Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa
File:                     b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa (raw, json)
Hash identifier:          90sN31ujMHzvTEynw/dJIwtvn/IDBsneiUxHPwWc/lE=
Subject key identifier:   8A:6E:C8:5B:9D:2E:B9:71:6C:21:EC:B7:44:5B:F0:76:D8:17:2D:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACF2C14425BBEE47A8560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     397207
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cf:2c:14:42:5b:be:e4:7a:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=737245b5-c7d8-44fd-8535-0fc3831a05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:4a:5e:5f:e8:17:ca:5c:42:80:e7:5e:87:
                    c4:f0:5c:cd:95:2f:73:f3:ed:2d:02:3f:2b:aa:b4:
                    22:df:b8:48:e3:b1:bd:de:19:ef:10:19:14:24:c7:
                    95:fe:14:11:cd:8c:55:32:8f:a0:fe:23:d7:08:fe:
                    a9:af:2b:f1:d0:f5:40:c0:cd:5e:10:eb:a8:d3:34:
                    6a:6b:a0:e0:a0:16:36:7b:1a:e6:8e:08:de:e2:2c:
                    18:cb:f1:1e:db:78:d4:82:04:7d:75:b6:cb:cd:13:
                    fc:e1:74:0d:35:74:03:6e:9d:94:8b:12:9b:f8:4e:
                    73:ed:29:d0:c0:7c:fa:f1:10:29:43:65:17:12:9a:
                    92:33:8a:c7:a7:a7:0b:88:3f:ca:a4:2e:20:13:8e:
                    fb:55:d7:e9:d4:53:81:c4:3b:5c:9c:9a:02:7d:a0:
                    56:18:48:7f:6d:d3:43:09:c5:02:fe:b0:cf:4f:3f:
                    a5:6a:e8:7c:2f:d9:15:bf:4e:df:ef:be:ce:eb:1d:
                    5c:2d:a2:36:d0:d3:96:73:92:63:98:8c:c9:be:44:
                    02:d5:c2:0a:8c:b6:b0:f5:a5:d7:85:40:0a:aa:78:
                    8e:97:12:2b:a6:bb:6b:b7:76:74:b9:e6:30:6c:3b:
                    33:03:b1:5f:10:fd:96:66:48:25:fe:01:42:c7:93:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6E:C8:5B:9D:2E:B9:71:6C:21:EC:B7:44:5B:F0:76:D8:17:2D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:73:13:cb:11:7f:9f:9a:39:78:ef:7d:cc:8e:fb:61:30:46:
         a4:a7:02:94:5a:1c:65:47:28:2a:81:c8:f8:4b:18:d8:12:e5:
         d0:23:a9:09:8c:2d:c1:77:a6:24:21:8b:66:57:0a:9e:ad:2a:
         69:d4:ec:e8:1c:ca:6a:c4:f2:71:3d:ee:12:86:9c:7b:69:a5:
         72:16:97:1d:07:a2:93:7b:46:b9:4b:25:68:08:f4:49:8c:20:
         cb:fb:1d:09:28:97:dd:ed:cd:76:dd:0d:46:11:7d:4c:75:1e:
         ab:d1:60:27:24:65:72:9a:2b:34:cb:be:5d:7e:71:59:2e:ee:
         58:1f:fc:65:06:53:af:b4:2e:39:c6:fd:a9:dd:86:5b:74:83:
         45:16:83:dd:2a:a3:65:5a:2f:a5:8e:95:39:c7:05:e0:71:9a:
         92:48:2e:47:cb:1e:b7:48:81:1e:76:43:15:31:3d:b6:46:2e:
         4b:4a:47:c2:ef:ac:69:58:93:41:d4:7a:20:7a:c0:d8:a4:b7:
         7b:ab:27:e0:6a:bb:68:aa:88:6d:ca:a3:97:ef:19:7f:ba:ea:
         1d:a2:95:cb:9d:b6:73:76:47:6a:f9:ab:82:5e:fd:00:64:37:
         11:fc:9d:fa:23:d4:51:17:b8:11:20:51:29:1f:da:67:f8:f5:
         d3:11:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:03 2025 by rpki-client