Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4f9f5d3-fe8a-3c7d-8603-7dcec8862165.roa
File:                     a4f9f5d3-fe8a-3c7d-8603-7dcec8862165.roa (raw, json)
Hash identifier:          VsXq/Yuj/9tgwQrozRYJ/svFWdH9B5GMV2hviTAlkIg=
Subject key identifier:   43:34:EA:9B:57:7C:D4:68:99:8B:7C:6E:EF:C0:74:D3:84:24:80:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC5F0F3B57804E24BF800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4f9f5d3-fe8a-3c7d-8603-7dcec8862165.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396827
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c5:f0:f3:b5:78:04:e2:4b:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=928fc3ef-d1a8-494e-b6a8-074d7a1bb5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:65:1f:9b:04:cb:c4:83:0b:68:27:91:ad:24:
                    0e:d8:d6:9f:1a:2c:83:7c:2b:63:c5:7f:ec:eb:19:
                    24:f4:47:ba:ef:12:1d:23:df:6d:77:50:db:aa:6e:
                    06:15:b7:12:6f:72:2d:bb:ee:1b:58:79:cd:a5:d7:
                    a4:1e:a6:59:43:65:bc:84:51:ea:23:af:f3:bb:23:
                    18:3b:95:5c:05:37:4b:de:e0:d1:53:90:68:2c:94:
                    32:7a:ae:d0:4b:61:7e:33:90:87:e0:d5:59:cb:29:
                    f4:b9:bc:1b:c7:c8:56:74:be:d2:13:61:06:25:41:
                    7b:c8:ba:05:f3:71:83:64:1b:bc:52:14:e6:d8:04:
                    78:29:d8:a3:7f:2e:c3:7a:2b:c2:1e:93:66:d4:87:
                    5c:dd:10:93:d8:57:c6:2e:ff:f0:fe:6a:8d:26:3e:
                    54:0b:f8:51:3b:b7:45:04:09:f3:80:2a:b1:5d:06:
                    35:5d:92:4e:af:26:d2:86:bf:c9:5c:71:22:fc:38:
                    6f:eb:66:8f:26:de:c8:e6:fa:74:d6:ad:b2:46:02:
                    65:05:f6:31:70:2b:3b:8a:54:6c:3a:35:33:00:e8:
                    b0:70:be:e5:63:88:e5:cb:d6:6e:72:e3:a5:f9:ec:
                    44:8d:77:54:6b:f4:53:0e:1a:17:78:ba:b1:e3:67:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:34:EA:9B:57:7C:D4:68:99:8B:7C:6E:EF:C0:74:D3:84:24:80:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4f9f5d3-fe8a-3c7d-8603-7dcec8862165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:66:54:b7:7a:f2:76:8c:9e:ea:0a:02:fa:f4:b3:4a:e1:
         e8:33:93:b2:b1:72:9e:17:8a:81:71:1d:9d:cb:d0:58:87:20:
         2d:7a:4b:64:70:c0:55:81:eb:90:4c:06:b0:6a:b3:5a:27:ea:
         ee:65:f6:b0:64:7d:a1:23:e0:73:4b:79:59:2c:4b:31:2e:b3:
         2a:46:86:d2:5f:00:81:09:b6:a3:0a:d9:ff:d4:c3:ee:df:be:
         d4:b3:98:70:20:3f:ff:08:82:e3:c6:ed:84:b1:15:b2:0d:06:
         66:ff:a5:97:76:88:8a:98:91:23:d0:cc:f9:9d:53:88:25:eb:
         f7:85:2d:70:d2:00:6b:d3:90:28:2f:f8:7e:4d:41:7d:c8:29:
         6b:b0:b8:ee:c7:19:6d:fe:e9:d2:48:ec:02:af:f7:e2:78:5b:
         af:4e:27:29:a6:83:8b:19:b5:45:57:27:01:d3:a3:e3:27:28:
         df:0c:d7:bb:41:73:d9:3a:c9:6e:84:75:5e:f1:66:1c:14:5f:
         5e:fa:80:51:56:27:49:e3:21:49:dc:10:07:3c:9d:8e:29:31:
         62:f5:ed:3b:e5:69:20:03:3e:07:79:f4:0c:26:ec:bf:af:46:
         55:a6:57:d9:a1:eb:6a:dd:05:39:7e:2a:66:51:56:60:fe:21:
         f2:a2:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:50:30 2025 by rpki-client