Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/360d865b-87d0-3eae-9119-8585dcb64dcc.roa
File:                     360d865b-87d0-3eae-9119-8585dcb64dcc.roa (raw, json)
Hash identifier:          iqYohTkrPXAgmWBoGG3L714mfxs92IX/mG3ZFVUUZWw=
Subject key identifier:   68:F8:EC:4F:0A:11:4A:D5:7B:18:6C:C9:3C:DB:5F:14:D9:1B:FF:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB1A47BCA76FCADB4D3B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/360d865b-87d0-3eae-9119-8585dcb64dcc.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396577
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:1a:47:bc:a7:6f:ca:db:4d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=8f6c2b22-80d9-4dc8-9414-e17e88a1067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:7c:00:14:bc:75:85:24:c1:f4:46:90:ef:
                    92:85:bb:e2:69:09:52:9c:3d:e2:3e:55:46:44:09:
                    fe:ca:f1:b3:c0:31:d0:35:d6:d2:23:e7:71:f8:9f:
                    69:e1:0f:2a:01:cf:77:6b:46:a7:f1:d0:03:d4:b1:
                    ac:fa:be:3b:66:ef:9f:f6:19:8d:81:a3:9a:11:2f:
                    7a:67:80:67:28:0d:34:07:f7:a1:ab:5b:1b:67:9d:
                    b2:33:21:78:e1:8c:81:07:cc:90:bc:8d:b8:a7:9f:
                    01:0f:5a:5f:8b:2b:14:2d:88:ac:18:d4:23:0c:78:
                    c4:5d:81:88:db:ae:94:0c:e2:c9:dd:7e:51:11:56:
                    56:40:17:f2:9f:a0:5a:72:85:06:e4:b7:ff:bb:15:
                    85:32:50:08:ea:43:ac:bf:a8:6e:93:77:6b:6f:97:
                    3d:73:40:00:75:01:dd:32:a8:c9:a6:90:42:f4:b9:
                    3e:d8:7b:2e:cb:59:4d:79:4e:db:63:7f:66:0f:a6:
                    71:f5:86:54:5b:10:66:c8:94:46:d4:c3:53:bd:d5:
                    bb:bd:bc:6e:ea:10:b2:3a:ff:e2:f3:70:bc:3c:31:
                    6a:5a:53:3f:6e:54:1d:3c:1a:48:29:b3:fe:9c:ac:
                    63:0e:37:ff:dd:3d:c2:f8:1a:ce:df:ba:28:7f:64:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:EC:4F:0A:11:4A:D5:7B:18:6C:C9:3C:DB:5F:14:D9:1B:FF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/360d865b-87d0-3eae-9119-8585dcb64dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7d:45:2d:96:3f:97:0f:ae:02:df:5f:40:16:aa:eb:57:be:
         51:0e:20:2a:4d:90:c1:b4:fe:3e:62:6b:79:ec:0e:28:6f:13:
         3a:ca:f4:d2:f3:4f:2f:4c:11:fa:c7:e7:c0:db:e0:1c:89:d4:
         a3:7a:a9:f2:71:fa:ab:95:70:c8:9a:c0:4b:b7:53:04:a5:a9:
         e7:0d:f2:c6:84:5c:e6:41:5a:3b:91:79:1b:3b:13:42:82:6f:
         d2:96:0a:b6:a4:af:d2:5b:b5:32:69:d1:7e:a5:6c:2d:8f:b7:
         99:69:4c:20:9f:8b:0a:91:6c:f0:42:97:02:22:18:93:5a:6b:
         e4:0b:1f:d8:72:bc:a7:a5:40:f1:65:57:52:b4:c1:d0:c0:6f:
         a9:1f:a5:1e:9b:70:93:eb:b2:87:8a:09:7f:c5:6c:4d:a4:c5:
         f1:50:82:09:ab:e9:50:d7:17:a5:e1:e4:6a:ea:78:7b:94:df:
         ef:3b:83:2b:eb:a8:fa:36:e7:fe:b1:a5:08:28:c7:3b:6f:b5:
         93:81:40:eb:64:4d:b8:24:11:f1:d1:a1:bd:96:1d:4e:d2:f6:
         f0:ea:a8:82:22:ec:67:95:40:6a:16:65:bd:59:99:b7:c8:e9:
         2c:52:b2:2c:fe:c3:18:25:ae:5c:6e:4c:2b:5d:d2:71:78:14:
         a7:7f:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:49:04 2025 by rpki-client