Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa
File:                     631fa7a2-42d1-3539-b100-e323154e899a.roa (raw, json)
Hash identifier:          paEyifHIPuaF4MqY86Tsug2Iu+QE8r7vzm5MIOdKQwA=
Subject key identifier:   25:0E:BB:FC:C9:48:77:E0:B3:98:BF:6E:ED:24:6E:9B:2E:F8:C4:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FBFD83DC800AE2824F34
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396546
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fb:fd:83:dc:80:0a:e2:82:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=93d20939-c6ee-46ca-a6fa-a68cf24e9b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:e5:49:9b:3e:63:b3:0a:6d:91:43:51:75:
                    1c:7e:17:8c:3f:e7:74:8a:5d:33:85:bd:f3:48:3f:
                    3d:c1:9f:92:ff:79:50:09:4c:04:a9:21:97:bd:ed:
                    3c:63:60:48:f2:e4:e2:35:51:69:6b:76:9d:6b:72:
                    4f:af:2a:b2:c3:42:64:5b:9b:19:39:2b:68:a6:a3:
                    8a:be:dd:94:fc:e2:03:57:7a:91:3e:43:97:54:55:
                    a2:50:57:65:8e:53:4e:28:29:ba:62:b1:d1:1d:2e:
                    01:8d:02:f7:34:cb:22:c2:5d:0f:d6:1b:c1:98:1a:
                    d8:86:4b:d1:c6:16:bf:c0:3c:e3:0f:20:79:92:df:
                    5f:b9:53:d0:a1:31:1b:b2:7f:fb:8a:a7:ce:28:2e:
                    49:49:be:86:fe:76:59:1d:14:5f:60:3d:63:e7:cf:
                    61:f8:9d:df:c8:d2:06:b6:99:df:1c:6c:b0:ba:e2:
                    b1:3c:c6:ce:81:11:61:91:74:10:74:d2:43:b2:97:
                    7d:0c:12:09:c9:0f:5a:b0:56:20:f1:5c:ba:2c:a2:
                    46:ba:fd:00:c0:8e:70:e3:e9:c0:2b:a4:21:dc:db:
                    82:d8:fd:76:f7:37:f7:1e:2d:5a:9d:26:9f:cc:45:
                    db:4f:ac:64:a0:61:18:f3:b1:e0:6b:de:c2:73:e1:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:BB:FC:C9:48:77:E0:B3:98:BF:6E:ED:24:6E:9B:2E:F8:C4:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/631fa7a2-42d1-3539-b100-e323154e899a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:80:3d:b4:36:0d:c0:b2:25:d2:30:31:eb:9c:0d:11:72:77:
         de:81:a3:b1:c4:c6:26:40:d0:97:7b:ea:ea:b6:d7:b5:0a:71:
         be:d8:33:16:9a:67:dd:28:f8:6b:40:51:f8:b1:32:6e:14:b4:
         c2:50:fe:c8:9f:9a:55:39:6a:e4:b8:84:1f:48:c3:c3:cf:ae:
         2f:ac:5f:21:dd:19:c4:24:8a:a2:d5:bb:e8:63:87:63:f6:f6:
         33:b8:00:e0:e6:6c:97:64:9b:76:8c:7d:9b:81:7f:96:65:54:
         e4:c8:0e:d2:cf:9d:39:9d:a2:de:94:83:26:bc:f7:86:c7:ef:
         66:a9:19:9e:0a:21:a0:a5:ab:48:ac:c5:18:e8:c3:1b:ea:a1:
         14:c2:60:e9:09:e3:0e:bd:c3:6f:63:fe:e0:91:64:93:71:ce:
         d2:84:9a:30:9d:ed:e2:b6:bb:13:58:de:07:e4:c1:a4:52:c9:
         08:e5:63:a3:8c:43:4f:01:34:64:64:89:b6:48:25:5c:98:d5:
         43:af:b3:9d:2e:c2:87:b2:2f:f3:25:d6:72:48:18:b8:b1:1b:
         b4:44:5b:23:62:66:38:56:e0:b9:dd:40:dc:23:cf:fc:83:39:
         c4:34:79:47:f8:87:88:a8:88:01:4c:9e:c4:1d:2b:a2:b0:45:
         bf:c6:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:48:45 2025 by rpki-client