Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa
File:                     aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa (raw, json)
Hash identifier:          Egibl0k72wXOjEU9N/QUX2/CoVzeOodmbTiKKPgKD5U=
Subject key identifier:   93:F3:73:21:B8:4E:AA:77:EA:A4:45:AE:FF:DB:CD:E9:98:A9:B1:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4AF2EF65F74C86B526A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     397197
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:af:2e:f6:5f:74:c8:6b:52:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=4ad818ad-1e7a-427e-850e-629cf88148a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:e5:ea:bd:3d:04:83:70:7f:fa:5d:28:b7:
                    55:28:6b:6c:6b:a5:f8:67:19:25:ed:99:e2:f2:f4:
                    d9:c3:97:d9:25:c5:92:ba:38:0b:c3:8d:51:bc:c2:
                    b1:f3:e6:68:c4:e6:cc:2c:b4:11:ae:81:eb:88:1f:
                    9f:07:96:52:44:43:61:e8:18:04:8a:4c:9e:1b:e1:
                    e1:0e:2c:a9:c6:c8:57:98:1b:82:a7:70:59:c2:e8:
                    4d:bf:3a:4f:a0:72:de:e1:d7:fa:04:eb:66:d4:ef:
                    38:4b:9e:53:b8:19:88:17:8e:cf:16:29:26:a7:bc:
                    db:38:48:bb:87:3a:db:ac:ca:4f:3c:34:92:7f:91:
                    59:8e:79:1e:f9:fc:d0:c2:f6:58:50:5e:12:f5:2b:
                    8a:81:64:cb:f4:f2:c3:4b:f7:ce:12:b1:40:17:4f:
                    ed:00:75:67:48:2a:47:37:1e:32:54:18:44:f1:28:
                    98:ee:09:5f:4f:83:a3:b2:cd:77:ca:f5:ff:52:aa:
                    a1:f3:43:cd:cc:b0:b2:be:00:24:15:e8:8e:d5:80:
                    e5:d8:fd:9f:5a:49:bc:b6:3d:5f:84:f4:53:1c:c0:
                    16:f9:fc:ad:fa:21:76:03:4f:5c:4f:a9:c4:ca:9f:
                    06:1b:f9:db:46:32:97:20:4b:77:0f:35:97:f9:8c:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F3:73:21:B8:4E:AA:77:EA:A4:45:AE:FF:DB:CD:E9:98:A9:B1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aafb3f5c-ccba-3ea1-866c-1c67ab57ba5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:b1:fe:80:71:21:53:70:8c:26:60:83:da:89:31:a8:92:
         34:1e:59:77:20:4b:b0:80:f7:70:58:d5:a5:7f:9a:cc:9b:a9:
         99:89:e4:0c:fb:d8:ae:c2:5d:3a:06:34:46:53:0c:f7:32:11:
         c3:c1:34:db:53:d0:e8:d8:51:4d:37:b7:ec:3b:15:60:99:b0:
         20:26:42:68:f7:47:0b:62:98:27:1c:1a:b9:76:e1:98:2b:5d:
         e3:6e:07:d6:d8:be:06:cb:09:67:1d:14:0a:1e:60:01:f7:fc:
         02:75:97:d9:a7:7f:57:2a:9c:db:1e:82:5f:58:27:e9:a0:7f:
         a6:2c:71:f4:4e:59:7a:d6:0b:fc:0b:2e:38:09:25:35:00:40:
         62:4f:c9:5a:28:eb:cf:c4:c9:58:d1:d6:a4:87:16:c8:12:77:
         92:4b:c5:3f:15:87:e2:f9:dc:7f:0a:75:92:2f:21:30:fc:c4:
         96:0d:b8:68:27:83:13:73:eb:03:9c:f7:53:af:f7:04:9d:2c:
         9a:64:f4:e1:8b:23:80:4f:73:1f:ad:69:0e:10:ab:b6:0b:a4:
         a2:a9:ba:9f:ba:a4:e2:8b:9c:48:6f:99:46:8f:3c:e5:9a:41:
         26:21:b5:2d:d8:d5:fd:d9:f6:de:f2:bb:51:54:c8:73:18:9c:
         3a:8a:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:29:39 2025 by rpki-client