Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133dabf4-26f7-34b3-9079-ce185441a624.roa
File:                     133dabf4-26f7-34b3-9079-ce185441a624.roa (raw, json)
Hash identifier:          hJ59zwoyS9JjIbYM+HfbJ1it63W1FAeO7wNU4WoT3sY=
Subject key identifier:   A0:4B:35:15:4B:7A:79:60:74:53:B3:5D:53:14:27:14:BA:44:79:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744E5EA3AEF24F73CBD380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133dabf4-26f7-34b3-9079-ce185441a624.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396543
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4e:5e:a3:ae:f2:4f:73:cb:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=0f78e6b2-a642-4177-a251-ce163d4c6060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:3d:34:3a:0a:80:11:e3:35:14:04:42:22:
                    29:50:f6:e8:2b:ea:69:91:9f:71:e6:88:9d:0e:17:
                    d0:eb:af:b9:fe:d7:c8:24:19:e7:9a:50:9a:41:6e:
                    e3:bf:cf:9b:53:65:37:87:e4:b0:1a:8b:94:d1:87:
                    10:e5:1a:10:51:9c:f6:ed:59:57:49:c5:ea:fa:4d:
                    2c:28:78:82:bb:d1:86:65:4d:8f:8e:ea:18:08:90:
                    be:82:cd:bd:75:99:ad:da:66:94:87:a2:0d:2e:d0:
                    32:da:f0:26:39:0c:27:d9:a1:0b:ac:b1:29:d4:53:
                    5d:1d:e0:85:e8:f9:fb:cc:07:2a:99:d3:6c:8d:53:
                    8c:e8:0e:08:28:6c:f6:5f:cb:bf:47:85:ad:79:64:
                    29:18:5c:b7:18:eb:ab:34:04:2b:69:96:1c:05:c7:
                    f9:5f:7c:7f:c9:67:9c:d5:90:1d:89:15:36:b7:17:
                    5e:0c:44:95:e6:80:45:76:e9:b6:fd:a8:dc:bd:e2:
                    73:27:11:30:b1:ac:6d:c3:2c:f5:e4:4f:dc:1f:68:
                    96:c5:ae:e8:ee:e5:ff:31:00:b2:52:4d:cc:96:21:
                    fa:be:97:a0:d9:60:09:fa:91:1a:75:dd:58:5f:36:
                    fe:b0:22:2f:92:89:48:05:d7:c9:0b:0f:d0:1d:0c:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:35:15:4B:7A:79:60:74:53:B3:5D:53:14:27:14:BA:44:79:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133dabf4-26f7-34b3-9079-ce185441a624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:96:71:02:69:2f:e0:f5:56:77:1f:e6:3d:a7:6a:2f:a6:d6:
         98:54:c9:71:64:fe:f5:1a:bf:11:d2:8d:38:ad:08:f6:77:ee:
         80:89:f9:ae:3c:f3:4e:0a:91:a5:53:b1:73:23:6f:4d:c5:8c:
         47:80:26:34:7f:0d:84:65:b0:ab:15:59:b0:36:e6:a5:ea:28:
         30:77:24:93:a1:34:4a:8d:98:a7:a1:cb:92:24:e3:d6:d4:f5:
         9a:0a:42:d3:be:d8:dc:ea:1a:d9:15:2c:6d:81:fd:9b:ae:cf:
         86:00:fa:aa:8c:29:a6:1a:12:fd:c3:5a:2a:94:b5:73:97:d7:
         c8:d8:b5:5d:ff:da:d2:83:43:9c:a0:9c:ed:6a:f5:c8:00:6c:
         41:ae:9f:cf:88:af:31:7e:54:72:74:f1:9c:b2:6b:51:c6:46:
         40:b9:d9:6d:ab:a4:24:25:de:19:a5:92:69:37:31:17:67:3d:
         0c:93:81:af:29:cf:d9:cb:ee:4a:28:ee:40:cf:ef:94:b2:96:
         b1:df:64:bb:fb:74:52:ce:f5:13:39:53:e2:51:cf:de:f6:63:
         ce:dc:c1:11:79:77:de:be:33:0a:92:ab:98:b7:3f:54:16:6f:
         8f:21:c4:23:f9:e1:15:2d:4e:bf:34:37:1e:8e:1b:50:a4:4e:
         5e:d0:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:20 2025 by rpki-client