Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7418125-1fe2-3539-af78-da6bdf5ed59e.roa
File:                     d7418125-1fe2-3539-af78-da6bdf5ed59e.roa (raw, json)
Hash identifier:          sFcNP6hy1Ve3hdnH/iJuIs+gATovzNGWM3XO0GUudvc=
Subject key identifier:   A5:98:7B:E0:58:82:0E:19:BD:CF:B8:78:F1:88:0B:8A:49:BB:61:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC52FEFCF9CB7DB0CD000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7418125-1fe2-3539-af78-da6bdf5ed59e.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396570
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c5:2f:ef:cf:9c:b7:db:0c:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=ca157a07-e4b2-4016-8d65-22b38b028ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:31:d7:15:e6:be:0a:0c:c6:df:43:1e:1d:be:
                    53:77:b6:de:ac:e6:b8:6a:3f:42:d2:5b:72:26:9a:
                    2c:55:b6:21:5b:b1:ac:2f:98:2a:dc:72:c0:80:25:
                    1b:2c:46:5a:e5:bc:f3:84:cf:97:fd:6f:0e:59:c2:
                    ff:57:26:5a:d8:6c:5e:7f:19:90:2e:87:5a:a4:02:
                    6b:3c:7d:37:61:c7:c9:5f:a3:e3:b5:c2:c3:d3:75:
                    82:db:aa:0a:63:ca:c2:d9:fe:27:21:d5:61:2f:61:
                    60:1e:8a:9b:0b:a4:c6:ae:26:74:ce:bc:e6:4b:82:
                    90:55:80:d9:af:32:e5:1e:6a:c7:7b:37:77:97:64:
                    b5:3f:df:cc:18:08:d0:82:85:8a:a4:ab:c4:45:ae:
                    93:15:ff:64:8a:f4:6e:fd:1f:07:3c:e2:50:b4:78:
                    33:58:16:a8:c5:20:1a:f8:da:87:28:7e:61:65:58:
                    0e:73:3d:b9:b2:15:34:a0:0d:48:dc:8f:03:cd:cc:
                    ef:51:ea:3b:e0:1a:5d:67:8c:87:42:db:8c:a0:49:
                    f2:96:c6:e8:92:27:b3:b2:f6:30:76:73:f9:25:4d:
                    0c:2b:23:29:a6:0a:fb:dd:34:64:3e:b1:1c:31:4f:
                    12:e7:4c:7e:82:25:60:56:97:bf:26:ea:fd:3b:55:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:7B:E0:58:82:0E:19:BD:CF:B8:78:F1:88:0B:8A:49:BB:61:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7418125-1fe2-3539-af78-da6bdf5ed59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:7d:ce:85:f8:c9:e6:cc:7e:4f:52:e1:c6:9a:34:6f:6f:
         bb:70:9b:5a:78:49:66:60:a2:5a:20:46:ba:7d:75:5a:56:ab:
         ac:7b:bc:03:9a:40:47:14:dc:19:2e:83:4d:d2:76:51:fc:57:
         b2:94:99:6a:94:7e:04:22:14:b3:31:08:7e:49:98:16:cb:75:
         bb:34:15:81:61:df:e7:02:4e:b2:94:98:1e:ea:51:60:71:6c:
         69:82:be:d1:3b:17:28:6d:79:ac:d4:2c:03:b5:ec:8c:99:9a:
         4a:a7:f0:d6:23:8d:82:0b:d8:07:9b:6f:e6:2e:b9:43:49:1f:
         93:ac:9e:69:7a:38:ce:ed:90:9c:46:f2:e8:3c:59:8e:fd:bc:
         b8:0f:1c:76:8c:c4:fb:15:b2:ad:88:a2:5f:c6:ed:70:c9:75:
         d7:0f:58:e6:fb:3f:69:9e:e2:b9:de:c1:d1:22:c5:94:ed:d4:
         7c:34:c0:cc:d8:3b:f3:fe:70:5e:9e:65:18:5a:24:fb:30:a8:
         c4:24:06:df:6e:49:1c:76:6b:9a:a4:02:db:c8:71:d0:c6:a9:
         8e:58:df:f1:93:c9:51:b7:87:68:33:58:99:c3:c1:f8:8d:1e:
         19:6c:43:e9:15:ae:cd:63:38:e0:a5:be:9e:f6:3b:12:b6:d2:
         c8:a4:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:36 2025 by rpki-client