Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa
File:                     ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa (raw, json)
Hash identifier:          TrewgcxDAqxiLaXbkY4qEvLUlUFbviIKwljG71GIS8k=
Subject key identifier:   16:AA:D1:B8:AF:2C:22:68:41:B3:6E:6D:2A:88:9F:48:1E:B6:FD:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64AA47CD2E87C095866020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     396586
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:aa:47:cd:2e:87:c0:95:86:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=9a2272e6-9786-4128-bd40-3f540b6b21bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:34:1b:8a:0d:16:d6:04:68:16:91:f5:ff:da:
                    eb:48:f6:51:93:b8:74:48:64:87:cb:ed:db:cb:cb:
                    1d:86:28:5b:6c:0a:7b:dc:62:3f:d2:69:c2:54:56:
                    c5:b0:35:bf:8c:de:9b:d4:3c:0e:00:00:25:3a:bd:
                    7b:71:36:9b:79:51:3f:d2:a7:5c:b2:9d:bd:91:80:
                    71:a5:82:9c:67:42:5d:38:14:6c:2e:d1:d8:e7:60:
                    c5:56:03:96:c2:bc:a3:3d:c0:07:7b:3d:57:3f:bf:
                    9e:67:49:92:81:9b:79:86:b3:82:dc:35:9e:e8:6b:
                    7b:33:bf:1f:58:ea:77:54:65:4f:94:b8:6b:5e:d9:
                    a0:cd:7f:ea:7a:4e:cb:af:25:cc:a1:c4:3f:e9:07:
                    92:97:bb:ef:11:36:16:f0:42:b8:c6:66:06:dd:ef:
                    3c:f4:24:52:71:d0:a8:eb:7e:f6:08:28:f2:0f:61:
                    ad:1b:31:82:e2:42:b2:b6:ac:6c:68:62:d4:1e:de:
                    f5:73:e6:21:a2:3e:12:e8:42:76:9f:08:25:fe:96:
                    52:45:79:e1:69:a5:c7:38:db:ee:e1:41:1a:cf:4c:
                    1b:d8:3f:b0:99:28:d1:12:ee:23:99:3f:a1:79:38:
                    22:49:7a:f2:b8:25:b8:5e:e1:1d:ec:ee:27:24:7d:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AA:D1:B8:AF:2C:22:68:41:B3:6E:6D:2A:88:9F:48:1E:B6:FD:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed28d95d-ae10-3a90-8ec4-b7298b1212be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:88:c3:db:1b:bd:7d:b6:55:db:30:d3:9a:3c:b5:99:ec:
         8a:bd:74:b9:cf:16:10:7d:87:ae:a7:df:15:59:f2:72:c4:b6:
         30:3e:77:69:ad:93:54:8c:66:2c:b2:ae:30:02:e5:36:a1:44:
         18:85:09:55:00:de:10:5f:ce:c4:fa:13:60:8e:45:31:db:15:
         3b:60:ed:9f:70:b6:61:0c:e6:da:d2:14:ce:bc:58:b6:87:91:
         09:5a:60:66:17:60:bc:7c:f4:52:b3:40:8e:fa:c5:2e:2b:07:
         9c:7b:58:7e:81:5e:ac:d2:f2:de:9b:ff:28:e8:3d:81:b0:9c:
         d1:13:24:ee:c8:83:c6:d4:52:5e:2a:86:19:08:73:bc:5e:e4:
         0a:cf:9b:04:c7:ba:a6:d2:2a:2d:60:c0:1d:e0:97:21:fe:28:
         a3:5a:df:d0:bf:24:a4:b0:76:38:54:5b:74:97:f8:ff:7c:6f:
         56:08:d7:5f:28:db:81:1b:9f:cf:a9:08:ff:e5:78:cb:35:27:
         d6:43:e4:0c:67:c7:9a:12:ae:2d:af:4f:02:8f:7d:88:e7:25:
         f4:39:ef:2b:f2:1d:a2:b6:6e:c5:2c:38:49:1b:ac:60:b4:af:
         43:52:33:f5:9f:2f:05:20:b9:f7:d6:c7:8a:65:32:df:73:19:
         22:ae:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:15:44 2025 by rpki-client