Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a696d802-ad81-37ce-9af6-08deadcff494.roa
File:                     a696d802-ad81-37ce-9af6-08deadcff494.roa (raw, json)
Hash identifier:          if6Vf5AtwrCFMGudYtesIsg4STrP5uj9fJYV+9RmSHg=
Subject key identifier:   7B:63:58:85:B3:39:70:EB:6C:87:99:2C:52:08:A0:79:B8:91:55:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC1717A4C6AAC8BD7B4D8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a696d802-ad81-37ce-9af6-08deadcff494.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     21313
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c1:71:7a:4c:6a:ac:8b:d7:b4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=c3f1a143-1301-4af0-b114-349ac936a12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:cc:e9:32:b3:33:21:08:71:45:07:22:0a:
                    60:05:97:07:52:cc:46:1f:01:8e:8a:4c:e0:fa:85:
                    d9:2e:11:5d:52:96:9c:f8:6a:74:95:9e:a2:ad:e4:
                    fc:e4:f3:c1:b1:87:2a:4c:1e:a9:7d:ff:c5:db:d0:
                    56:ba:42:aa:e3:35:e1:24:76:42:03:30:af:4e:28:
                    91:b3:d4:8d:c3:93:ec:26:b1:e4:2b:5d:4a:4e:4c:
                    8b:f6:46:35:b5:f7:f6:33:03:5c:b4:12:89:13:14:
                    c3:65:06:7f:07:c0:c5:89:7e:d1:a8:65:6b:0d:31:
                    4d:f5:fb:f3:0f:54:03:19:ba:ca:fd:ef:02:c4:6f:
                    cc:06:d4:3c:c3:2b:5a:63:51:14:44:7e:2b:fd:8a:
                    26:71:61:5a:41:ef:e6:f1:2b:53:8d:c0:ae:5d:97:
                    c9:0f:d8:ff:a9:d0:b8:1e:88:9a:30:68:a0:d1:fe:
                    e1:03:d3:ac:7f:65:5c:04:14:e1:da:d0:69:ed:e8:
                    02:33:e3:fd:6b:b9:f4:2b:89:4f:17:2a:cc:0f:95:
                    a2:83:9d:5b:c1:dd:18:f1:52:d7:81:12:94:55:8d:
                    72:ed:96:80:83:26:3d:2f:60:3b:5e:9d:9d:12:63:
                    05:83:f1:cc:fc:ff:f5:0e:c4:df:0c:90:d6:b5:60:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:63:58:85:B3:39:70:EB:6C:87:99:2C:52:08:A0:79:B8:91:55:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a696d802-ad81-37ce-9af6-08deadcff494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:ff:bb:5a:88:d0:96:2b:1d:d6:5a:02:ef:84:b4:c6:44:
         6d:74:da:f6:b9:f0:01:05:05:08:cb:5a:26:88:95:f8:02:b8:
         0b:3a:f3:8a:f0:52:42:cb:64:f7:7f:83:75:85:e8:f8:51:fa:
         49:fa:1f:52:e1:0c:fd:49:64:de:0a:1a:ce:64:8b:01:4b:ef:
         4d:b2:b2:fc:ad:9f:41:3d:74:4b:e5:06:d6:c6:6d:25:04:bb:
         0b:7e:38:ac:4f:43:84:9c:73:8d:21:ea:5a:36:ae:80:ad:b1:
         da:2b:c5:c8:81:f8:4e:2d:90:72:43:09:d6:45:7a:bb:ea:08:
         bd:ec:72:c0:2a:06:0b:0b:ae:18:0b:ad:69:36:67:65:95:31:
         46:64:3e:fd:9b:63:34:b8:1f:32:a7:32:35:e6:62:fd:0d:d2:
         56:84:33:f0:19:85:94:a8:0a:cd:f9:af:3f:3b:34:6d:c0:22:
         8e:c8:c2:1a:72:40:97:f5:4d:a2:ad:71:f8:2a:bb:66:fc:ce:
         2a:3e:c8:a9:f5:23:bf:d3:ee:3c:99:bd:7d:5a:13:be:f5:91:
         c1:9b:2a:66:ea:67:59:e7:1b:bc:2d:33:c0:43:00:b9:e8:80:
         f4:58:ec:90:38:ce:f4:77:b3:e1:f9:75:c1:28:d4:da:18:cb:
         8b:51:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:52:35 2025 by rpki-client