Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dae31bbd-0b52-3fdd-9cd4-00b2c6777b83.roa
File:                     dae31bbd-0b52-3fdd-9cd4-00b2c6777b83.roa (raw, json)
Hash identifier:          V5bxAb5yzyDGFGPs3bfc88aqPBLEhO8Z+sDVYveixBk=
Subject key identifier:   0E:D5:C5:F9:D8:A0:11:1E:C4:45:48:3D:1A:46:53:61:A0:13:45:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC70AD411CFBB9B752800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dae31bbd-0b52-3fdd-9cd4-00b2c6777b83.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     36627
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c7:0a:d4:11:cf:bb:9b:75:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=781120f1-0144-43bf-9dcf-453bf87a83ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:11:05:f6:fb:bb:68:25:59:a8:78:0f:9b:
                    5d:e3:57:39:f5:38:90:f6:7e:53:a3:fe:4d:2e:d3:
                    38:0f:e9:c1:22:29:c4:98:6e:c5:84:a1:db:eb:60:
                    64:68:a1:02:23:ea:d8:2a:87:19:c2:09:2f:4e:e1:
                    5d:65:0e:4a:15:8c:dd:87:25:6b:c3:db:ee:0a:93:
                    55:c4:bf:33:04:f8:36:ed:bc:13:0e:f5:a4:0c:2f:
                    ea:bc:5d:0e:fb:1a:ef:64:12:7a:2f:19:80:bf:b3:
                    c0:e7:87:5b:27:58:db:18:05:91:e5:23:d6:20:50:
                    be:75:3b:35:d8:f6:e9:5b:26:39:ff:53:fd:8e:56:
                    18:42:7e:0e:dc:2a:62:79:55:1d:e6:ff:a2:9e:16:
                    14:7c:8d:d2:89:7b:99:f0:27:80:aa:d9:47:60:f8:
                    fe:02:6e:3a:42:4f:5d:e5:2b:2e:3e:b7:b7:9f:ea:
                    86:67:b3:1d:57:ba:34:1e:2c:96:97:c6:99:ff:51:
                    d3:b4:ec:79:2a:e0:d9:dc:87:1b:85:db:b9:50:84:
                    9a:55:06:ec:84:4e:a9:5b:b1:32:95:19:f8:f8:83:
                    6c:00:71:6a:ff:28:cb:36:5c:81:23:ae:de:e9:a6:
                    06:13:3d:83:fb:b1:73:7c:70:25:3e:15:e9:4c:ff:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:C5:F9:D8:A0:11:1E:C4:45:48:3D:1A:46:53:61:A0:13:45:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dae31bbd-0b52-3fdd-9cd4-00b2c6777b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e8:a0:44:3d:df:e4:2c:84:69:d7:4c:4f:0c:9f:bd:27:7c:
         1b:08:eb:21:ed:f5:95:b1:18:74:2f:95:57:15:9c:c6:40:d8:
         17:67:e2:e5:cf:da:1c:20:e0:9e:32:c7:e5:cb:ec:03:ce:20:
         1b:ff:37:96:c9:77:ae:33:63:4d:c1:ea:ca:91:7a:28:d4:3b:
         c7:c2:0c:73:59:ec:b0:03:7d:6a:9b:65:6b:af:81:a2:17:2b:
         f4:11:de:b8:0e:1f:1a:83:c8:30:7c:21:fb:57:ae:8d:ba:3f:
         fd:ff:59:02:94:f3:e0:3c:3a:42:b0:a3:94:6c:7e:69:b9:2d:
         81:0d:a8:e5:5b:94:76:72:e7:27:41:98:99:80:1c:5a:f1:e8:
         a3:43:49:33:d5:e4:3f:57:52:38:57:12:fc:19:85:06:54:79:
         70:4d:ab:41:84:34:64:71:6c:a1:a7:8d:9d:5a:e2:ca:d8:b8:
         bd:2a:c1:60:9f:c3:1a:50:33:9a:97:e1:30:59:2a:98:97:dc:
         4c:f4:a7:e8:e5:42:4f:de:a2:f6:72:3d:8c:6e:64:d3:0a:92:
         14:da:98:4e:cf:19:d0:fe:9b:f7:54:20:b5:ed:55:24:4e:f9:
         f9:3d:d4:76:64:f7:d2:c6:87:8d:12:47:14:ee:1e:d0:7a:0d:
         89:5c:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:30:38 2025 by rpki-client