Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c75c9659-34ff-33eb-80d0-f050e807d9d5.roa
File:                     c75c9659-34ff-33eb-80d0-f050e807d9d5.roa (raw, json)
Hash identifier:          H/X00S/MJTEq5RX+lwN/9eUoLiLJ2VL4ZoF3FrLHgkE=
Subject key identifier:   5B:40:5A:51:22:08:03:E8:0C:F1:84:66:42:CC:33:A2:58:20:48:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B026A99D76A8B0F64C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c75c9659-34ff-33eb-80d0-f050e807d9d5.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     397208
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:02:6a:99:d7:6a:8b:0f:64:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=3a4994f3-204e-4c16-8ad8-aefdc28fad95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:02:2d:a6:e2:c1:9c:e4:8c:dd:cd:fb:5e:
                    f6:33:0c:c9:02:32:92:cc:73:9f:ab:f7:c9:10:18:
                    17:1c:a9:a6:94:62:dc:76:54:c1:3b:cf:23:43:3d:
                    3e:28:ea:4d:17:31:c1:b4:c6:38:da:f4:51:8b:38:
                    29:ef:05:96:ad:1f:5c:5a:ed:d4:b5:a7:eb:45:c3:
                    50:13:0e:63:fe:49:91:33:7e:a0:fe:84:d4:74:13:
                    3d:3b:68:8b:97:6a:f7:06:b1:f6:5f:7b:40:58:11:
                    f9:06:7c:0a:5c:4a:5c:0e:1e:57:67:47:7f:b2:3a:
                    10:b7:b6:dd:5d:35:17:e9:2e:63:20:98:71:b3:64:
                    1e:5b:f3:d0:1f:40:98:ed:99:2f:ef:96:eb:c3:7e:
                    31:75:ec:d1:50:fd:76:5c:a2:c2:f5:a0:25:e0:1d:
                    08:00:e9:2f:20:8e:30:0c:59:05:89:28:8e:cc:64:
                    ea:da:b4:8c:7b:61:17:2f:3b:6c:47:d7:bc:d1:86:
                    b7:e6:51:49:27:4b:ff:3e:f1:e2:66:17:de:54:18:
                    69:0d:69:2b:30:3d:38:07:d4:38:b7:ec:5f:5d:ff:
                    b3:f2:93:5c:3b:2e:d2:3e:20:fb:32:7b:5d:7b:f4:
                    b2:4e:29:6e:4e:fb:4b:41:bd:5c:69:6d:d8:f1:1b:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:5A:51:22:08:03:E8:0C:F1:84:66:42:CC:33:A2:58:20:48:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c75c9659-34ff-33eb-80d0-f050e807d9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:f8:04:34:ee:89:1b:b1:9b:2c:a8:89:fd:4b:83:41:89:6a:
         8b:91:4a:aa:82:68:8f:9d:39:f8:6e:95:6c:6f:59:b5:b0:68:
         33:a1:c1:d7:19:af:21:d2:f2:4d:c9:d9:a9:72:d9:05:77:52:
         97:89:48:3a:44:06:28:6f:c8:4c:c1:36:6d:40:4c:13:df:9b:
         bc:97:09:bc:4e:a8:50:3b:43:9c:76:fe:3f:ef:48:d3:7f:2e:
         75:5d:1f:fc:fe:24:44:9c:61:91:1a:75:92:de:ec:c5:c0:27:
         de:93:ae:b1:de:ad:f3:e8:e8:68:a1:5b:2b:bf:5a:6b:d5:fa:
         d8:bf:8c:23:e2:41:3d:2c:ac:5f:d3:ee:87:31:4a:96:6a:5a:
         82:4e:b6:46:23:c5:87:9e:c4:86:d2:71:d4:42:86:0b:44:65:
         4d:49:d7:eb:86:9e:9d:9a:93:6a:4d:86:41:9c:4d:44:ca:95:
         cb:04:c7:b0:98:39:c5:a6:b7:15:a0:af:a0:72:a7:78:34:f5:
         fb:f2:a0:65:70:68:4a:f1:41:76:e8:2d:03:24:9d:53:e2:9c:
         53:b7:7b:5a:e3:c6:41:fa:53:23:7e:e6:10:26:9a:1d:cc:e0:
         d2:2d:3f:20:49:46:c0:df:9d:d3:27:54:44:6b:a0:86:00:6e:
         a6:03:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:09:15 2025 by rpki-client