Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa
File:                     ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa (raw, json)
Hash identifier:          W3VMdYerHkCh0qaLsYSZmt9A74cBMYy4P5zKzi79AVk=
Subject key identifier:   61:56:FB:6D:D9:8E:E3:D4:4E:79:7F:8A:4F:4A:A1:08:15:1B:0C:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0035EE9A9C83EF486080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396594
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:00:35:ee:9a:9c:83:ef:48:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7ee02d8d-0e42-479a-97c0-b5961938e363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:19:fb:f0:de:20:f2:48:d3:73:34:3c:e5:
                    5a:15:5c:fd:72:fb:95:cb:cb:b9:dc:ce:94:52:e6:
                    c0:f5:26:e1:40:86:f7:d5:3a:c8:6f:0d:c0:21:22:
                    e7:37:c4:40:68:a0:cb:c9:32:ca:ee:a2:81:f5:1c:
                    e9:ee:6b:9b:b4:d7:45:5e:aa:9d:79:40:4a:8c:61:
                    28:5b:07:ef:cc:d8:46:35:3a:93:34:8f:05:a7:26:
                    70:8e:55:73:0d:24:5c:4f:85:74:7a:fe:21:e2:70:
                    09:0e:a8:2b:da:e4:4e:5a:b2:fd:f9:96:3c:07:73:
                    74:cb:18:f0:69:dd:57:a5:a1:93:37:92:24:5a:d5:
                    2c:d2:7c:bc:69:ac:1e:3a:04:84:d2:c8:ba:2a:70:
                    e6:cb:a7:71:05:a9:de:dc:9e:21:f9:6b:4c:8e:c6:
                    a4:cd:4b:5f:f2:f4:32:b2:6f:a5:2c:1d:4a:e3:64:
                    e6:7d:93:93:df:f2:a3:30:d1:9a:d9:74:8b:cf:c1:
                    ad:2a:4a:7c:0c:06:a6:c5:9c:e6:f1:7a:62:a1:ba:
                    1a:97:84:4e:b9:8e:93:35:74:7b:98:3c:14:24:e0:
                    1f:0d:82:97:60:f9:17:6a:ba:d3:d1:8d:45:0c:9c:
                    dc:8a:d1:4c:93:3e:3b:2b:23:30:80:e7:a3:36:98:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:FB:6D:D9:8E:E3:D4:4E:79:7F:8A:4F:4A:A1:08:15:1B:0C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:83:ff:2b:4f:06:53:e7:af:1a:22:cb:7e:c9:e6:71:55:
         06:c2:b5:25:f6:fa:23:67:93:d0:f7:8c:20:67:7e:2c:b3:ff:
         57:4e:b5:cb:2c:f7:48:20:63:d6:90:6a:7b:69:c3:7f:c3:36:
         5b:d8:d3:57:c4:2d:75:5c:8b:02:58:7e:96:c4:f6:b5:d3:8f:
         c8:64:c0:92:b3:a6:4f:1a:c2:d4:a3:3e:c4:5f:75:fe:e3:5d:
         35:5c:cb:d4:8d:b2:75:01:20:59:56:71:17:37:ca:9f:c0:04:
         51:2c:de:2a:c3:d0:e8:70:e8:0c:40:8e:bd:8b:9b:d8:fb:6f:
         d5:6c:c5:86:ba:e8:67:d6:2d:92:31:18:1f:af:d4:2d:2d:5e:
         e3:f3:20:04:4a:3d:5a:62:af:6a:cc:51:98:fc:a6:ae:68:5f:
         1d:e6:66:00:de:9c:80:af:64:08:0f:07:f4:f8:ec:c9:22:4f:
         88:4a:a5:fe:6d:29:20:27:91:18:a2:30:3c:82:1e:2a:d5:56:
         2c:43:2b:38:64:da:d8:c2:e2:af:b8:c6:56:00:35:9c:0e:00:
         d7:de:e8:6c:69:be:10:df:fb:c3:69:54:8a:5b:14:13:6c:02:
         47:ef:8a:fd:a7:16:50:c0:96:ab:c6:ec:66:c9:c5:85:8b:cd:
         a7:e3:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:03:27 2025 by rpki-client