Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f590808-4cd2-3800-bf9d-8ed96ccc3db7.roa
File:                     7f590808-4cd2-3800-bf9d-8ed96ccc3db7.roa (raw, json)
Hash identifier:          j8gyEDjKFT94QaSO6BA2dc4cMehKOKoc3TEtL/J5fek=
Subject key identifier:   DC:A2:9A:08:25:65:6E:D9:6E:66:69:37:89:E2:31:41:AD:50:6A:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACE08F6881B453DF87200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f590808-4cd2-3800-bf9d-8ed96ccc3db7.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     397208
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:ce:08:f6:88:1b:45:3d:f8:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=f64528e5-c66b-4560-8b8d-13b860f4a6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:29:9a:75:94:d8:8b:65:a3:4e:63:35:67:38:
                    25:1b:93:77:b1:66:a4:e0:89:44:fb:86:7a:3b:82:
                    d1:ed:7c:32:5c:e4:15:93:36:ee:f3:b9:55:8a:1f:
                    b6:50:28:a7:8e:f5:fb:6f:a4:03:54:78:7c:a9:27:
                    7b:2a:eb:65:ca:6d:39:38:62:e3:24:ee:fa:a4:1d:
                    17:8e:ff:8b:b7:38:12:eb:03:c1:da:a0:3a:cf:1e:
                    03:6a:e4:f7:7d:4f:c2:fb:a7:cb:fc:26:35:ff:ae:
                    f2:1c:7c:9b:e7:ed:d7:3a:8d:db:1e:89:67:cf:15:
                    74:95:9c:9f:3d:29:c4:ca:02:6f:4c:9a:2d:1c:85:
                    19:c5:fc:7b:88:b4:43:83:a2:7f:c5:0a:59:90:15:
                    00:f3:c5:b6:08:b7:c0:94:af:a4:1f:bb:9c:78:57:
                    58:55:11:a2:c6:30:3d:e6:32:f3:e9:f0:62:6c:19:
                    74:86:bb:42:87:c9:e1:bc:14:1b:40:ae:e6:91:f7:
                    97:6f:83:ed:e0:eb:cf:3f:2d:b1:22:01:fc:83:86:
                    ce:64:57:29:cf:fe:22:c3:00:e9:f8:b7:86:eb:50:
                    b4:65:b7:e3:0c:13:35:21:ad:8e:d4:2c:29:f2:3f:
                    52:8a:b0:4f:49:44:34:7d:ee:b0:41:9d:32:23:21:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A2:9A:08:25:65:6E:D9:6E:66:69:37:89:E2:31:41:AD:50:6A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f590808-4cd2-3800-bf9d-8ed96ccc3db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:96:f4:7f:73:73:23:e3:88:bf:d1:f8:2a:44:f7:94:88:
         77:88:1b:bd:09:20:20:9b:a9:d8:c0:f6:20:34:75:17:89:68:
         ef:8d:e0:39:e3:a3:90:8d:c3:66:9c:a8:f3:f8:ce:67:79:95:
         99:a4:70:b1:cd:f2:51:5c:06:d1:6b:fd:16:97:5e:52:b0:c3:
         bf:3f:ca:16:76:c1:51:36:0d:93:55:72:77:c5:2d:04:83:85:
         f8:5f:71:e4:97:7a:20:de:c8:48:18:62:ca:91:0a:e2:93:d9:
         8f:7e:5d:f1:d5:19:64:58:28:27:10:14:f4:d5:aa:b4:12:8d:
         bd:eb:5c:a9:30:0e:26:af:64:42:c8:92:d3:77:ed:af:f8:cc:
         e2:7e:4a:b6:4d:de:31:dc:b0:59:79:ae:fb:21:13:ac:ce:57:
         1a:cc:80:0f:f6:27:ed:2e:1d:08:fd:37:36:37:ea:e7:9e:7d:
         d8:c4:2e:37:5e:13:d3:03:59:9d:12:61:f3:84:9f:ba:18:55:
         8a:62:36:2b:70:68:0f:7d:11:de:6b:7b:1f:4d:fd:27:c3:e1:
         ca:bf:2e:3f:71:e7:b8:fc:94:f2:5a:e5:4e:33:73:43:10:8d:
         71:f9:94:0b:6d:be:a1:dd:fe:2b:9f:e6:2a:80:96:84:39:ba:
         f2:50:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:08:46 2025 by rpki-client