Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
File:                     d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa (raw, json)
Hash identifier:          4mFyxSE5MI4sep6+jQPXaI8aVsYFD5DeYp7qCf6d050=
Subject key identifier:   31:0B:DC:AA:35:0E:6D:65:30:53:0C:08:89:70:AA:F8:F0:BF:A5:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF124FC6B2DE6D9AB3380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     36616
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f1:24:fc:6b:2d:e6:d9:ab:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=b9a28e5e-baee-4fb6-9acf-c285f347c841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:e7:1c:3f:4d:ca:a8:48:8d:b3:6b:0e:4c:
                    79:f8:7d:bc:f2:6e:64:bb:d6:fb:c8:49:d5:b2:69:
                    a8:dd:d4:90:ba:66:2a:90:5b:2a:78:ae:0e:2c:f4:
                    96:52:6e:f3:71:30:78:d3:c1:18:46:4e:60:e0:11:
                    0a:ec:f5:0a:3e:b4:e7:91:4c:96:38:df:59:c4:9e:
                    e1:5e:12:0c:76:d7:97:63:5c:6b:44:c2:c6:ef:1d:
                    21:a5:fb:08:eb:2a:c5:3a:72:cb:15:69:4b:e5:d8:
                    4a:15:f6:aa:19:94:42:b0:7d:01:dd:a6:8b:21:46:
                    3f:f9:f6:e9:23:5d:00:b2:b7:3c:c2:d7:36:95:72:
                    f0:c2:a7:3f:d1:3e:3e:a4:ae:0a:3e:1d:9c:cc:86:
                    8d:f8:59:47:4a:81:15:a3:3b:b0:79:76:59:fd:7c:
                    c0:da:ff:33:db:04:86:46:b4:ac:c6:4a:cc:db:d8:
                    d2:07:10:f9:85:bc:cc:87:48:c8:b9:80:6d:fc:04:
                    90:50:fa:4b:b9:02:2a:33:dc:30:d8:87:f9:32:90:
                    93:99:92:ef:00:33:68:8c:1e:ee:1f:f0:98:e8:9f:
                    be:ea:dc:e4:7f:58:15:67:51:1c:6c:34:fd:a1:99:
                    0a:e0:02:06:22:4c:5d:43:2c:fd:bb:c1:64:35:e7:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0B:DC:AA:35:0E:6D:65:30:53:0C:08:89:70:AA:F8:F0:BF:A5:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d000a7c3-ff9f-3094-85f9-7302a72b96c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:c3:ee:c6:ea:f0:d1:5d:72:3d:4e:05:d4:a4:97:b7:0a:
         06:0c:4b:49:99:03:bd:ef:f0:75:17:18:0c:37:ac:56:f9:fa:
         eb:94:fa:a4:4f:9a:4a:6a:9a:bc:15:89:c1:c9:1a:d4:6d:07:
         6e:5e:6f:68:9f:63:33:2f:ab:95:00:e2:c7:8c:7a:e1:3e:b6:
         c2:30:b4:c9:fb:6c:e3:cd:92:0f:c8:ef:86:dc:a2:c4:38:62:
         29:20:b9:1e:87:c0:be:d2:f0:9c:20:12:98:7a:69:0c:89:95:
         fe:44:bb:b7:50:86:d5:6e:a2:19:fd:f5:f8:5b:2b:0e:a5:7c:
         98:ef:b2:84:69:fe:2f:16:0e:f4:4f:6c:fd:89:52:34:a8:c6:
         03:9c:c3:86:12:7a:0f:81:67:1c:fb:e9:a3:56:fb:a3:88:74:
         48:49:bf:71:d2:09:9f:e8:29:b2:2a:ae:c9:cd:bc:5f:32:06:
         6c:be:ab:27:ec:4a:9a:f2:8a:cf:38:79:04:1a:24:4b:ac:8a:
         19:46:e2:da:ca:fa:d4:56:96:9d:5d:ed:dc:bf:3c:3c:17:bd:
         7b:e8:df:a2:bd:ac:4c:24:a5:69:26:40:68:70:19:e4:ea:8e:
         50:7b:9a:97:73:df:3c:a2:6d:52:85:8c:8c:bb:e9:c3:3e:e3:
         1c:3c:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:46:27 2025 by rpki-client