Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9e5848-368c-3a20-881f-2aba7c8043cd.roa
File:                     0b9e5848-368c-3a20-881f-2aba7c8043cd.roa (raw, json)
Hash identifier:          IgXglwVgfRRleTKbV8ZAK9SsEC5QFTUKfiCf2XrN8mU=
Subject key identifier:   C9:85:BF:31:74:4A:D2:05:75:30:13:BD:44:FE:A6:BA:A2:8C:86:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF758D82E800DA613CA11C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9e5848-368c-3a20-881f-2aba7c8043cd.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     396574
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:8d:82:e8:00:da:61:3c:a1:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=175a1dfa-cb9d-466a-8edc-4a8ae170d5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c8:ff:01:e1:b9:65:81:34:22:a3:20:bf:ca:
                    59:09:05:92:8c:f9:8a:6c:d2:1c:f9:bd:45:5f:1f:
                    9c:0f:c0:3d:aa:d3:e5:f7:23:7e:e7:27:52:a7:a9:
                    4f:a6:cb:27:69:dd:79:fc:e5:9d:3f:9a:8a:f6:58:
                    77:42:e0:be:3f:01:a3:b1:02:6c:9a:bd:a3:84:92:
                    62:23:16:37:d8:56:4a:5c:da:7c:ae:1b:8a:2f:25:
                    71:c8:6e:81:66:b5:cb:08:a7:e7:04:aa:5c:b9:96:
                    67:01:fd:c0:b5:93:dd:be:59:29:c8:54:6f:2e:1f:
                    4e:19:ae:6a:6e:fe:26:bf:20:62:62:3c:e8:f6:ac:
                    5a:7d:4d:cf:d2:ae:a3:22:4a:8c:ae:79:e2:aa:02:
                    92:5b:c6:27:ce:5a:80:8c:46:8e:53:78:04:f6:db:
                    db:cc:0b:91:ab:88:9b:18:c3:c2:52:6f:00:d0:81:
                    77:b0:36:05:61:63:12:76:66:86:eb:b2:cb:68:3f:
                    f8:3a:83:97:b6:92:66:4f:32:3a:83:80:4c:0b:79:
                    23:72:09:61:10:86:c9:36:98:84:88:26:88:f6:e8:
                    51:a4:5b:77:e3:1d:8f:79:89:47:44:8b:08:fd:15:
                    d0:33:a1:fc:4c:0f:03:8d:93:1b:22:ec:af:eb:68:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:85:BF:31:74:4A:D2:05:75:30:13:BD:44:FE:A6:BA:A2:8C:86:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9e5848-368c-3a20-881f-2aba7c8043cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:e4:63:14:81:d3:a2:63:73:e6:13:d8:b3:bb:16:fc:cd:
         d8:12:1f:af:2a:f8:8e:d2:59:40:05:54:06:a9:fd:8f:35:c0:
         8f:3c:36:67:fc:63:2e:44:98:db:c6:47:92:1c:79:2c:92:59:
         1d:33:27:04:12:6f:a3:0b:c3:2b:ab:1a:71:a3:9c:34:0c:e4:
         46:d1:eb:c2:60:1a:a6:e7:73:34:ad:97:ee:01:13:a7:f1:5c:
         6b:a4:95:87:d5:6e:c2:ab:d0:8b:30:75:02:ec:0f:40:7c:5b:
         97:5a:de:b6:26:86:ca:a9:b7:97:68:0f:b3:78:0c:de:af:52:
         17:d3:33:ca:07:ce:57:13:fb:ee:f7:68:26:8f:d3:2a:e5:52:
         7c:4d:04:9a:18:5a:b4:17:06:c5:98:d4:fa:91:9b:b2:01:48:
         0d:0d:5f:05:de:d7:a2:35:7e:70:5e:ea:63:7d:97:e4:90:61:
         5d:89:55:9f:1c:70:a5:76:fe:1d:53:34:87:e0:7a:1c:75:14:
         26:98:e8:70:b6:63:57:52:b4:f5:3d:c8:b5:00:a4:59:f4:0c:
         36:d9:97:91:e1:0f:b7:a3:7a:39:a2:e4:9b:f6:fd:84:f0:04:
         88:cc:4f:c4:e2:b7:26:b6:66:8a:2c:a3:b6:2f:e1:a7:4d:37:
         b5:8e:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:56 2025 by rpki-client