Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892fa516-b226-3d99-a338-c4e88f41a7d9.roa
File:                     892fa516-b226-3d99-a338-c4e88f41a7d9.roa (raw, json)
Hash identifier:          4mFh0OjtQJ+zw7Jr+u9EeRwR4QJVU/FjOShl/JzKI8U=
Subject key identifier:   04:21:BB:60:38:AD:73:A1:40:87:35:60:76:6F:EB:3B:F6:A6:31:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A25D0EDE07E8CEF13500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892fa516-b226-3d99-a338-c4e88f41a7d9.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     20362
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a2:5d:0e:de:07:e8:ce:f1:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=ed3e9660-85bb-422b-a2aa-89dfb495184c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:51:77:54:11:49:ed:76:52:08:a8:5c:d1:
                    de:4e:8f:f2:cd:3f:d9:50:73:ca:84:df:10:18:bf:
                    8d:2f:e7:25:ad:f4:f0:e5:14:e6:ea:a3:a0:ad:32:
                    84:33:7b:14:fc:46:e6:da:18:c9:51:1d:1c:dc:78:
                    b2:07:2a:e5:e2:29:53:96:cf:00:51:f1:71:36:61:
                    35:99:1f:68:6f:06:9f:a1:3b:89:51:76:3c:36:1b:
                    61:3c:c6:07:76:fc:c9:f9:d7:ad:ba:d5:6b:7b:de:
                    a0:90:af:86:e7:84:aa:07:0a:f0:ae:b9:19:0c:6a:
                    f0:ec:cc:81:56:ea:e5:c5:6e:1a:f7:06:4d:aa:bc:
                    7d:ec:64:61:ec:c7:48:9c:38:be:ef:b1:30:f0:3f:
                    e9:4c:87:0c:d1:36:c0:cd:95:8b:40:09:02:cd:e6:
                    60:0d:74:7b:0b:8a:64:77:65:da:ce:15:98:e5:77:
                    51:f6:b6:af:8d:56:57:79:12:9f:1e:ea:c2:d3:00:
                    e1:a4:00:f4:f2:39:4d:c4:52:74:26:eb:8d:49:7c:
                    b2:7e:9c:d9:ef:d3:79:1e:21:28:5e:c0:42:51:e2:
                    c7:df:e3:0f:54:23:7b:f7:f5:95:7c:89:4c:d1:cc:
                    f6:b2:72:a3:9a:60:44:b1:f4:d8:c0:d1:4f:5d:08:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:BB:60:38:AD:73:A1:40:87:35:60:76:6F:EB:3B:F6:A6:31:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892fa516-b226-3d99-a338-c4e88f41a7d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:dd:e2:12:fa:08:c7:cf:b1:40:24:b2:d9:5d:04:7d:dc:
         12:a8:74:1c:1b:28:e5:17:72:ae:36:dd:0b:d4:57:6b:ff:df:
         62:c4:d5:dc:bc:2a:be:57:3a:0b:fb:fb:cc:96:8f:3e:eb:ff:
         9b:43:a1:d3:f5:97:71:59:50:21:03:50:ab:8e:42:9c:a1:ed:
         78:05:f9:f2:f5:a1:13:4a:e4:34:38:26:e5:c6:bd:5c:34:30:
         3b:41:d8:62:a5:65:21:f8:89:91:c6:64:7e:22:8c:2f:4e:fe:
         56:9c:fc:67:8e:18:fd:0b:59:ec:94:43:b3:5e:e8:1c:3c:92:
         bb:6f:df:5b:a9:d2:b3:10:12:0e:12:14:a0:e6:0f:73:eb:33:
         8a:5f:b0:38:f7:73:e0:64:3a:c9:c5:bc:56:55:65:72:e6:25:
         27:0f:30:e4:2c:64:89:11:81:b4:c5:ea:dc:91:94:35:b1:2c:
         a2:8a:c4:c7:e3:97:19:3e:97:2a:c3:0b:1c:ad:60:f9:88:c8:
         2f:02:2f:06:a3:b1:e4:5e:1e:f5:f0:ad:b3:7a:90:b2:06:c7:
         11:d4:6e:20:36:1e:e1:6f:5d:ba:bd:38:a6:7a:95:03:0d:46:
         81:34:eb:53:8a:a5:df:09:b2:0e:c6:0b:7c:a3:91:cf:90:bf:
         97:e4:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:37 2025 by rpki-client