Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77ca999-5ca1-3c4a-9dae-ee9738a78b68.roa
File:                     a77ca999-5ca1-3c4a-9dae-ee9738a78b68.roa (raw, json)
Hash identifier:          64YQ6Ohgby865pHUklM3PSX81Wbb0rtPezaKCduPwOQ=
Subject key identifier:   B0:DC:57:50:46:C1:A8:1D:26:2D:D2:44:3A:05:CD:AB:EF:CC:D1:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A9D6A87BA042410B2D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77ca999-5ca1-3c4a-9dae-ee9738a78b68.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     397208
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a9:d6:a8:7b:a0:42:41:0b:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=55b14b01-fc6a-4422-9d3e-293b552bc66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:e2:3a:bb:53:49:3f:79:60:d8:e0:22:19:
                    b7:76:df:3a:5b:aa:e7:17:ef:62:3a:e3:07:ad:e4:
                    aa:d6:de:e3:a2:20:3a:42:11:33:3d:7c:9f:bb:7e:
                    9a:74:1a:4e:cd:6d:25:71:6a:70:5e:74:4f:e5:80:
                    4b:d1:b9:26:70:b6:2d:1d:3d:ac:a2:cd:b2:dc:1f:
                    73:db:ee:6b:5d:67:67:db:6b:7f:f6:be:50:41:b1:
                    97:dd:45:d4:3c:93:c9:96:63:09:3f:5a:2d:57:6e:
                    31:15:06:0c:77:89:ef:80:5b:92:28:e1:92:97:e5:
                    a1:db:83:3b:91:9e:a4:88:ad:16:2f:fe:bf:96:ae:
                    fb:b8:55:21:06:40:63:34:4f:e4:17:4f:64:20:71:
                    d5:a2:73:27:74:19:bd:b0:00:ee:30:57:f7:01:f7:
                    5b:77:e3:d4:df:40:1d:bc:cd:cb:31:1c:bb:9f:4f:
                    e2:5a:a7:55:e6:5f:93:50:f1:ec:e0:b9:80:0f:4b:
                    d2:bc:f0:b1:e1:be:a9:40:56:dc:84:61:b2:e4:a6:
                    06:41:10:ea:43:dd:78:da:6d:c2:9d:01:f2:b3:36:
                    f9:cf:5b:f7:9f:51:f7:3f:06:e8:c9:53:90:b7:c3:
                    72:69:87:a9:78:34:1c:87:71:3a:05:d2:0e:b5:87:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:57:50:46:C1:A8:1D:26:2D:D2:44:3A:05:CD:AB:EF:CC:D1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77ca999-5ca1-3c4a-9dae-ee9738a78b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d7:55:f6:27:ff:be:65:d5:fb:43:aa:b7:b7:b8:6e:b0:9c:
         25:7b:66:0f:c8:0d:0e:d0:42:9f:95:8c:5a:85:44:5f:25:df:
         fa:9e:4a:89:88:01:8a:0f:f5:5f:41:7b:3d:f9:74:9c:fc:3c:
         44:f9:35:3e:bf:69:c7:12:92:0b:62:83:b0:37:92:6e:86:e8:
         18:13:eb:07:4c:59:b1:69:4d:5f:ab:38:89:e0:38:9f:b7:24:
         8e:f2:d7:92:c2:cb:5c:66:cd:b6:b9:eb:47:2e:cd:3e:0f:d2:
         33:27:a2:fb:02:cb:c5:ee:22:f6:ff:31:b1:6e:e7:47:cc:88:
         78:4c:2c:aa:1a:e5:c5:af:92:30:ad:f7:10:c4:0f:fe:28:e2:
         93:49:23:c1:34:a4:bf:36:eb:54:70:0c:bf:2b:4f:0c:eb:aa:
         76:83:af:c0:87:3c:06:8f:d7:2f:32:52:b1:aa:ee:a0:74:61:
         e5:44:c5:11:1e:51:12:9d:8c:9f:e7:14:41:ea:d3:f1:fb:56:
         5c:78:ef:5c:43:d8:83:f9:53:63:25:38:c5:dd:50:11:61:30:
         72:74:21:dd:71:c2:7f:c6:67:49:bb:14:af:6c:8c:5a:f2:e1:
         68:e8:5d:23:99:60:fb:af:9c:70:76:5c:69:cf:ac:e5:68:db:
         74:35:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:26 2025 by rpki-client