Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead4ec97-c132-35c9-ba12-42cf82751b11.roa
File:                     ead4ec97-c132-35c9-ba12-42cf82751b11.roa (raw, json)
Hash identifier:          0NUHDMxPi0SYkTZQu1TdT8es14lmtZuz6CxC9UZShic=
Subject key identifier:   FA:91:35:43:C6:45:98:F2:5B:05:96:DF:5B:F2:BC:2C:87:F9:C2:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1E2AC216D822AF8AEEBD2EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead4ec97-c132-35c9-ba12-42cf82751b11.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     396590
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c2:16:d8:22:af:8a:ee:bd:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=7bafc25e-91a6-4a12-8be8-37f1b1ca3002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:50:2f:bf:0f:e6:f5:e7:a0:95:d5:34:78:9a:
                    07:1c:ca:8a:3c:01:72:1a:dd:11:5c:cf:c3:88:9b:
                    a3:5f:7f:4c:39:e3:a9:21:2f:75:1b:83:28:b4:ca:
                    07:84:9a:1a:56:b7:cd:e5:03:ea:84:22:06:e4:b7:
                    bd:48:a1:7d:21:2c:6a:0e:07:10:b9:d6:44:2a:95:
                    32:5c:4b:ab:fe:79:b2:66:b4:34:09:5c:f2:2b:c1:
                    1d:a9:10:dc:0e:1d:91:6a:00:7c:a4:71:5e:25:e5:
                    43:e3:3a:ad:c6:0b:0e:80:c7:f4:c8:df:30:16:8b:
                    6d:6f:63:cf:e3:57:2f:9e:9d:f1:7c:ac:a1:a8:e1:
                    32:db:2e:84:fb:58:1a:01:68:00:ad:c1:aa:7a:0c:
                    bb:02:dd:3e:76:a7:ff:dc:37:31:55:ec:f5:ca:5c:
                    45:9c:78:30:4d:84:a4:86:ed:0a:79:ae:53:1a:5f:
                    be:ac:87:4f:c5:d7:e0:5d:ca:00:29:d0:ba:cb:9d:
                    42:6d:2e:eb:76:98:fb:e7:1b:51:ec:ef:ef:c1:3e:
                    04:18:74:ac:6c:5f:69:6c:59:9d:f8:d0:fa:1e:eb:
                    a8:8a:69:bf:bb:96:ce:76:af:2d:5d:0b:56:b2:22:
                    55:43:e9:df:51:20:1c:0b:b2:61:ae:45:d6:eb:36:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:91:35:43:C6:45:98:F2:5B:05:96:DF:5B:F2:BC:2C:87:F9:C2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead4ec97-c132-35c9-ba12-42cf82751b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7f:af:9f:79:9f:ec:39:3f:d8:0d:91:63:ad:4a:f1:c4:01:
         ce:a9:4e:1d:dc:39:e6:10:52:18:6e:80:c1:bc:d5:e1:ae:5d:
         31:79:2d:1a:ca:fc:97:91:94:04:f0:d4:50:e3:36:bb:ee:02:
         fd:a6:1d:86:95:15:06:51:11:a3:2f:2b:6c:94:79:0c:87:b8:
         47:44:98:19:ed:58:8a:40:12:82:c5:29:eb:72:0f:f9:c8:2c:
         f9:61:ad:77:a9:94:42:0a:0f:e1:70:b2:0c:14:75:2a:28:f4:
         d2:70:d2:0c:26:2c:c6:bc:9b:49:c7:4f:02:94:84:7c:d1:aa:
         87:ec:8e:65:67:f4:93:6e:e3:d5:eb:79:d1:0a:d5:07:e7:84:
         98:8f:e2:32:25:8c:1a:00:63:ac:65:12:4f:fc:a8:9b:da:92:
         8c:ca:75:7e:6f:b8:8d:e0:a3:90:6a:fd:77:50:67:7c:ba:c2:
         1a:87:c1:94:ae:0e:e0:51:66:3c:3a:b2:9e:b4:cf:d1:3d:77:
         a1:9a:32:f8:af:be:99:11:15:34:ec:98:2f:79:5c:cd:67:62:
         c7:ae:1c:44:84:b5:3d:0e:e0:be:44:69:fb:19:b2:25:64:cd:
         7c:ac:09:ca:57:a7:06:d3:da:66:40:58:67:49:3f:5d:bb:7f:
         96:6c:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:17:55 2025 by rpki-client