Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8af00890-f71f-318c-8958-1644feb30d4e.roa
File:                     8af00890-f71f-318c-8958-1644feb30d4e.roa (raw, json)
Hash identifier:          OcT7DO4Ruu9wPxtXwQ0vED3hpwF2RKAG8vwisf/Mghs=
Subject key identifier:   BA:9D:32:6E:86:98:00:82:9F:29:68:48:CF:5D:A4:61:6F:18:9E:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC34E9411F0E1C1767100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8af00890-f71f-318c-8958-1644feb30d4e.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     397211
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c3:4e:94:11:f0:e1:c1:76:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=41c1812b-9ce5-4c55-aa19-1949ea9ebd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:6e:be:58:6e:49:ac:54:1f:00:59:06:af:
                    fd:71:da:02:ac:23:c3:57:ef:18:3d:3a:68:d4:d0:
                    32:63:1a:ff:3e:d0:1f:05:3f:e8:87:28:56:1b:92:
                    67:dd:23:c9:04:2c:52:6e:7f:36:46:22:cd:8e:58:
                    b8:cc:8d:2d:26:ab:61:7c:68:49:a5:9c:f1:d5:94:
                    61:13:83:8c:35:33:65:e3:6b:d9:3e:14:32:35:05:
                    27:73:9b:35:d9:41:7b:d8:49:0f:2f:7b:43:9e:e4:
                    2b:b8:f9:15:ed:75:6d:a5:92:54:6a:62:d9:be:30:
                    50:76:ad:67:f3:d6:cd:7a:1e:cd:f8:eb:3e:13:b6:
                    b0:42:2c:5f:1d:f9:7d:0c:cc:b4:b5:a3:a2:8c:e8:
                    3c:48:16:13:60:fb:d3:0c:6e:55:f8:45:b1:47:9d:
                    ce:63:03:43:3a:b5:09:03:76:50:9e:07:05:04:f0:
                    f8:d7:d7:c6:42:4d:28:17:8b:2b:03:26:96:ca:ff:
                    1b:05:0e:56:25:3a:6e:9c:47:26:6a:8a:03:63:31:
                    92:c8:b5:25:77:50:d5:26:81:51:05:b9:89:f1:e8:
                    90:04:87:be:b6:ae:b0:cf:43:c8:2f:0f:61:46:4c:
                    29:6d:38:cb:c8:f5:34:bb:b5:37:bc:13:d4:d5:17:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:32:6E:86:98:00:82:9F:29:68:48:CF:5D:A4:61:6F:18:9E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8af00890-f71f-318c-8958-1644feb30d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:c3:e6:3c:1a:b0:a4:61:7c:35:9b:8a:de:3f:8d:49:26:
         ac:6c:f5:7a:47:4f:c9:2f:ac:27:83:12:20:49:21:32:b9:ea:
         08:ab:5c:9d:07:7f:86:19:a4:8f:82:80:ed:ce:b8:52:59:42:
         57:03:3f:f5:0d:b9:53:9d:20:76:04:8d:47:e9:41:42:ce:a5:
         95:43:a8:d5:38:ba:f1:11:8e:12:20:8f:28:2a:cf:ce:ee:02:
         35:14:91:1d:75:03:c3:cd:72:9c:c7:8e:85:54:98:35:7a:74:
         5d:df:25:9b:d2:aa:cb:91:2c:9a:b9:2a:0d:6a:7a:78:7b:04:
         6a:b8:7a:2d:cf:67:c8:b7:a2:a4:76:20:ea:bc:66:a2:78:e5:
         00:d7:55:3c:f6:c7:28:b3:3f:d8:4f:76:4c:0d:79:a9:fe:34:
         fd:16:26:9e:58:88:f1:94:7d:fa:66:a4:89:59:2f:72:40:0c:
         a9:ee:06:8f:c5:80:1c:6e:90:b3:2c:11:43:f4:fe:b8:a4:a9:
         b1:1a:8d:91:eb:0c:64:91:5e:c6:3d:b7:04:09:12:f1:19:36:
         0f:71:2b:2a:14:1e:35:d3:11:d7:97:d4:ff:37:73:f9:78:dd:
         ef:45:9b:9e:93:7e:eb:3a:e1:e1:9a:cf:55:ed:8a:47:49:05:
         d7:aa:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:50:05 2025 by rpki-client