Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef08063-4538-3fbf-85ad-b47dd7ad804f.roa
File:                     3ef08063-4538-3fbf-85ad-b47dd7ad804f.roa (raw, json)
Hash identifier:          IFeNDiD38qEpyAjdOnYU11bzSQ3wjTq4Yb1Nf99gEgg=
Subject key identifier:   99:B4:21:2F:2E:DA:52:B1:89:C1:68:48:22:87:A8:52:FA:D4:57:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACEDA3FED0A247C669080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef08063-4538-3fbf-85ad-b47dd7ad804f.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396555
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:ce:da:3f:ed:0a:24:7c:66:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=1f4aed8c-d4f8-4fd6-8886-00832c30dead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:44:ad:9a:fd:57:03:f7:d6:50:8f:27:f1:
                    5f:96:13:87:51:3c:ad:a4:8f:71:16:0e:0b:6c:ea:
                    52:ec:db:7d:90:e3:54:2f:9d:71:fb:0f:5e:a2:ba:
                    06:21:4d:3c:0d:d6:6a:26:53:11:5b:a4:cf:e6:cc:
                    e4:05:e5:47:8f:88:bc:43:a1:09:46:95:e9:ce:fb:
                    1d:f6:65:44:e8:48:48:e0:2b:2b:b4:63:11:20:c9:
                    0c:06:66:33:97:00:12:50:50:e1:9e:a5:95:d0:5f:
                    1d:6d:90:cf:1e:c6:29:06:ab:f8:ba:83:83:3c:ac:
                    27:0f:c4:fd:8d:f7:3a:a5:ae:73:aa:f9:9e:fc:64:
                    2e:28:23:c1:20:21:f5:6c:7c:cd:88:c4:58:8f:43:
                    e3:46:54:54:91:7d:66:01:0f:dc:49:97:53:bf:6a:
                    a3:20:cf:dc:87:08:ea:29:3e:8d:da:54:70:aa:01:
                    42:f2:2d:71:bb:0e:b1:7f:1a:d7:dd:a6:cd:58:09:
                    52:7e:8a:d4:e3:f4:23:d9:d9:5f:09:e1:34:23:6f:
                    d4:6c:1e:3c:65:7b:66:15:5e:07:10:7c:8b:98:5a:
                    23:bc:b8:93:41:5a:17:14:bd:fc:98:43:67:f7:a5:
                    91:c9:5e:01:99:74:0b:c0:0b:2f:dd:16:8b:da:cf:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:21:2F:2E:DA:52:B1:89:C1:68:48:22:87:A8:52:FA:D4:57:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef08063-4538-3fbf-85ad-b47dd7ad804f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2c:f5:30:f5:f3:fe:b1:9b:9b:0d:d0:0d:9e:22:5d:6a:61:
         46:64:5d:30:2d:6f:22:46:c4:bc:15:2b:7e:d0:df:fc:e0:c8:
         e4:aa:83:92:b5:9c:15:d2:dd:a9:54:7d:67:f3:ed:33:7f:93:
         65:27:3c:dd:f4:4a:55:05:69:fc:8c:f3:a4:b3:bd:85:b2:7d:
         a2:2d:6d:1d:7b:98:69:7e:7f:a6:08:8c:46:6c:6d:3e:c2:21:
         1c:d4:67:dd:55:92:09:3f:45:48:82:88:b8:a6:70:3b:23:29:
         28:2c:92:e7:cb:34:68:2b:cd:fb:82:c1:98:20:63:a3:01:a0:
         e2:42:f8:ca:02:a2:d5:d1:95:22:48:cd:d7:fa:e3:5f:92:b2:
         4e:45:ac:80:15:fb:16:4a:78:68:23:dd:26:f8:ed:6e:3e:f5:
         a6:5b:06:7b:31:f7:50:82:01:74:db:3c:00:db:e7:40:ab:b1:
         9a:e8:12:25:b3:13:ad:be:d5:34:df:32:f0:30:1d:c7:b4:a9:
         a3:39:eb:ec:5c:c3:d0:50:e2:97:0c:2d:f6:0a:05:ec:8c:d4:
         4f:63:16:15:41:7a:04:4d:7c:f1:d6:a9:8c:e1:29:55:bf:04:
         6f:5a:7c:46:d3:ca:a8:7f:9d:2b:70:12:d4:c6:97:b3:6a:dd:
         14:ad:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:54 2025 by rpki-client