Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa
File:                     dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa (raw, json)
Hash identifier:          V4PcXn1aHhQO4fesSmYN/NQxn+NZyngmpo3r78FolYQ=
Subject key identifier:   58:EB:E9:DD:7F:CE:B1:CB:8B:6B:E6:98:5B:E4:11:09:2E:FA:19:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331AFEBE190E9D3949335780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     36628
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fe:be:19:0e:9d:39:49:33:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=1e6845f8-6ad4-4b25-a7af-9314495983ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:dc:60:c9:f7:82:11:2e:27:9d:d2:91:0a:
                    97:69:73:af:ea:14:ce:1b:f2:fa:a6:ec:b4:cc:f2:
                    41:97:07:67:3b:ec:37:62:70:ba:a7:b0:98:e9:03:
                    b2:e2:4c:1e:63:18:6a:6d:b8:19:72:dd:45:0b:f8:
                    10:3f:cc:d5:43:43:d5:1b:17:2a:47:78:ee:0d:a8:
                    89:85:4e:77:c5:37:af:f2:70:37:cd:82:50:cf:00:
                    39:c6:2a:00:e0:db:af:4a:88:a1:b2:77:71:b3:79:
                    81:47:68:42:22:0e:e2:16:52:1b:1d:d6:18:0f:db:
                    1f:20:1c:c4:b6:d0:0a:14:b3:63:d5:58:e1:c6:74:
                    ac:85:9a:49:16:38:95:58:74:d3:7c:0f:1c:62:ca:
                    46:c2:2c:74:7e:92:50:c3:ae:a0:ef:c5:74:11:39:
                    37:12:54:f4:cf:8a:5f:44:94:90:ea:03:48:88:ff:
                    ac:2e:69:a2:d6:a4:40:db:10:8e:32:69:73:41:ee:
                    4d:4c:9f:8e:41:e3:53:e7:7b:45:1c:73:04:a4:e2:
                    4d:b7:ff:f2:b8:4f:90:01:fa:ff:54:7c:bb:8a:9d:
                    80:55:c9:75:49:ff:f7:fc:26:92:d2:e5:37:2b:f8:
                    9d:2b:83:18:02:f6:68:32:a8:de:81:f4:cd:d0:c1:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:E9:DD:7F:CE:B1:CB:8B:6B:E6:98:5B:E4:11:09:2E:FA:19:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd80b5a5-896e-38a1-900e-b5ac1eb69ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:3f:74:41:52:28:9a:41:4d:f7:2d:79:32:38:48:5e:60:
         01:36:17:4a:8c:3c:35:be:19:b0:fb:dd:5a:72:08:bd:c6:ef:
         22:07:bb:42:d0:37:b6:89:48:06:06:94:bc:72:bc:73:48:10:
         25:22:4a:37:42:f8:93:87:ee:33:b4:a3:48:0f:98:45:98:ac:
         7e:fe:ec:7e:23:bc:0b:9a:99:8a:9a:bd:2f:80:e6:c7:67:88:
         47:76:1e:dd:f1:1f:ef:16:f6:ec:42:b0:7f:92:80:42:c3:18:
         d4:c2:a7:05:b7:4c:61:30:06:97:8c:e8:91:b2:10:e0:01:6e:
         07:6d:f3:35:2e:b7:0c:a4:a0:47:8a:cb:7d:6a:5f:4b:8c:f0:
         88:ab:1b:f0:43:66:e1:af:fd:73:24:25:c6:f6:7d:c2:53:59:
         69:70:f0:e1:3b:19:e9:c9:06:33:fa:f5:fc:7e:c7:b5:34:ac:
         15:52:12:23:16:b0:e2:e0:73:d3:39:3a:6c:7e:a2:09:a5:d7:
         50:2f:c1:1c:f1:40:dc:8a:02:e6:b4:70:6a:55:73:df:1e:0d:
         28:da:41:b3:9e:d2:6c:66:6b:38:de:2e:45:89:d7:97:8b:77:
         14:67:5e:34:56:b0:72:d5:c6:72:c2:0d:00:c3:a5:ff:b3:24:
         ce:f6:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:43:14 2025 by rpki-client