Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67e7b700-e0e2-35f5-9c4a-9374509b9746.roa
File:                     67e7b700-e0e2-35f5-9c4a-9374509b9746.roa (raw, json)
Hash identifier:          BcMDlroDFGKPYr3oPlYpGcZlysVeghANC1QXxkIwxwI=
Subject key identifier:   A6:5C:6C:51:33:D8:1D:E1:95:12:B0:79:D7:1B:59:2F:DD:8C:F9:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB02A075CD83B16227B020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67e7b700-e0e2-35f5-9c4a-9374509b9746.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396583
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:02:a0:75:cd:83:b1:62:27:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3b9d7a72-f7fa-42e1-9d1e-dc44ca6fba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:80:51:44:ab:28:06:8d:cf:7b:ac:aa:d3:
                    57:04:63:5a:91:48:90:bc:0b:81:cb:04:99:47:82:
                    0f:2c:07:9d:11:bc:b6:36:0c:f6:af:78:49:f2:cb:
                    ec:3c:a9:0b:f2:00:db:fd:11:96:a1:27:84:51:52:
                    90:36:07:4a:0a:20:dc:f3:3a:91:9e:46:30:5a:0d:
                    f4:3d:0a:fa:97:5e:dd:f6:04:7f:9e:77:f4:27:21:
                    b0:e6:cb:46:a7:f9:81:9d:aa:78:c1:ec:5e:8d:6d:
                    73:8f:ed:80:a8:0e:0a:1c:3f:df:06:f9:47:bb:0b:
                    e4:b4:bf:26:f8:0f:4b:a5:b0:61:91:c0:3c:2c:0d:
                    3f:f5:37:6a:9b:22:f4:43:dd:be:80:c7:69:50:ca:
                    fc:29:cf:a9:38:a4:39:32:c1:c7:0f:02:2c:7d:10:
                    5f:04:a2:44:b4:f2:12:39:06:45:23:de:e9:58:16:
                    4b:26:57:52:da:cd:96:76:a8:ea:e5:9e:68:1c:f6:
                    ce:40:aa:95:44:8d:8e:75:b4:ab:c6:ee:ff:d5:c5:
                    23:22:1c:b6:74:7d:93:fc:47:52:da:f6:ab:eb:0d:
                    2d:9a:88:35:d0:46:ec:f6:a7:7a:49:c9:7b:aa:d1:
                    ff:77:49:84:ed:c4:bb:f9:c3:a9:24:75:af:63:29:
                    0c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5C:6C:51:33:D8:1D:E1:95:12:B0:79:D7:1B:59:2F:DD:8C:F9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67e7b700-e0e2-35f5-9c4a-9374509b9746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:39:2d:41:a5:45:46:8b:31:a8:b9:b9:b6:aa:89:33:71:
         c0:dd:ba:8b:bf:39:d2:0f:8d:32:ae:78:17:16:8f:e3:fb:85:
         9b:9b:ba:ba:01:e5:03:89:05:eb:57:8d:f0:2c:8d:35:4c:b9:
         ee:1f:ba:a9:65:05:a7:e8:08:f4:2a:5d:f7:d6:6c:89:da:d7:
         33:bd:a1:27:15:bd:d0:bb:93:de:58:e4:9a:8a:a6:93:40:d4:
         02:96:62:88:be:98:63:b2:74:f1:a3:be:d2:44:28:f6:f4:4b:
         39:bb:cd:f6:26:11:2f:49:48:2e:18:c1:ca:5d:0e:3f:20:4a:
         2e:a9:81:f4:0a:29:2d:14:ba:b4:c8:8f:c6:c7:e6:91:89:4f:
         50:05:71:28:bd:09:c3:01:3f:1c:83:ec:a7:86:72:84:78:fc:
         8a:4b:15:d3:f8:53:65:8d:8a:74:c4:57:44:53:47:98:11:2e:
         1e:95:4d:2e:55:f6:7d:9b:d8:89:68:69:23:a5:5e:6d:08:b9:
         3e:45:a7:e3:e8:18:00:88:f0:ee:9a:65:74:66:d4:ee:79:fc:
         15:c4:11:5e:1a:5a:73:59:87:2b:a4:bd:7b:b6:ea:1f:bb:ab:
         b6:d5:27:5a:e6:bc:be:5f:44:23:5b:5b:b9:57:76:b6:d3:5d:
         a2:89:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:52:47 2025 by rpki-client