Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa
File:                     4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa (raw, json)
Hash identifier:          9BEZtlVhf6WFmXmHZa2ei01k/4Fm18PlSx6nCAK6BWs=
Subject key identifier:   DB:2E:25:70:63:C7:F3:58:0C:92:30:FC:64:2E:04:92:19:D6:AC:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A509B662F828258F4040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     19836
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a5:09:b6:62:f8:28:25:8f:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=af639d09-914f-4e54-839f-4f8b309b84ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:d1:41:fc:b7:77:31:44:4e:41:1f:fe:e7:
                    ce:88:c4:17:28:d2:1f:9b:6e:00:6b:79:68:f6:af:
                    60:54:a6:0d:48:9c:75:ed:0a:73:bd:c7:ca:37:b9:
                    d7:a6:90:2e:56:5e:d3:74:61:82:56:1b:f6:ff:17:
                    27:69:c4:42:45:44:66:78:c7:6d:a8:fe:c8:83:5c:
                    0c:5d:1c:c9:f3:fc:93:4c:96:77:46:d6:70:29:79:
                    d2:f7:de:14:61:94:55:5a:b0:c4:5b:8d:ad:5c:e3:
                    e1:f7:18:b4:ab:13:f5:68:2b:02:a5:c7:06:d0:6a:
                    25:f4:f7:48:82:46:ec:14:80:51:df:df:7d:f8:23:
                    c3:f1:f7:88:96:11:b1:6a:5d:fa:f4:5c:f5:90:de:
                    9b:f7:8a:43:07:49:a2:77:da:ef:cc:63:e7:32:61:
                    69:16:f6:90:ee:24:89:80:45:f3:7e:32:4a:d1:cd:
                    db:8f:a0:d3:5c:72:d7:11:f5:06:f9:69:a9:df:43:
                    4f:59:1a:8c:f5:21:b2:76:5a:b9:58:da:dd:60:80:
                    3a:ec:4d:d4:b4:91:99:0d:f7:6f:d2:16:1f:c7:19:
                    68:8f:61:b2:4f:03:4d:ae:f0:2d:64:6a:40:c8:8e:
                    a7:22:39:51:4d:50:6d:87:6a:58:9d:50:54:a7:ef:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2E:25:70:63:C7:F3:58:0C:92:30:FC:64:2E:04:92:19:D6:AC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:53:22:46:d6:08:96:d2:e6:69:f7:17:37:c3:87:37:10:22:
         78:ee:6d:f4:a3:1e:44:d3:8b:4b:be:0a:1c:59:51:79:a5:33:
         f0:4b:f7:a1:1d:93:cb:1d:28:63:f1:aa:2b:23:90:1b:7c:8b:
         54:7e:7f:dd:f9:ff:68:45:77:c4:c1:3c:43:93:b2:54:1d:23:
         89:7c:0e:28:09:f4:72:ce:7a:5d:b2:14:e7:ec:96:04:95:4f:
         a3:4f:85:44:f5:7f:96:7e:d4:f0:61:d5:60:3a:80:77:a5:11:
         9f:d9:26:8e:9b:ae:af:0c:a6:39:54:70:12:67:66:7a:27:49:
         51:59:b9:6f:fc:b5:5c:b3:47:a3:63:1e:47:40:b2:52:fc:55:
         06:58:ec:05:35:00:4d:91:a3:fe:80:dd:83:69:be:a4:61:1b:
         24:88:ec:53:f5:81:30:30:a6:2a:ff:87:c3:90:69:9b:04:19:
         81:d5:7c:9b:18:ed:55:74:e7:87:ce:9b:d7:92:56:e4:af:0a:
         c6:f9:3b:e7:a4:0f:58:a5:a0:19:75:d0:c9:c8:d7:33:fc:1a:
         c4:40:93:a6:3e:d1:4d:4e:a7:0a:7a:3c:14:10:2f:a3:f2:5d:
         25:77:af:c2:46:59:8b:5c:cd:53:b8:69:e3:50:6b:7c:32:2b:
         df:3b:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:18:35 2025 by rpki-client