Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09d31d1d-65fe-3864-8719-c931976d4968.roa
File:                     09d31d1d-65fe-3864-8719-c931976d4968.roa (raw, json)
Hash identifier:          /lov1UUv722rECZ8aY98G0q5vIFZ5uTDfGEG41UA8tA=
Subject key identifier:   E8:28:5B:B8:D4:8E:01:91:E8:32:D2:18:CF:09:C1:05:D1:79:E7:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2C7C319B4291AF942240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09d31d1d-65fe-3864-8719-c931976d4968.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36625
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:2c:7c:31:9b:42:91:af:94:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=d32058a2-76a8-444b-9f79-f7fb166aaa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:cf:53:77:ad:52:43:11:87:e6:65:ad:bb:
                    5e:7d:0a:3c:29:69:b6:1b:3d:eb:a0:ef:d7:b5:2f:
                    95:14:df:ad:c0:e1:45:0e:d1:03:37:82:14:bb:f6:
                    5e:8a:3b:cf:e6:b4:0a:e7:c9:a1:18:45:fc:c9:e6:
                    7e:44:74:c2:e5:f4:bf:f6:cd:f3:6c:fe:09:eb:46:
                    01:16:99:20:88:c7:68:dd:1d:55:ca:6f:47:58:cb:
                    6a:73:32:0c:53:f2:21:7c:a4:92:36:d0:24:85:cd:
                    77:c7:15:01:32:5e:4c:7a:1d:b8:db:8a:d5:ce:c5:
                    e1:78:74:58:e4:d6:a4:03:a6:f4:0e:ab:c5:7f:c9:
                    38:74:f3:99:bd:8d:10:ea:ee:e1:dc:5f:2d:97:c8:
                    95:46:4d:99:4e:69:75:6b:b2:f0:d9:f3:95:49:f2:
                    f4:b8:19:5d:f6:3b:ba:86:f1:ea:cc:44:a7:8f:22:
                    7f:b9:c2:86:34:a1:f6:03:f3:8e:74:85:f3:fd:ec:
                    ba:68:27:99:15:83:4a:16:8b:f0:80:31:c4:2b:2b:
                    c4:1e:17:4e:73:6c:f5:7e:63:3f:ea:9f:b9:1a:32:
                    77:03:85:a6:2d:da:8b:ce:52:c0:34:0d:27:80:ff:
                    7a:25:42:03:19:a2:f6:a9:9f:9e:bf:bc:70:7a:f8:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:5B:B8:D4:8E:01:91:E8:32:D2:18:CF:09:C1:05:D1:79:E7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09d31d1d-65fe-3864-8719-c931976d4968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:c7:93:47:76:d6:94:97:05:5f:61:91:83:44:94:b2:75:
         d3:31:a0:5f:cc:0c:f2:26:2c:50:aa:62:90:17:e0:12:a3:98:
         28:55:49:6d:bd:4f:3b:bc:5b:e9:63:56:5b:ae:0f:93:cc:99:
         83:b5:09:4f:ca:6a:c9:10:46:d5:92:25:bd:8c:de:c4:87:ab:
         d1:df:d6:ba:ba:c7:6c:be:85:d1:96:29:11:14:e4:9e:9c:c2:
         28:ed:d0:c3:15:21:5a:34:62:ee:95:4c:3c:db:32:9b:b6:39:
         93:60:ab:a5:50:0a:15:b4:99:01:bf:90:5d:d4:ff:37:32:f7:
         e5:1d:b2:65:44:d1:79:b4:61:47:39:27:ca:cb:26:dd:ed:91:
         92:ab:69:81:ab:2a:2b:54:c7:e7:53:34:d4:cc:39:04:7c:ce:
         d8:6d:b2:ea:77:99:88:a6:ab:57:13:4e:ef:70:23:b6:e7:c7:
         33:f7:1e:86:62:de:8d:a7:33:36:f5:69:5d:f8:34:e7:55:c6:
         99:4d:7b:1a:33:97:e9:03:a8:2e:b7:e1:e6:c4:0d:41:d2:3d:
         d1:fa:5c:96:1f:83:65:4e:fb:c0:eb:2e:df:c9:ff:9f:de:1b:
         65:dd:77:6d:d9:78:d7:d9:10:5d:6c:16:9e:d5:bd:ac:be:11:
         36:a2:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:26 2025 by rpki-client