
                    63:30:4d:be:45:f1:2f:73:24:0a:02:45:86:9e:02:
                    c4:0d:76:3c:f2:19:2c:92:b3:b3:53:87:8b:31:5c:
                    21:47:35:60:a3:df:2d:53:c4:d3:70:7b:a6:f6:02:
                    2e:70:f0:94:3e:60:fc:42:74:1a:3c:59:85:e0:50:
                    4e:bd:37:7f:34:91:05:24:29:05:d5:7f:22:ad:e0:
                    4e:8b:2a:f0:6c:b8:db:bf:62:c1:da:67:03:af:e6:
                    43:89:71:98:79:51:1c:5f:59:22:54:37:c2:d0:c3:
                    c1:12:b3:14:e1:63:e4:4a:3b:cd:d9:67:eb:a4:06:
                    cc:a1:78:62:b0:ab:fd:39:5e:52:ba:c0:f7:27:08:
                    36:72:f8:22:85:83:b3:35:c4:21:94:3f:8b:cb:9d:
                    a3:15:c7:73:7c:55:3c:cc:7b:c3:ce:08:ab:af:1c:
                    e9:56:bc:41:65:63:40:c6:d1:2c:df:46:c3:77:36:
                    fe:93:19:ff:ec:78:ec:82:77:0a:a2:9e:ab:aa:0e:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AB:A4:0A:6F:4E:52:C0:93:91:5C:F3:24:8C:BD:73:AB:4D:A5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:cc:3e:cd:af:00:bd:6e:fd:32:c3:6a:13:ac:5c:b5:d9:
         d2:33:d4:f5:b0:33:e4:ed:f6:fd:fb:73:c3:3a:07:9c:a0:a5:
         d8:7d:41:8e:0a:2d:b2:7d:38:5d:c5:24:4f:77:1d:e7:02:fe:
         69:8e:06:5b:ba:63:06:fe:07:42:a6:86:16:7b:8c:a5:58:51:
         bc:04:80:07:2d:59:38:12:30:10:5d:e6:26:0d:8f:b3:f7:ef:
         31:57:d8:4b:89:59:aa:99:36:78:5d:ad:5b:72:b0:15:f6:99:
         1a:a1:35:1d:31:50:21:eb:38:e7:19:16:6f:04:42:0b:ac:78:
         c8:26:9a:e6:e3:5f:8f:a2:a9:82:8d:c6:0e:81:f8:6e:7a:b7:
         d4:fa:7f:96:4d:a7:aa:ef:13:fc:63:40:eb:d7:14:15:e8:68:
         f9:58:fd:47:f2:ee:3d:c7:85:88:dc:a4:f7:be:54:19:a2:37:
         e9:c5:69:11:78:06:a3:19:e9:96:fc:5b:8b:0e:6b:82:ae:3c:
         2c:5c:f1:77:34:79:bd:2d:2b:bd:aa:2e:c8:8c:41:f3:22:4e:
         fc:14:46:c6:3a:a1:9f:97:82:a0:76:ee:69:0b:ad:2f:bd:24:
         07:ca:d0:cd:73:ca:4b:8e:33:79:1a:93:0c:e5:00:4d:72:35:
         01:a8:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:13 2025 by rpki-client