Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6952c76f-7cc9-3837-9d50-3dcfff9863f2.roa
File:                     6952c76f-7cc9-3837-9d50-3dcfff9863f2.roa (raw, json)
Hash identifier:          sTSL/SaklDCxvwik5UhpzZueJrewo9dr++O1mi1JCJo=
Subject key identifier:   9D:3F:5B:29:E3:FB:8F:F9:CE:BC:2A:AF:CA:65:2B:6C:14:25:DB:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B019FE2DCCB9E73BC8680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6952c76f-7cc9-3837-9d50-3dcfff9863f2.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396565
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:01:9f:e2:dc:cb:9e:73:bc:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=6ba57683-3af9-49f2-8de4-b73018a75d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:d4:73:c3:dc:32:e8:4d:c6:a8:d4:20:70:
                    b0:78:51:bb:f8:b8:5b:d3:41:d8:87:e3:9d:48:36:
                    ac:94:e3:65:b4:2d:3c:b0:99:69:c1:c9:be:6a:03:
                    bd:9d:3e:a4:17:c7:44:18:3a:14:bb:c1:fb:0d:2c:
                    e0:af:9b:b3:7a:2f:a4:54:40:e4:43:cc:06:3d:7d:
                    6d:63:95:87:9a:47:bb:99:dd:b8:f1:2d:91:ea:cd:
                    56:08:8d:fd:8d:f5:bb:9e:b8:2e:4f:82:da:22:18:
                    08:ae:c1:0f:d1:91:6d:00:3e:f7:17:c8:d3:90:4f:
                    3c:80:bd:12:ec:d4:39:c1:99:57:bd:47:77:e3:10:
                    7f:dd:b0:6f:3d:f6:33:29:06:d8:c7:43:3e:15:57:
                    7c:9b:5e:1c:06:c9:d0:ff:72:b1:18:a6:46:ba:6e:
                    ce:b6:0f:1d:95:0d:0d:d9:e7:5f:17:b9:9d:54:e0:
                    5b:bd:d5:04:66:00:a2:62:a8:73:82:db:ae:04:05:
                    b5:48:dd:a9:1b:df:d8:ef:a2:ea:d4:3b:96:ab:a0:
                    97:4b:49:9f:1f:74:25:46:3b:99:f0:17:6d:39:b5:
                    92:86:7d:85:03:03:99:f5:83:02:d6:6d:d9:89:d0:
                    05:25:4b:6e:ca:6a:eb:56:cc:86:20:d3:6a:29:ae:
                    d8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:5B:29:E3:FB:8F:F9:CE:BC:2A:AF:CA:65:2B:6C:14:25:DB:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6952c76f-7cc9-3837-9d50-3dcfff9863f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a9:34:8a:85:f3:3a:47:c0:a2:dd:9b:74:fa:57:58:b3:9a:
         c2:e5:22:a6:eb:c3:51:bc:69:50:93:e5:c6:82:a7:b0:50:c3:
         fd:e0:18:0a:ab:12:48:9d:f5:b7:20:ca:8c:8f:37:f8:a0:08:
         07:20:1c:75:e4:71:38:49:bd:bc:0f:70:d7:66:8f:51:b8:a5:
         14:d8:05:50:4a:dc:5e:ce:83:f0:f8:7c:3d:6b:30:86:09:1a:
         6a:50:13:ba:87:64:2c:b7:4a:12:b1:b9:2f:26:e5:07:9d:98:
         b2:ea:0a:f9:93:f5:40:f8:a6:c2:3a:2f:76:cb:99:ba:70:d8:
         1e:a8:6b:9c:ad:b2:42:1c:57:26:33:43:52:7a:43:98:61:f3:
         4a:6a:c9:18:db:43:cf:a6:a2:52:65:07:ab:48:48:68:ac:39:
         a4:19:32:72:d0:21:4f:f6:42:85:2f:b2:22:1a:20:40:37:72:
         4a:5c:3b:ef:6a:fc:c5:3b:58:9d:bd:55:a3:54:0d:68:25:86:
         af:97:5a:e2:7f:a5:71:27:a7:42:9c:ff:90:dc:fd:4d:4c:ea:
         2b:8f:65:40:fa:54:39:cf:16:f0:46:72:9f:72:76:03:b5:af:
         da:e8:66:86:35:fc:cf:87:1e:6b:64:ff:d2:c8:51:8d:5b:ee:
         22:1e:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:59:25 2025 by rpki-client