Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa
File:                     4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa (raw, json)
Hash identifier:          HfMpkQgt4d6dfblKXQDWUa6Gr/HAqEScm1FihTlO9KY=
Subject key identifier:   DF:61:B3:BB:B0:8B:C8:15:0D:0C:18:CF:01:38:8C:0C:0E:B0:A5:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC505ADEF3A2BAC187400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     25485
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c5:05:ad:ef:3a:2b:ac:18:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=73fd8c3e-5423-4a90-8dd1-04d92dee3bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:9c:0b:b6:7f:f8:b9:46:e7:00:d1:e1:59:
                    47:bc:69:67:28:db:16:12:a3:4a:bf:35:1c:1b:17:
                    6b:c0:4b:b6:f4:9f:20:bf:7c:7c:4a:58:45:2b:0d:
                    93:0e:ab:96:a9:f1:31:fc:c6:7e:96:4d:7c:89:ec:
                    b9:85:f0:4f:bb:ee:a1:66:18:8d:8a:0e:3c:80:3d:
                    20:da:a4:4a:f6:2d:cb:6d:13:f7:fb:ee:f0:ba:f4:
                    54:84:7f:34:2d:0e:15:51:70:80:7e:1e:82:d9:1e:
                    8a:15:a4:f5:ba:9c:50:f5:d2:99:1f:43:8f:0d:17:
                    36:2b:19:73:3e:e8:f0:73:1c:3c:60:2f:61:7a:cf:
                    46:46:03:c2:08:8f:07:3a:25:72:7b:fb:67:85:7b:
                    bf:48:7c:01:5c:27:07:1c:4c:ca:55:25:f9:54:75:
                    6f:03:db:2e:f6:18:3c:2e:5a:9f:a9:16:17:45:bc:
                    b1:ba:a3:58:fa:73:0c:c5:48:55:ab:29:fb:35:95:
                    52:c9:7b:74:70:84:4c:67:32:b4:85:fa:f2:35:39:
                    14:df:69:9b:af:15:44:58:24:e9:7a:92:6e:e1:7c:
                    bf:a6:37:e3:f0:57:4a:ef:16:db:8a:ea:d8:62:11:
                    6d:e9:39:59:b9:d4:36:61:86:79:b0:36:fc:25:e0:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:B3:BB:B0:8B:C8:15:0D:0C:18:CF:01:38:8C:0C:0E:B0:A5:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da9ee42-575d-3a8c-8b3f-4ca28c0d8e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b7:70:18:a2:6f:44:c8:7f:c3:6b:e4:4e:a6:3d:43:0a:18:
         3f:75:7b:58:83:ea:7c:9e:dc:31:d7:05:d3:b5:89:32:98:1c:
         ef:22:f4:50:53:16:39:ae:00:5d:94:c8:36:ef:28:61:c8:23:
         f2:f4:b5:64:07:fc:de:8f:51:4d:6d:a3:dc:60:3d:09:e5:d3:
         84:11:87:99:60:a2:00:02:fb:37:14:53:5e:1e:66:78:2c:4d:
         2a:0e:fd:73:ee:be:9d:a0:6b:d2:5c:f0:f7:32:22:19:9c:ad:
         cc:0e:8d:2e:f2:af:c7:41:d1:40:c4:7c:07:70:48:e8:90:fa:
         ba:77:eb:8e:6e:be:31:4a:42:ca:7f:a7:bb:1c:34:41:55:a9:
         3a:a3:39:3a:b4:f8:54:64:ca:92:27:42:bf:05:30:35:70:03:
         34:44:d0:55:7e:28:a9:4a:48:1e:f9:28:cf:ad:86:ee:30:c6:
         d0:6d:57:28:ce:93:34:e9:84:43:2b:64:84:38:e0:4e:dd:a6:
         a9:24:32:ae:89:e0:a4:1b:68:b0:e9:db:23:90:44:63:ba:f2:
         3b:75:4b:d7:3a:19:ff:30:f6:12:07:9a:10:44:29:2b:dc:cf:
         b4:e9:8d:e8:96:ef:ab:29:10:f2:31:48:20:01:1c:84:5a:66:
         5e:9b:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:51 2025 by rpki-client