Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa
File:                     406b998d-1770-30ed-830d-b6462060a172.roa (raw, json)
Hash identifier:          poSivRYdjYA2/TVx/3BbVEjsS4cAiJetoK/w4BwjkUI=
Subject key identifier:   5F:57:B3:E1:4E:98:52:15:7C:D9:A5:9D:5B:F5:72:1D:0F:C5:4A:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64ACD371C841D3FE383180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     396549
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:ac:d3:71:c8:41:d3:fe:38:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=6770b14c-a64b-40f6-b082-8ec0eea2adea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:84:1b:f2:ff:1f:4e:3f:ca:b4:f1:16:05:
                    76:bc:ac:b8:80:82:2f:6a:a9:74:8c:7d:e4:1c:38:
                    d7:87:6c:f1:99:24:be:e6:e6:18:db:1e:b7:03:98:
                    6b:47:61:5d:c6:0e:97:7d:26:12:69:02:ce:c0:3e:
                    d3:51:dd:31:19:ab:e4:14:88:3a:99:55:50:64:72:
                    c2:5c:3e:c3:8f:83:08:b5:2f:af:d2:de:6b:e2:a2:
                    33:f1:a5:d2:bc:31:08:b4:6c:11:4d:31:69:96:d2:
                    9a:51:57:ba:e6:6e:8a:c3:64:e6:4a:88:4d:29:93:
                    e6:0c:34:89:c5:23:7d:f5:a8:6b:92:a9:09:56:df:
                    f7:f1:65:be:b2:c8:c0:1b:53:dd:8c:5c:b0:57:ae:
                    20:29:87:08:e0:d1:a5:1f:2c:30:af:21:3a:8f:2a:
                    c6:aa:94:cb:d5:29:6e:6f:d8:3e:62:6c:9b:ee:3b:
                    42:eb:36:47:85:20:45:00:e8:51:4e:12:fa:2b:ad:
                    d7:14:4f:f7:60:e4:af:27:a0:f0:d8:5b:2e:78:d0:
                    3f:c2:e1:f4:98:55:f0:cc:4c:15:97:dc:3a:98:60:
                    ac:5c:b7:79:f1:5b:df:7d:4d:14:5a:6b:8c:6b:52:
                    a7:a9:fb:e6:7b:93:1b:9f:26:7f:ec:b7:bd:d5:ff:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:57:B3:E1:4E:98:52:15:7C:D9:A5:9D:5B:F5:72:1D:0F:C5:4A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/406b998d-1770-30ed-830d-b6462060a172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cc:67:4f:9d:60:73:8e:4e:e0:07:85:0c:c8:83:b5:1c:7d:
         c8:62:cf:82:c2:5f:6c:eb:bf:06:be:25:6b:8f:5b:c2:f9:30:
         3e:ff:9f:5b:a5:4d:e6:e2:d9:9b:f6:37:67:b3:86:6c:cc:98:
         ac:f1:28:87:cb:90:13:38:09:44:ac:27:cf:0f:af:07:40:be:
         2d:dc:5f:53:dc:bc:8b:5d:a9:70:3d:e7:5d:55:11:b2:54:61:
         73:7d:4e:f5:19:1c:82:5e:0b:42:c3:5c:9a:c5:0e:aa:0e:1f:
         77:72:de:1d:84:47:84:e0:c0:20:66:30:fb:35:b1:98:77:d0:
         4f:83:5d:05:88:14:1d:87:c8:99:56:5e:13:d7:80:be:3d:2e:
         6a:5f:ae:9c:6b:40:f8:d3:12:fb:46:32:04:28:8f:1f:41:f6:
         c0:31:58:0d:b5:fe:d3:0c:17:ce:3b:17:db:88:f8:42:35:89:
         eb:38:92:32:d4:7a:97:8f:79:d3:24:93:43:21:3f:c6:46:e2:
         61:80:86:9c:22:1e:18:0c:bc:e1:93:5f:fe:5f:bc:e8:06:6b:
         b4:ad:31:6f:91:93:5b:c6:ad:02:2a:a7:1d:aa:3c:7c:73:c0:
         f8:30:04:d5:94:d2:48:3e:40:f1:1c:e0:37:d6:72:c4:3a:f2:
         22:76:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:38:12 2025 by rpki-client