Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/343d7651-9b60-30b6-86dc-f2d93c206727.roa
File:                     343d7651-9b60-30b6-86dc-f2d93c206727.roa (raw, json)
Hash identifier:          qkILIQ6w1422bt56Xt1Uxcn1+Et/8H8ypKbR5M9ofS0=
Subject key identifier:   2E:43:94:55:A9:03:ED:03:6D:BF:96:69:31:55:67:EE:E3:1E:EC:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB115813F1ABD88DB7FC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/343d7651-9b60-30b6-86dc-f2d93c206727.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396599
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:11:58:13:f1:ab:d8:8d:b7:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=cc00f7a0-4ce0-41f3-bd37-8b15eec8ae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:2b:d7:10:f8:41:f1:c1:21:5c:74:8a:3a:
                    c7:bb:04:be:c1:8c:6e:9d:b5:df:21:54:d5:db:5b:
                    28:0b:59:a8:eb:59:85:65:b0:2f:2a:10:14:48:06:
                    f8:50:04:28:4f:01:4d:85:8b:f2:a5:de:8a:d7:9a:
                    08:2c:75:f8:81:cb:44:9d:26:90:0f:7b:41:c8:8b:
                    eb:6e:c6:5c:4a:c7:85:da:85:f2:c8:48:04:1b:67:
                    d7:28:46:19:ae:16:f9:67:35:2a:09:cf:68:20:72:
                    73:de:3d:e9:32:cd:12:4e:f7:9e:ef:90:e0:8d:16:
                    42:6c:93:a9:ac:9b:50:64:b3:00:70:76:36:14:98:
                    f3:bd:41:5d:9c:05:9f:82:72:20:e7:a2:88:7f:7c:
                    57:a7:a2:b9:2a:74:10:4c:78:a1:18:ef:a2:15:52:
                    6d:48:75:fa:0d:0f:0c:7a:5b:da:c6:01:b1:e4:6c:
                    b7:54:ad:29:91:c7:d9:e6:d4:16:25:68:55:4c:79:
                    84:6c:48:d3:73:fc:fc:75:c4:db:81:2d:c0:f8:ea:
                    df:f6:ce:d1:b6:24:ad:b0:a1:c4:59:e4:ea:b0:e1:
                    0e:de:99:60:94:cc:0b:97:55:8c:b4:c0:8a:9b:bd:
                    80:b1:93:12:66:44:1e:c4:52:fe:08:f0:82:48:c3:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:94:55:A9:03:ED:03:6D:BF:96:69:31:55:67:EE:E3:1E:EC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/343d7651-9b60-30b6-86dc-f2d93c206727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:47:51:21:35:2a:2a:cc:49:a0:6a:ea:e1:21:a1:71:32:
         4c:b4:c1:29:23:16:4a:ca:4d:00:4d:d9:f3:91:d5:4a:c2:47:
         62:7c:1e:a9:30:71:d7:f6:52:b3:39:3e:fb:12:c2:de:1c:81:
         77:47:e1:98:da:be:97:57:f1:f7:e3:aa:0c:77:d6:f4:3d:fb:
         c9:0e:e6:8a:5f:fa:df:67:90:3c:17:2f:ff:62:ee:5e:74:24:
         5d:ab:ff:f5:a4:88:b6:a2:f2:78:c4:bf:cc:5f:5f:4f:07:57:
         ee:26:85:d5:66:bb:30:4c:c8:67:ed:5c:5f:25:da:34:f8:b9:
         f8:ef:3e:6f:06:14:4f:78:bb:26:d6:86:ef:ef:c5:12:b7:0b:
         80:a4:df:3a:a2:05:c2:08:0d:38:de:94:d4:ee:a3:b2:fb:96:
         6f:e3:db:a5:f7:41:32:d6:24:57:28:ba:ae:36:b4:2a:6d:78:
         d7:38:de:fe:46:83:05:f4:d7:f6:6d:da:42:32:30:3e:f7:47:
         36:bb:61:39:62:b5:a7:77:27:a0:7a:b6:ab:75:9f:ef:da:12:
         e0:f8:89:b7:7d:30:f8:d9:2b:86:62:dc:26:48:6a:af:7b:70:
         6d:6a:81:3b:e2:e7:a4:56:52:67:16:f0:07:ee:29:f1:3d:f3:
         e6:c4:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:10:41 2025 by rpki-client