Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b8f9da-4fe4-3196-a54c-5b842387a534.roa
File:                     57b8f9da-4fe4-3196-a54c-5b842387a534.roa (raw, json)
Hash identifier:          c8y7BVVLpLt0VRQlscvfkqLM+Ir0+7/yVBTq9JlTHzM=
Subject key identifier:   37:21:42:22:42:A5:7E:46:AF:C6:A7:E8:02:97:6D:C6:16:AB:8B:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FD2A64F154270BFD2BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b8f9da-4fe4-3196-a54c-5b842387a534.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396591
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fd:2a:64:f1:54:27:0b:fd:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=b5fec9b1-c71f-4ce3-96b3-a0d7f75a315c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:f5:b1:df:44:3e:f9:b3:ac:7b:48:3f:31:
                    11:ff:3b:fe:63:01:37:0a:50:fa:2a:50:55:75:c9:
                    da:25:53:7d:84:6a:c0:90:b7:d3:4e:a9:d6:0f:bc:
                    18:de:50:63:e8:a4:4c:ef:81:f6:7a:a0:4a:df:a1:
                    d6:69:04:6f:a8:b2:5b:51:a0:f1:7e:f1:29:ee:e7:
                    a3:0f:e3:e2:a6:4f:ae:6f:b9:b8:54:03:30:75:01:
                    d3:71:66:d3:fb:2c:04:66:f9:14:ba:56:13:72:76:
                    98:6b:77:e2:8e:4f:5f:2d:b5:03:36:68:5a:c3:0e:
                    14:3b:3f:b9:03:d1:9f:df:7b:a5:e9:0e:8a:b7:03:
                    80:31:7f:0a:bd:5e:91:14:e2:80:90:0f:d1:36:1c:
                    a8:04:f4:7f:bf:3c:89:27:b4:60:b9:31:ab:7e:3a:
                    a0:66:54:6c:ea:1f:b7:71:5e:3e:ed:f7:f7:30:b7:
                    1f:96:6a:a4:96:05:dd:f6:dd:a1:7b:74:45:ce:20:
                    fc:04:a9:ea:c5:0c:41:9b:73:5b:19:8e:e5:63:3a:
                    80:ee:a7:f6:0d:63:08:ca:75:e8:51:5b:52:6b:3a:
                    5a:17:2c:96:a0:75:3e:07:6b:f1:0f:35:20:35:18:
                    9a:1a:b1:f2:cf:dd:0e:6a:19:3c:a6:34:31:23:a7:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:21:42:22:42:A5:7E:46:AF:C6:A7:E8:02:97:6D:C6:16:AB:8B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b8f9da-4fe4-3196-a54c-5b842387a534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:cc:32:54:38:fa:ed:1d:19:b2:1b:fe:22:6b:52:d0:09:
         1e:bb:df:e1:2c:5a:cb:1c:36:70:dc:81:82:1b:88:c6:38:c9:
         80:fb:f4:ef:30:66:ba:0a:d3:fd:47:85:be:10:60:4f:00:01:
         81:2b:c4:2e:d0:db:43:94:34:1e:1b:51:4c:e0:15:95:c1:35:
         35:f5:9f:29:e0:4d:35:70:06:f4:90:a8:c7:7e:41:29:73:f3:
         99:cf:90:a8:b7:2f:58:e4:1d:8e:a9:4f:69:39:69:15:fa:44:
         6b:82:8e:6a:6a:69:04:23:3b:da:ea:ea:ae:e6:03:f6:1c:ab:
         f6:b3:9e:d2:eb:a9:a2:91:d9:74:b4:f6:cf:31:2a:b6:a4:22:
         22:f2:2d:e1:ab:7a:86:18:48:69:de:f0:15:25:24:e7:c8:0c:
         c5:72:1c:ca:22:04:d4:0a:0e:20:4f:19:61:df:1e:2c:80:64:
         16:f3:01:57:26:6b:2c:a7:2f:df:95:40:4a:77:26:4c:c2:36:
         67:b9:34:51:78:23:b7:fe:d2:c9:e3:5e:33:66:34:fe:90:55:
         92:33:d2:e2:46:2c:12:9b:97:0e:f5:72:5e:12:c9:d0:ae:e5:
         b4:b8:66:6f:07:a1:53:74:3c:32:3e:93:cd:30:e5:59:c1:9c:
         cd:af:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:27:53 2025 by rpki-client