Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a41cad58-7ac8-3f5f-a827-de5161685699.roa
File:                     a41cad58-7ac8-3f5f-a827-de5161685699.roa (raw, json)
Hash identifier:          JTYc4CHIiXWlbFsavODUtSkJlBENgFJIiWNCz65k39U=
Subject key identifier:   98:5D:1B:C2:E8:0B:69:65:C0:B6:2D:8C:06:1A:02:AD:D5:98:56:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64ACDFEC603A7DB969DC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a41cad58-7ac8-3f5f-a827-de5161685699.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     36623
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:ac:df:ec:60:3a:7d:b9:69:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=ee8fe398-aaef-4f7b-a2a0-224342783e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:80:6c:97:27:07:99:cd:0f:08:d5:16:3e:
                    5a:54:22:17:e5:23:97:96:4a:b5:0b:55:fa:86:bc:
                    31:ba:30:58:ba:00:be:03:0d:ea:37:35:df:07:29:
                    6b:11:9c:09:e0:e5:41:81:5f:78:e1:77:c1:d2:5f:
                    7b:8a:02:8d:87:76:67:46:92:30:02:af:98:85:47:
                    90:a0:dc:71:54:db:d4:64:43:a3:e3:97:69:99:27:
                    7f:5e:1d:92:59:f4:16:50:32:b7:63:bd:ac:44:b0:
                    e6:91:ae:26:4b:6d:48:fe:ce:ea:f0:5c:84:8b:d5:
                    04:6d:78:e7:0c:c0:83:7e:e2:80:79:14:9c:de:c4:
                    ba:80:cc:10:4f:22:4c:97:74:55:56:16:31:2f:95:
                    0e:2c:d0:0d:3d:b8:c3:c2:66:41:e4:d8:e9:bb:32:
                    06:42:aa:d7:37:0c:c7:fd:d3:d6:3b:bc:8a:68:89:
                    05:a4:ad:b4:88:77:57:ce:ae:82:96:b2:b9:b6:13:
                    48:c6:aa:cd:00:17:97:b3:3e:e6:94:7c:6d:85:d1:
                    41:64:27:93:b2:6a:f4:8b:d5:30:10:b7:82:ff:16:
                    9a:3a:e2:76:0e:0f:c1:7e:6b:72:2c:7e:05:dc:45:
                    44:8e:1e:c8:da:ab:5a:53:3a:43:9e:4a:5f:24:2d:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:1B:C2:E8:0B:69:65:C0:B6:2D:8C:06:1A:02:AD:D5:98:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a41cad58-7ac8-3f5f-a827-de5161685699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:a0:13:ec:3a:ff:71:9f:b7:c8:56:23:51:c6:e4:33:06:
         d0:14:e3:95:6f:af:7b:36:81:52:74:a9:15:c6:3a:07:9d:fd:
         b1:4f:05:5f:03:e5:70:a4:ca:a7:38:a5:2d:60:1b:39:fe:49:
         96:95:15:b1:9d:04:d8:90:20:b1:06:34:64:61:91:2c:d2:8e:
         ac:fd:46:3f:77:9f:46:5a:7b:53:e5:db:b5:90:4a:a5:17:87:
         66:72:91:4a:73:b0:90:79:2c:7c:a2:0d:d0:e8:67:05:b9:97:
         9b:3c:df:4b:47:cd:04:6c:d6:88:e7:6f:ae:8b:c2:79:f1:fe:
         88:62:c0:18:c4:18:e1:a3:79:83:ea:e6:fb:25:68:b3:62:24:
         39:af:af:90:ac:7a:66:14:7c:e7:fa:be:2d:48:c1:c9:f4:7d:
         bc:8d:e4:e2:35:f4:19:74:96:9d:12:2d:8e:11:25:e9:06:f3:
         ac:06:e1:db:fe:b1:b8:d3:e0:7a:16:a5:fd:27:3a:35:43:27:
         d3:a1:01:a8:95:8c:0a:60:e9:0c:d9:27:57:ef:b1:ba:62:88:
         47:8a:80:8a:73:38:58:3a:78:d3:86:92:15:71:6f:9d:8a:9a:
         07:74:d2:0b:c6:76:31:69:0f:f8:00:e0:96:f9:75:de:c4:1a:
         50:52:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:36 2025 by rpki-client