Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa
File:                     139b212b-4391-3447-a68e-f4fa684c76b1.roa (raw, json)
Hash identifier:          HLbsZwm8ScCY1Ufaq43x5X03Ogip8n2ogiWuhhEcXXw=
Subject key identifier:   89:67:B3:F8:9E:C8:35:23:1A:81:CB:79:CC:7B:C3:DE:87:D6:0C:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FE36BDB230F17C2E1DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     40647
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fe:36:bd:b2:30:f1:7c:2e:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=d45e8285-d8b5-4508-99e1-e0b5fc196dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:86:fd:c0:06:ca:11:62:b7:ef:a7:df:9b:5e:
                    f3:18:5c:e1:9a:52:32:d9:20:05:ea:4c:f6:29:00:
                    3a:63:0e:39:8a:62:4d:be:d6:c4:42:c3:93:94:c1:
                    ac:ae:5c:64:55:aa:24:2e:4b:45:08:0c:c8:2c:cf:
                    6f:c9:aa:c0:f0:92:8d:ce:a9:f6:55:92:51:bd:f0:
                    ab:9d:e3:b3:d5:3f:f3:ba:93:3e:88:57:9f:bc:c7:
                    8b:75:21:c3:2b:7e:11:6d:40:95:ec:56:d8:af:8a:
                    ef:c4:73:fd:57:96:89:04:1f:07:8f:ce:51:55:ae:
                    f2:65:f9:5f:61:b5:41:b4:f6:f2:7e:aa:4b:37:d9:
                    2f:33:88:cf:3b:27:f5:13:53:7f:c0:bb:5b:ec:24:
                    85:9b:13:c0:ec:fc:3b:f5:d6:15:8b:9e:71:dd:de:
                    08:d7:65:18:ae:6d:ca:61:86:3a:2e:f4:48:38:de:
                    9b:f2:d9:71:29:e4:ef:3b:61:f4:f5:9f:34:bb:bb:
                    63:03:20:1c:79:db:79:88:0b:93:0c:14:29:6a:5b:
                    bf:2d:60:d6:1b:b6:e7:f4:c1:90:13:4b:c6:ec:23:
                    eb:b2:d4:f2:e5:fd:c9:e0:bb:e3:5a:16:55:78:19:
                    26:5e:c2:8a:2d:3c:5e:c6:31:2e:87:57:b4:0f:df:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:B3:F8:9E:C8:35:23:1A:81:CB:79:CC:7B:C3:DE:87:D6:0C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:d8:df:9a:8f:e8:88:b3:da:18:5b:6c:71:47:7d:4c:08:
         3e:b2:d6:8c:c9:a6:11:76:8b:8c:ba:f4:ef:d5:ff:f0:d4:08:
         bd:bd:d1:34:cd:5a:36:6d:ef:be:10:0f:f6:68:40:f7:03:24:
         53:19:7e:76:da:c9:d1:64:5a:b2:ce:e9:ea:12:ef:14:75:3c:
         f0:c8:d4:4a:ea:61:8c:9d:15:bf:ef:8b:44:4d:35:c7:9f:3b:
         fe:57:57:61:22:fe:56:00:db:f4:e4:16:9f:d6:e7:59:e3:68:
         ad:a1:31:b2:5c:c1:f7:62:09:3a:a3:28:bd:b9:36:6b:a8:61:
         5a:96:03:d7:f7:93:d2:44:d2:63:b0:4c:ef:15:f2:5e:12:59:
         c8:f9:90:1f:51:17:b4:28:a3:5e:ac:8a:3f:e1:29:eb:f3:82:
         88:27:e2:dd:c8:86:62:b2:8b:d0:87:48:15:df:7f:28:41:9a:
         dc:1c:0a:4f:c9:78:be:1b:00:0d:ae:91:50:03:d5:30:04:21:
         69:7f:eb:fd:59:36:df:15:2d:79:78:64:41:35:67:ba:38:8e:
         cb:59:1b:3f:1e:1d:95:89:92:64:c8:ed:30:58:ab:69:af:a1:
         13:0d:22:a3:ad:5a:78:7b:0d:af:4d:13:7f:93:2b:e5:82:1a:
         95:6b:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:19:01 2025 by rpki-client