Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b00c3d-2eb3-3b45-81c9-8284591c1a5b.roa
File:                     43b00c3d-2eb3-3b45-81c9-8284591c1a5b.roa (raw, json)
Hash identifier:          SOgwf+5h7bCRfeY3OrDU5QwbTukmzs+mpfhn1u0MYC0=
Subject key identifier:   E6:90:8D:10:32:44:18:64:02:2C:A1:95:E5:1C:10:0F:91:58:C4:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64A6AD263B130DAD911DA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b00c3d-2eb3-3b45-81c9-8284591c1a5b.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     22547
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a6:ad:26:3b:13:0d:ad:91:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=6b069b0c-5f21-4e96-9488-309594aeec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:67:34:d6:ca:5b:e3:5d:b8:9a:8e:81:8a:
                    4d:2c:a5:e1:60:d9:9f:9d:37:18:48:1a:c7:f6:e5:
                    f8:c3:59:8e:4f:5f:50:4e:5f:8b:28:aa:79:d6:3d:
                    c9:42:f0:2d:8c:7d:ea:b1:2d:55:93:b3:87:74:f7:
                    28:ef:61:89:95:6c:68:5d:b3:9a:72:fa:e7:99:40:
                    8a:17:92:86:d6:5a:7e:10:53:45:c2:93:ec:46:a7:
                    75:de:b5:fe:d6:c3:a7:ae:d4:a9:cc:60:5c:09:0e:
                    c1:fb:b8:99:a2:73:5f:82:8a:66:6e:1b:8c:df:36:
                    82:67:28:ce:18:fc:ed:fa:bd:be:a9:43:ff:88:95:
                    77:18:37:e5:54:91:e2:cd:82:3f:e7:3b:a7:10:d2:
                    16:a5:b1:a5:76:c2:5e:a8:d3:fa:52:b7:28:72:c4:
                    d5:a3:09:23:08:1d:72:6e:ae:85:8c:be:1b:50:38:
                    8b:7f:d0:4f:1b:f6:5c:8c:52:46:fa:a3:55:8b:55:
                    8c:ec:08:bd:91:81:54:77:24:3a:e0:66:a8:95:b4:
                    1c:e4:80:7b:8d:3c:15:a2:45:2c:60:58:a6:49:f7:
                    bf:7c:a9:c1:fb:41:14:22:fb:c1:00:98:d6:1c:b0:
                    81:47:28:ce:01:e8:a0:91:01:ce:4f:b4:99:0f:79:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:8D:10:32:44:18:64:02:2C:A1:95:E5:1C:10:0F:91:58:C4:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b00c3d-2eb3-3b45-81c9-8284591c1a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:05:f6:40:a5:ff:2a:bb:64:89:01:9e:d6:3e:f9:d0:63:db:
         27:a8:63:b9:c9:e3:03:8e:91:f4:e1:29:d7:d0:d2:19:49:bb:
         6a:8b:7e:8d:cb:39:26:07:2b:9c:03:c2:2c:1e:f7:4d:59:9d:
         aa:d1:47:79:e4:66:61:05:c8:34:cd:9d:4c:2e:a2:20:34:cd:
         d3:ef:41:de:b5:27:ff:7c:d4:22:dd:6d:3f:d0:cb:13:99:b4:
         78:6d:79:c7:d8:e8:c6:a5:ac:a8:bf:67:73:e7:ba:10:90:34:
         51:a9:c2:08:64:6b:be:a6:78:6f:9c:2b:ba:8a:94:83:1b:7a:
         99:07:d0:36:9f:01:1a:5e:4a:4d:86:69:05:c8:af:2c:28:ac:
         76:93:a1:f8:53:ae:21:a0:bc:90:80:29:eb:42:f9:58:dd:12:
         f1:86:14:17:5d:5c:cc:d9:7a:53:82:01:e5:b2:59:e8:5b:89:
         44:11:9c:b6:3f:9e:fa:58:3c:9c:76:a9:5b:86:c1:12:80:ff:
         91:9a:7d:bc:11:fd:62:54:f3:c7:9f:93:35:e8:65:01:3a:8f:
         d9:48:e4:39:22:fc:90:06:f8:a8:f3:0f:1a:15:e5:97:d4:ce:
         47:cd:ec:13:d9:6c:50:04:5b:23:dd:8e:69:0b:45:d8:6a:35:
         7e:f1:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:45 2025 by rpki-client