Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/396c1ef0-2841-3f4a-b905-12fa240b8635.roa
File:                     396c1ef0-2841-3f4a-b905-12fa240b8635.roa (raw, json)
Hash identifier:          LpENq+4nCr5z2zXIJYl+gS4YkGxX3hoCZyJZ7eeIHNo=
Subject key identifier:   C7:A8:51:31:BE:A6:7F:C0:0B:EE:0A:82:FD:F6:E6:57:70:FC:29:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FC0A08DFFD8B35913000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/396c1ef0-2841-3f4a-b905-12fa240b8635.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396558
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fc:0a:08:df:fd:8b:35:91:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=8a4ae38d-c8c9-4e3e-9e5b-f63b1c5730cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:55:7c:18:96:14:9d:ec:60:4e:00:01:b5:
                    19:a6:f8:33:0e:8c:db:f3:1e:72:5f:cc:9a:7c:65:
                    30:6b:12:7f:3f:c6:c8:99:18:fd:2f:6c:ec:49:9f:
                    f1:99:ae:31:38:6d:93:85:62:41:13:50:92:83:bf:
                    82:57:0b:be:bc:18:0e:9f:4c:15:fe:56:f2:31:56:
                    b4:2d:7b:9d:a2:c3:f9:db:83:8d:08:45:1d:d7:85:
                    d9:28:19:7c:b4:69:c0:f4:de:d0:fe:45:91:96:b9:
                    16:98:e5:ba:30:e4:9f:04:2d:c2:63:92:00:d7:6c:
                    ac:cc:41:27:bf:3f:af:04:0a:8e:f6:31:2a:3e:a3:
                    3b:36:39:b5:ac:73:55:0c:4f:6d:4d:8e:1d:a6:f3:
                    ba:91:71:a9:69:5d:61:40:cf:78:ea:62:35:cf:50:
                    16:fd:c7:88:15:44:37:7f:0a:15:f9:3c:09:e2:36:
                    ca:61:ac:4a:f9:99:41:f6:67:14:a7:92:a2:21:6d:
                    f4:95:ba:60:24:bd:73:d3:0a:9e:13:cd:33:a3:7d:
                    16:b2:f0:fe:03:e7:01:0a:c1:bf:55:81:ac:f6:b5:
                    03:96:6d:3e:f8:64:b0:51:5a:b0:86:eb:b7:11:df:
                    5f:66:4f:ff:33:27:82:29:12:c9:50:46:d8:85:fc:
                    a3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:51:31:BE:A6:7F:C0:0B:EE:0A:82:FD:F6:E6:57:70:FC:29:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/396c1ef0-2841-3f4a-b905-12fa240b8635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:9e:92:dc:c4:13:ba:a8:ab:a4:33:c5:5c:73:57:63:19:
         ea:7d:50:6b:6a:ce:7c:28:1a:9c:11:e8:69:c5:26:19:62:14:
         b8:78:7b:86:8a:28:c4:97:ba:1c:5e:6f:d0:a5:93:c6:0b:b2:
         0f:4b:2a:cf:09:47:e3:cf:a9:77:99:e2:a7:e7:31:c0:e0:73:
         e9:a1:e4:f3:5f:66:8b:ed:84:03:2c:84:b5:18:ac:5f:ad:94:
         ab:b6:c1:37:72:81:aa:80:69:23:4d:88:3d:03:0b:ea:14:ca:
         f5:42:69:27:94:d8:ed:70:be:df:09:77:12:2b:e5:ff:17:c7:
         b5:f8:a2:5f:32:25:fc:16:2c:ac:5d:f1:55:e0:f3:ab:24:7c:
         e2:29:94:7b:ab:fd:0b:db:ae:6b:03:7d:e2:28:0c:59:fd:b6:
         4b:99:07:91:8d:a9:1c:73:a9:dc:a8:bc:e1:88:ae:3e:78:1f:
         cd:92:6a:f5:ac:17:08:f7:cd:56:d4:1b:9e:5e:23:2b:a7:d4:
         48:4d:98:f2:6a:a1:45:e2:e7:98:cc:71:f3:27:9e:bf:8c:7c:
         84:07:f9:7e:bd:63:d9:3f:2c:fc:fc:98:31:b9:d4:46:03:82:
         56:d2:e5:9e:38:e5:ce:d3:5a:44:ca:74:3c:b0:c4:a1:50:50:
         a7:a5:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:09:13 2025 by rpki-client