Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
File:                     4f517faa-b251-3707-a347-8a25c9ff0965.roa (raw, json)
Hash identifier:          MsELOeJ7NbJTsERgFK8NEvo8CrDXtu7nRFn5puexwRw=
Subject key identifier:   B4:DF:18:6D:E5:89:A0:7A:56:75:0E:20:C4:AF:CA:4B:88:F9:4B:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A3214650683C74E5B670
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     36631
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a3:21:46:50:68:3c:74:e5:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=39a397c0-0341-4c53-92cc-42a4477097b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:7c:86:19:56:f9:8e:c2:3e:e5:3c:f1:8d:
                    0e:54:7d:96:44:f0:56:a0:ac:c2:7c:f9:80:40:bc:
                    49:2f:11:78:ac:48:fe:b3:92:8c:37:b7:40:cf:1f:
                    d0:f4:13:d9:cd:95:95:21:bc:f5:d8:4d:a5:d2:40:
                    90:6c:bf:33:73:2d:09:fd:bc:90:cf:a9:02:91:70:
                    94:09:ed:48:66:42:da:bc:9d:e6:cf:9f:2d:44:61:
                    16:c7:50:21:1c:1f:e1:87:07:e4:e3:90:9c:3f:11:
                    b6:26:9f:d1:51:ed:22:93:45:96:a6:13:fa:58:2e:
                    28:aa:dd:47:10:b8:0f:b1:4f:16:8a:63:8f:aa:cb:
                    75:69:92:dc:c3:a5:d7:8d:22:57:d6:70:42:79:a9:
                    15:61:4b:55:0e:2d:2d:7f:5b:8e:e0:e7:34:f1:75:
                    1c:72:e4:98:29:3a:c5:49:d5:57:05:2d:7a:31:9f:
                    d4:82:b4:9a:56:b0:85:c2:55:0c:a9:aa:81:8a:52:
                    d6:9f:8f:ff:4e:98:48:b6:ee:f7:75:50:ba:0c:82:
                    10:55:78:3e:ef:a8:1c:8e:09:9a:06:0c:bf:e8:f1:
                    26:e3:85:84:65:b1:c7:83:18:a8:df:2f:a4:70:54:
                    9f:b3:e7:e8:5b:8f:aa:ba:0d:b2:56:2f:bf:b4:19:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:18:6D:E5:89:A0:7A:56:75:0E:20:C4:AF:CA:4B:88:F9:4B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f517faa-b251-3707-a347-8a25c9ff0965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c8:96:94:0e:a5:db:1c:20:9a:0a:04:77:94:da:4b:df:b7:
         32:71:22:ee:8a:32:b9:49:dc:45:70:aa:40:57:0d:7b:72:a0:
         34:b5:78:b2:14:a5:3d:4a:14:ac:38:c9:4f:ca:10:30:13:71:
         fb:7a:63:ee:06:9c:52:d7:40:dc:6a:9f:ce:0e:3a:87:b9:3c:
         76:19:78:fc:3d:41:b7:e6:0d:0b:4d:eb:1d:c7:14:85:19:fe:
         ba:60:8d:23:c2:68:b6:05:20:c6:2d:ef:21:be:02:b2:9b:fd:
         dd:15:e6:30:6e:3b:a0:ef:6e:4f:2e:25:37:e4:87:3c:fb:09:
         69:42:72:83:0a:d3:07:2a:77:ab:a2:c6:25:9d:53:91:62:38:
         0f:68:94:9f:b2:b3:cc:f3:04:60:1a:67:0b:ca:48:3f:d2:f7:
         a2:e9:8b:a3:96:22:be:b5:aa:f7:0d:d0:00:26:a7:16:9b:05:
         12:0d:d3:e5:c2:67:27:22:59:67:41:c9:07:57:ef:fe:63:05:
         d4:82:53:7f:c0:38:2d:b2:81:c0:b6:56:02:da:2e:41:84:bd:
         ff:6a:25:c4:d7:b1:32:34:ba:eb:66:ef:05:64:44:3a:cf:17:
         82:9e:cc:35:5f:20:c7:4b:c5:c7:45:77:5e:ed:c2:74:df:a2:
         08:de:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:57:58 2025 by rpki-client