Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ebe3de1-d768-32e6-a30f-905dfac3508b.roa
File:                     1ebe3de1-d768-32e6-a30f-905dfac3508b.roa (raw, json)
Hash identifier:          sSjvaJlZgPwrH7a5yaieiBd4xvNApITBRcY7e7ErGwY=
Subject key identifier:   CE:ED:CE:07:BF:50:9C:53:DC:FB:97:DA:E8:28:79:AA:B8:1F:5A:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492CB239ABE1B544380667ACC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ebe3de1-d768-32e6-a30f-905dfac3508b.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     36618
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:39:ab:e1:b5:44:38:06:67:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=12673d2e-c88a-44c1-bd91-d129b887d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:48:fe:1f:c8:73:67:a2:a7:98:9c:b4:cc:
                    f6:78:e2:31:b8:59:1a:ef:ee:11:a8:6e:93:04:65:
                    ff:ec:22:3f:57:53:ab:35:97:fa:96:30:22:a7:fc:
                    57:3f:ca:ab:07:f1:ff:6e:3d:1b:16:b2:28:8e:08:
                    db:ae:de:e9:10:f7:de:a1:5b:66:a1:f1:a2:81:85:
                    d9:cf:86:dd:13:7e:17:9e:de:dc:55:95:ab:77:96:
                    c3:1a:61:b3:09:2d:89:08:16:5b:12:68:e4:75:ba:
                    9d:b8:e1:1f:cc:d1:3f:87:11:ea:1e:53:34:fd:20:
                    85:db:34:23:4d:53:ac:12:34:50:fc:7c:85:d1:41:
                    b4:57:cc:03:65:47:2c:ff:40:15:a3:f3:bb:0c:fb:
                    d0:13:b4:24:51:62:0e:9e:0a:e4:26:7e:59:2e:e7:
                    72:4c:0f:22:27:ed:f3:6f:ef:c6:75:d9:c0:4e:32:
                    76:71:0d:b1:f0:7e:80:fa:b0:5a:37:c7:be:db:4e:
                    18:17:62:57:6b:ac:0c:c2:cf:82:71:48:4d:c5:ce:
                    f4:76:86:eb:82:77:bc:25:84:1b:dc:a1:cd:53:5d:
                    88:fd:67:ab:76:04:68:52:d2:7d:63:6c:6c:cf:a3:
                    0f:b8:4e:66:29:10:e5:16:83:d0:a6:38:c3:9e:7f:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:CE:07:BF:50:9C:53:DC:FB:97:DA:E8:28:79:AA:B8:1F:5A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ebe3de1-d768-32e6-a30f-905dfac3508b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:98:50:79:4b:03:90:24:f5:55:ba:5e:4c:54:f1:c3:27:
         68:55:d9:88:fb:cb:44:e3:e7:ca:b4:40:94:fe:97:88:70:f0:
         cb:67:49:5f:bf:6b:b3:44:9e:6c:d4:c0:05:e3:6d:ac:ab:c8:
         6d:9a:9e:5c:70:ee:2e:fc:53:fd:fe:af:3f:42:f1:22:53:0f:
         a8:b8:44:e1:76:c4:55:55:63:2f:3b:4d:4e:56:dd:49:0d:00:
         6c:de:46:75:f4:32:52:71:f4:d2:62:e2:7f:fc:65:d6:cc:02:
         f5:43:fe:6c:7c:0f:da:92:d6:ae:e2:19:e5:61:a2:af:21:b4:
         2b:65:d5:52:01:d3:25:19:10:b9:28:37:b9:65:32:ae:c4:41:
         45:db:0c:30:c2:2a:9c:12:5c:93:1c:cd:e7:a3:c0:8f:66:5b:
         2d:ba:c8:04:53:7a:4d:ba:9e:8e:a0:f8:55:45:42:ad:9f:04:
         72:1c:37:a8:70:a4:26:47:38:83:b5:08:43:c3:2c:f2:c4:37:
         53:ad:80:8d:12:5e:de:1d:21:28:51:98:47:2b:e2:2f:4e:19:
         29:65:4a:0d:87:41:80:32:d3:21:67:1d:58:ab:a2:da:e7:21:
         6b:19:d8:ff:b8:59:f0:38:8a:d2:98:91:93:8f:ab:79:15:3f:
         27:a9:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:24 2025 by rpki-client