Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dd60e12-2c0b-3678-95b7-bdb204ff0b9a.roa
File:                     1dd60e12-2c0b-3678-95b7-bdb204ff0b9a.roa (raw, json)
Hash identifier:          yqk7IRoSfh7wJnvDEDS6E/yxqaAp3OnJdKoSFCjtzjc=
Subject key identifier:   59:00:5A:A6:13:AB:53:7C:48:3C:67:9E:CF:CF:48:DB:50:F0:99:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FAD3F234088D5F003D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dd60e12-2c0b-3678-95b7-bdb204ff0b9a.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     397212
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fa:d3:f2:34:08:8d:5f:00:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=4b333893-a8ab-46b3-b291-f5e37667e00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:69:e4:93:7c:5f:fa:62:e8:34:8a:da:21:
                    df:19:cd:91:1e:64:cd:3e:74:2f:b9:89:86:86:65:
                    a9:77:04:f1:8d:11:0e:5f:8c:9b:f6:93:a3:43:0a:
                    bc:3e:31:c3:02:b0:34:b4:7f:fd:92:8c:52:0a:74:
                    fa:3f:ef:fb:02:d4:59:b1:e4:f6:09:39:89:71:ae:
                    80:aa:e8:02:0c:9e:0b:93:ff:62:e0:82:62:59:05:
                    c1:42:71:dd:dd:8c:51:21:a4:58:81:24:05:45:62:
                    a6:38:56:c3:66:01:72:cd:56:1c:40:3e:f7:54:b1:
                    cc:20:dc:f3:36:e5:6b:b0:32:fd:bd:1c:2d:b5:6c:
                    ee:4d:05:d5:51:df:3a:d4:c9:47:c2:c3:f2:dc:05:
                    5d:83:fe:0e:d9:3b:91:0e:4d:cd:16:e1:cd:6d:c5:
                    9c:82:73:21:5b:8d:f0:3d:93:56:9c:dd:55:e8:22:
                    29:d3:e3:12:1d:d3:a0:cc:05:ef:55:3a:36:99:5c:
                    cf:73:2c:80:bb:08:94:63:b5:09:be:62:1d:c4:24:
                    e7:49:7e:03:67:6f:19:3c:b3:12:3b:8a:94:c1:7d:
                    d5:8f:67:1c:ca:67:17:89:a0:e0:ea:0a:f4:9a:cc:
                    35:2b:12:b0:56:7f:47:df:24:d2:a4:84:ea:e9:86:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:5A:A6:13:AB:53:7C:48:3C:67:9E:CF:CF:48:DB:50:F0:99:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1dd60e12-2c0b-3678-95b7-bdb204ff0b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:9c:1f:cd:cc:45:ff:72:1d:2e:15:07:4f:c0:8c:96:00:
         1f:60:b9:28:29:5c:4d:68:86:a0:66:c9:17:c7:57:27:88:52:
         d6:b2:8d:87:6e:ca:de:4a:45:0c:86:54:fa:c4:44:a5:1e:10:
         9f:38:6e:f5:f3:33:6f:26:21:4c:46:6d:85:aa:64:d0:7d:03:
         20:c1:c3:b0:df:c5:b5:ee:89:2d:35:22:ff:47:8c:e5:04:58:
         ea:a9:f9:a3:0f:41:15:c9:5d:e4:a9:ed:a5:d4:aa:f6:83:b3:
         6a:09:84:e7:5a:e7:37:17:56:e9:c8:57:fe:ba:bc:ce:dc:61:
         96:85:19:b3:cb:90:29:7c:dd:92:ef:fc:89:a5:05:f4:91:85:
         27:e7:7e:05:24:7c:40:90:49:72:e4:9b:b0:00:af:ab:3a:41:
         b3:46:a7:9d:c3:74:d6:0d:b5:16:ba:ad:be:e6:c0:e8:e9:ac:
         0c:56:09:58:8b:18:ff:eb:52:8c:bb:6b:47:75:cf:3b:5c:5b:
         55:c6:97:40:9e:2b:93:b9:35:9f:21:37:48:a9:83:a8:4b:95:
         ee:25:76:44:ce:91:cf:da:d4:26:0a:46:45:27:1c:65:96:85:
         74:76:06:39:65:f9:95:a9:4b:22:d5:a5:f9:9c:3b:a6:94:a7:
         2b:36:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:06 2025 by rpki-client