Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f284758a-c231-3ac4-9b2c-cff1c98f2c05.roa
File:                     f284758a-c231-3ac4-9b2c-cff1c98f2c05.roa (raw, json)
Hash identifier:          S4nCGAgnSQ3WLWU/DhpR5LH3NCSM4Drf5+Am5cXWh0U=
Subject key identifier:   24:9D:D1:30:EE:B7:0C:30:45:02:D8:84:E8:FE:B7:07:AB:34:4F:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268AD043CA99A6B736FE41B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f284758a-c231-3ac4-9b2c-cff1c98f2c05.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     36622
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:d0:43:ca:99:a6:b7:36:fe:41:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=4e4b4473-1f3e-4f8d-b4e4-eda402938c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:8c:7b:cc:f5:9b:a7:7b:05:d9:30:35:1f:
                    b5:c3:9c:d6:38:a8:1b:53:4b:73:d3:fb:cd:e9:f0:
                    81:8f:65:29:27:2e:80:60:5e:46:96:cd:6f:19:54:
                    24:db:10:e8:ef:09:b5:8b:7a:56:93:8a:31:5d:7e:
                    49:e3:da:ff:29:1d:08:32:3c:06:a9:30:ec:81:8c:
                    3d:8d:bd:08:d2:b1:cc:64:dc:61:75:1b:00:22:03:
                    a5:38:e5:f6:d6:a3:8a:a6:1a:bd:7f:f9:33:03:a6:
                    b5:de:d5:18:4f:25:99:f2:80:79:3b:f0:5c:fc:df:
                    de:75:eb:6e:af:b6:0e:e5:89:8c:47:aa:b4:b8:3e:
                    29:17:e8:28:95:3a:20:04:e4:05:d6:82:20:16:e8:
                    e4:fb:2f:0a:ef:58:04:e3:65:d0:50:32:5a:83:e7:
                    b4:e6:6a:27:9a:4e:43:25:7c:72:4b:86:85:82:8d:
                    9f:e9:a4:87:77:1d:df:7e:ff:ca:08:53:30:8d:49:
                    89:1b:2b:a7:83:67:ca:91:b3:92:17:28:d6:c6:38:
                    cf:09:a4:44:78:ec:31:2b:5d:73:58:3d:a0:e3:a5:
                    de:ea:d1:75:e9:7b:e1:6e:92:a1:f1:d8:90:74:0a:
                    c1:06:33:22:d3:7d:af:3b:15:f5:f5:6f:f2:c0:e3:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9D:D1:30:EE:B7:0C:30:45:02:D8:84:E8:FE:B7:07:AB:34:4F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f284758a-c231-3ac4-9b2c-cff1c98f2c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:70:1d:69:c3:51:a9:4e:6d:83:dc:49:0c:43:3d:dd:7b:50:
         f2:df:c1:7c:b1:f3:f6:4b:38:0e:88:3f:62:5a:f3:1d:90:9f:
         ff:06:c6:15:03:29:29:b1:51:d3:06:55:c1:d5:37:20:ba:0a:
         3c:3c:67:8c:39:ba:86:88:8f:64:cd:e0:c9:7b:8f:f5:03:6d:
         b4:89:3d:58:78:49:33:a2:a2:1c:4f:ae:a4:01:c2:c3:dd:5a:
         87:b6:d2:0c:42:d9:31:74:09:1a:69:b7:f9:58:44:d5:12:f9:
         29:95:22:21:3e:74:99:78:79:21:52:fa:b7:02:8c:2a:ed:b6:
         16:de:bf:5f:85:62:c3:76:65:9f:29:d2:bf:cd:73:55:1d:8e:
         bf:58:53:6a:22:17:ce:a7:75:c3:18:a8:b6:cc:48:e7:67:9e:
         24:df:d0:e7:fb:3c:3c:89:b4:1a:1b:3b:a0:ce:84:d0:bd:30:
         4b:de:c1:3c:3b:00:0b:34:64:7b:60:9d:c2:75:3e:99:b0:f4:
         8c:45:0d:90:e1:aa:59:a4:e1:72:ee:62:8a:91:72:58:ff:d6:
         20:a8:4c:a2:c6:fc:2d:e5:e2:86:82:96:14:05:a7:48:94:e8:
         11:2c:b9:01:97:5c:d8:7d:84:93:da:56:51:03:cb:26:57:84:
         9a:c6:ce:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:09:00 2025 by rpki-client