Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9bbc96-0355-3370-82c9-2f49c5f506c6.roa
File:                     4d9bbc96-0355-3370-82c9-2f49c5f506c6.roa (raw, json)
Hash identifier:          PpL/FbCZKpQNDFxm35uIfPhArzTfwBrBoo+3N6PI9qU=
Subject key identifier:   48:2C:49:49:8F:0E:B9:00:C7:26:FD:35:80:2C:3C:BA:28:99:C8:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC5E3EC6B718B9B966100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9bbc96-0355-3370-82c9-2f49c5f506c6.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396568
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c5:e3:ec:6b:71:8b:9b:96:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=1eccabcf-9e5c-4326-b3cc-df1655ec9273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:e9:43:9e:31:43:a5:36:f5:51:a6:1e:9b:
                    ab:28:fd:ef:d4:2f:93:40:5c:5c:05:4e:ff:97:c6:
                    71:35:a1:41:6c:a4:ab:c6:4f:3d:3e:a1:a9:1d:fa:
                    46:43:b3:c6:b7:bd:97:7a:85:6b:47:48:44:13:89:
                    b8:c0:2a:b3:2b:6d:b2:d1:07:7a:de:bc:17:b0:5b:
                    c1:56:16:f6:d7:03:96:90:f7:f7:60:bf:4d:25:9d:
                    11:ee:6e:5c:ec:7e:13:b8:13:87:19:9d:c5:17:36:
                    bb:92:40:f0:29:35:af:12:f6:0c:65:a4:50:16:f7:
                    0e:3b:a1:4a:98:08:a0:0f:45:a0:2d:7b:0a:22:fd:
                    da:e5:57:24:77:31:f7:e3:22:1b:b1:bc:89:b8:26:
                    f6:bb:b9:66:d5:09:2a:bb:90:1d:c0:04:d4:11:a4:
                    61:13:48:2e:af:f0:4f:ee:85:1e:54:80:ae:66:97:
                    f2:29:69:6c:52:fa:40:7a:75:82:93:e7:0d:7c:1f:
                    19:9b:f3:b6:44:1e:3e:ee:99:dc:ed:be:9a:56:01:
                    c5:97:f2:19:11:ea:62:cd:dd:3b:bc:5a:df:46:04:
                    48:ea:7c:37:f6:55:77:13:0d:ec:c7:dc:0e:a6:70:
                    aa:3c:06:24:f7:82:49:74:b6:8e:c6:7c:6a:4c:a0:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:49:49:8F:0E:B9:00:C7:26:FD:35:80:2C:3C:BA:28:99:C8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d9bbc96-0355-3370-82c9-2f49c5f506c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:8b:38:80:fe:c5:c4:bc:aa:f2:7e:a5:67:16:69:3b:93:
         48:ff:d7:d5:14:02:1e:c4:6b:a4:fa:42:91:3e:9d:d3:2b:96:
         b3:66:cd:95:d6:07:a9:ba:2f:dc:e7:34:24:63:89:aa:6a:c2:
         2f:45:36:47:5c:89:1c:ad:f5:65:4b:02:0a:2b:10:c8:3a:38:
         82:8e:5e:f6:8e:5e:51:55:e6:5e:8c:e8:7e:27:09:10:93:da:
         f9:a6:70:4c:45:65:5d:c1:3a:ac:df:46:66:f9:0a:8a:73:6a:
         eb:3c:1b:01:08:ce:86:18:20:d3:d5:c1:c8:cb:07:e5:19:bf:
         2c:a9:87:d8:da:95:73:d9:cf:50:cb:85:d2:50:a9:3f:9f:ae:
         2a:4f:99:63:3d:4d:aa:9e:2a:30:14:a8:a8:4e:a8:ee:ac:09:
         36:90:59:a2:d2:5f:e2:ee:5c:53:06:10:14:01:ea:1b:b4:31:
         0a:08:05:5f:92:18:f2:0b:a4:ce:31:cc:e7:ae:5a:ed:dc:64:
         07:74:cb:2f:79:03:f7:c0:c0:b1:5d:bf:b1:a3:ec:e0:97:cf:
         9f:74:8c:a0:0b:e6:bd:46:0c:c0:ae:12:9e:92:d7:6c:42:ac:
         5d:0a:67:37:ae:93:c7:77:49:91:a4:1c:6e:aa:5d:85:65:3f:
         7e:b6:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:57:05 2025 by rpki-client