Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa
File:                     a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa (raw, json)
Hash identifier:          K19zXLSzTWNpFRpZCvEp9QzB+eB4n0QChA+8W5E0wW4=
Subject key identifier:   1A:7C:C0:79:B7:38:A4:CE:96:51:95:D5:E0:88:98:31:BC:9D:34:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B0288F74EA4F4B7491200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396602
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:02:88:f7:4e:a4:f4:b7:49:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=e266d598-b173-4140-a003-bb4a808c2d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:f1:01:33:4e:f5:57:f2:ee:3e:1f:48:0a:
                    f2:fe:9a:19:db:0f:40:dd:3b:42:d6:d7:27:70:87:
                    74:bc:28:6d:af:7b:97:cd:e2:aa:8e:32:fb:25:cd:
                    5b:5b:1a:2d:5a:04:4a:d6:39:69:21:5a:f3:20:1b:
                    e4:aa:60:83:d4:0c:f5:3e:1f:e7:68:54:fd:97:98:
                    5e:b5:98:b6:6b:5f:7a:0f:50:db:78:16:93:d4:e0:
                    f7:18:00:e0:75:51:f9:43:22:e7:3e:30:f5:90:b3:
                    09:61:61:46:b3:23:77:67:9f:85:55:c9:a9:db:65:
                    0c:8e:7c:ef:a1:0e:6c:24:26:75:b2:d2:a2:f8:0a:
                    9b:17:a3:7c:83:aa:d5:28:6c:9e:cc:8e:d2:06:1b:
                    2b:dc:19:d1:4b:6b:c0:c2:44:06:11:6b:2a:63:d3:
                    c0:1b:69:49:ab:47:26:76:d9:fb:51:fa:8f:4d:26:
                    67:fe:c4:5e:13:25:04:b3:38:9c:f0:b6:14:c7:15:
                    b9:c8:94:73:0b:51:1d:e8:57:a0:99:7b:1a:f8:c5:
                    53:52:71:ed:47:ce:7c:de:1e:8c:51:82:39:71:d9:
                    69:75:dc:fe:02:1c:80:7d:2a:32:bd:c0:e9:19:20:
                    44:64:9f:b4:e4:cd:7b:fb:d3:94:e7:f4:e6:ec:7c:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7C:C0:79:B7:38:A4:CE:96:51:95:D5:E0:88:98:31:BC:9D:34:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a46b7ec5-82ca-3ef9-bd73-add1d9a102ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:c1:d8:81:f7:b0:9f:09:ac:a1:be:0b:f2:d1:75:08:ba:
         c8:4f:c8:18:29:85:26:a3:90:83:ce:1a:81:d0:58:28:03:62:
         12:b8:cd:4a:f3:aa:44:e9:1a:b8:62:aa:bc:81:ff:81:80:f5:
         ce:c2:20:0b:aa:46:6d:bf:5d:62:ec:34:e5:27:38:8a:90:48:
         aa:92:ce:76:f2:d4:3c:13:0d:22:16:1c:28:00:05:e6:4c:f8:
         fe:83:c4:d4:3c:cb:11:35:2f:95:74:a3:01:c6:c1:59:81:6e:
         f8:a0:b3:bc:fd:5f:4a:ae:5c:bf:0b:07:b9:a6:c3:60:6f:08:
         1f:f6:46:23:30:35:2d:90:2d:36:fb:80:4f:15:ca:ee:31:59:
         20:49:93:d2:3b:19:e9:4b:55:33:10:20:d5:86:0a:49:73:83:
         a5:5a:f7:04:fb:02:33:31:5b:22:e2:52:98:91:a2:1c:86:0e:
         12:7d:a0:61:0d:91:f1:e0:c5:20:b0:37:33:fe:59:aa:18:62:
         b6:16:f9:9a:0d:6d:e2:c8:f3:bd:67:54:27:65:7e:f8:81:ab:
         a3:30:ef:ef:e0:6a:50:41:ff:58:16:ba:67:e0:d8:a7:59:f6:
         35:2e:38:a5:4e:2c:a2:d8:50:db:14:46:98:5a:4a:49:3b:7f:
         c9:5c:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:07:19 2025 by rpki-client