Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aca1f6f4-e291-3b8f-aa4f-86833900f04b.roa
File:                     aca1f6f4-e291-3b8f-aa4f-86833900f04b.roa (raw, json)
Hash identifier:          LHfC0Ti1qhakyn3/xucva3k4MLnSg/sEU6RzLdOFiGc=
Subject key identifier:   43:D2:37:C0:17:A7:A7:B5:E9:C7:65:BB:E0:65:B3:F5:3E:61:EE:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB23A8292E2DA7699EF5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aca1f6f4-e291-3b8f-aa4f-86833900f04b.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396562
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:23:a8:29:2e:2d:a7:69:9e:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=149a6f30-a685-4b4b-b240-efe904390065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:be:d7:d0:2a:98:3d:21:6a:9f:bc:3e:aa:
                    bf:7a:2e:b4:ab:de:b4:22:74:c5:11:91:43:d5:d1:
                    ae:05:bc:56:92:d1:c2:94:69:34:38:fa:06:e3:c3:
                    4a:9e:ba:ef:26:dd:ba:2d:7f:d5:23:c7:95:36:62:
                    34:09:84:7d:d2:e5:7a:5f:8f:fb:49:af:04:31:6a:
                    ff:77:d7:2a:b8:57:2c:9e:fe:ae:d8:1a:ff:ec:21:
                    73:31:a3:57:13:03:c4:93:ec:1d:a8:64:ae:3e:d2:
                    87:ad:e5:9a:31:e7:ec:99:8a:d5:0d:a6:a4:92:a0:
                    d2:80:28:2a:d2:91:58:a1:b1:67:3c:a1:9d:0c:75:
                    a5:ff:82:55:ab:7a:af:0e:f2:83:15:6a:c8:52:5f:
                    a5:ea:8b:f3:65:8e:9e:1f:08:96:de:2c:50:b9:60:
                    65:ee:f2:0a:62:d5:4c:5d:ad:b6:fa:e1:13:7c:0c:
                    c9:cc:49:30:1d:04:c1:13:ba:18:09:61:7d:64:9c:
                    66:f3:3e:8a:7e:ce:16:d1:80:9d:56:cd:0b:16:be:
                    b5:3e:ce:db:2f:0a:bc:6c:f0:d9:c1:5f:9d:ca:ab:
                    1d:88:78:b1:09:0b:09:3e:b3:a5:c0:33:55:fe:0c:
                    be:9c:58:4a:90:66:0d:18:8c:8d:8d:ce:48:94:2c:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D2:37:C0:17:A7:A7:B5:E9:C7:65:BB:E0:65:B3:F5:3E:61:EE:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aca1f6f4-e291-3b8f-aa4f-86833900f04b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:9a:2a:60:f2:f9:b7:39:bb:35:a6:83:33:66:5a:c7:45:
         07:c4:65:32:92:c4:29:b9:25:59:ba:92:83:39:ec:cc:3c:c7:
         f6:cc:98:37:74:01:f9:f7:7d:54:42:f4:fb:9a:6e:af:ed:79:
         e6:3d:96:03:e1:46:05:b8:bb:bc:24:61:87:c4:eb:d1:c7:c8:
         8d:cd:6e:c8:c2:8b:6b:18:82:89:f7:75:69:49:a1:73:57:3f:
         6e:33:13:44:d8:ea:85:c2:7e:ab:b1:92:9f:c8:2d:23:da:37:
         02:52:40:9e:ef:73:01:d5:06:6b:13:9f:e9:79:36:a8:68:ad:
         1b:01:17:69:18:cc:ba:5f:e2:c8:0b:64:58:74:b9:97:55:21:
         96:43:7c:4a:4c:e7:5f:83:2e:cb:8d:bf:c1:f5:96:a5:c6:0b:
         c2:2f:52:52:2f:4a:42:c5:21:17:4c:6d:32:1e:48:4e:ed:79:
         d3:68:3d:67:df:67:1f:3d:5c:e4:ee:41:8a:c3:d3:a1:82:9d:
         62:99:76:e0:4b:eb:d8:36:b2:27:87:14:10:11:be:03:26:d9:
         82:7f:7b:dd:2e:e6:4b:72:59:03:30:9e:d9:8a:5a:6b:38:0d:
         64:0b:0f:ec:b6:74:86:a2:f6:8a:ae:6c:db:33:89:03:9a:1d:
         b8:75:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:16 2025 by rpki-client