Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ffb96-4323-33f3-bfa6-01c461101a1c.roa
File:                     761ffb96-4323-33f3-bfa6-01c461101a1c.roa (raw, json)
Hash identifier:          8n1BwtUFDOZA/0b3+RyqRVj+YZkqFGk3kRgA5eXdcgM=
Subject key identifier:   7E:40:0E:BF:CD:21:D0:8A:CE:BA:AB:D2:08:10:AF:C5:96:49:5A:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64A99D14539773E2A1A880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ffb96-4323-33f3-bfa6-01c461101a1c.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     36632
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a9:9d:14:53:97:73:e2:a1:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=e43bc7ab-1529-4185-ab21-760d49c2ec02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:a6:65:31:01:c5:45:54:5a:27:f7:84:2b:
                    85:5e:c0:ba:21:ff:ce:13:f8:f9:a7:c3:22:c2:24:
                    62:41:e0:c2:0c:b1:c7:e2:e7:35:8d:26:e8:30:e4:
                    95:16:61:b5:63:25:1d:48:94:4c:4a:2e:8a:51:f9:
                    4f:6f:63:03:66:b9:f8:48:8f:ed:f8:16:f6:07:af:
                    6f:55:40:08:37:64:88:94:3a:00:21:80:43:8f:5b:
                    66:f4:12:bd:50:a4:bb:5b:57:ee:72:f8:61:e9:a8:
                    69:61:d7:d1:4d:ab:17:fa:af:67:b1:0c:73:15:bd:
                    e7:00:f3:42:3a:90:d7:66:9c:92:b2:30:5f:a8:14:
                    16:09:ed:d2:5e:0b:e4:55:1e:c3:db:c9:ca:ff:39:
                    99:de:a2:35:1c:d8:c5:55:24:3a:82:ca:51:34:e5:
                    bd:f8:17:29:6f:e2:ae:b9:97:c9:27:e9:f8:08:de:
                    d6:5b:78:be:da:2c:6a:75:6f:c0:b4:b8:57:be:50:
                    6f:ea:5f:71:7e:e0:e8:f2:27:a3:77:7a:a2:80:93:
                    8c:1a:0f:49:d7:12:f2:84:9a:f5:cc:76:80:1a:2e:
                    bc:a6:dc:28:19:e3:69:65:f0:3b:08:69:0f:0d:59:
                    42:1e:e3:f4:1f:dc:4e:10:46:64:7a:1a:cb:04:ff:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:40:0E:BF:CD:21:D0:8A:CE:BA:AB:D2:08:10:AF:C5:96:49:5A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/761ffb96-4323-33f3-bfa6-01c461101a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:28:21:c7:9e:f4:71:75:35:16:63:02:6a:f9:16:fb:34:
         45:d6:90:2c:c6:5f:4f:65:55:d7:e7:13:64:bd:18:46:b8:19:
         4c:db:33:10:3f:20:4a:e7:60:fd:e6:13:1e:7d:6c:8b:fb:e6:
         48:db:a6:60:ed:3a:51:bb:e2:58:87:b2:02:83:44:a7:73:13:
         e5:c0:7d:3e:65:06:39:9d:02:b8:3a:64:75:e2:59:ef:a6:f1:
         25:8d:a8:46:1e:97:84:41:b5:31:25:05:41:1e:7e:3e:f4:5e:
         ee:8c:54:72:a1:ad:e4:c3:c5:32:4b:3d:5e:aa:24:5e:2e:16:
         1d:65:c1:89:97:e5:67:83:23:dc:0b:1d:c6:42:2a:4c:e3:91:
         c2:40:04:ac:aa:95:2e:8f:bc:ad:a6:fc:b5:63:cd:9f:d4:6d:
         3d:15:72:e2:47:4b:8a:36:88:c1:ca:ec:1f:00:f3:aa:bd:d3:
         df:e3:76:65:2a:01:61:a1:b9:95:2e:f0:6d:7f:55:67:fd:d0:
         5d:b6:e6:4d:18:37:e7:35:4b:59:65:ed:7e:2a:25:61:6d:ab:
         8e:2a:67:b6:47:6f:c7:4e:1f:93:f5:a6:32:d6:3d:c2:fb:30:
         7e:28:13:f6:52:df:c9:9d:cb:ed:89:a0:bb:67:4b:19:de:05:
         ce:65:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:10:03 2025 by rpki-client