Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b16299-b58e-3f38-83cf-37dd25f2cc52.roa
File:                     49b16299-b58e-3f38-83cf-37dd25f2cc52.roa (raw, json)
Hash identifier:          JuuKyxXRu4lCZqyfYTHkryFVRUkKLTs7gQJ29TNciu8=
Subject key identifier:   6B:17:AA:F3:B3:5B:71:4F:90:75:EE:96:D1:E4:97:10:1D:74:B7:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B78445F4F74E89241CF616A8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b16299-b58e-3f38-83cf-37dd25f2cc52.roa
Signing time:             Thu 30 Jan 2025 13:46:20 +0000
ROA not before:           Thu 30 Jan 2025 13:46:20 +0000
ROA not after:            Wed 30 Apr 2025 12:46:20 +0000
asID:                     396610
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:45:f4:f7:4e:89:24:1c:f6:16:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:20 2025 GMT
            Not After : Apr 30 12:46:20 2025 GMT
        Subject: CN=39f76b9e-bc4e-4e57-b01c-556c15163d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:1b:d4:03:29:eb:3d:38:f3:c2:6c:46:7d:
                    fa:fe:00:93:8d:00:fc:79:1a:07:72:5b:f2:ee:c4:
                    cb:e5:be:a4:79:f7:3a:00:ce:ec:41:27:9b:25:1c:
                    c7:e3:db:04:1c:b2:28:df:db:10:0e:83:82:b2:7b:
                    dd:aa:3b:91:6a:01:ae:4b:a0:81:0d:4e:ef:5f:0b:
                    95:5a:5b:48:4f:44:1e:2d:dd:41:bc:c7:57:36:c4:
                    7e:58:ba:2a:f3:79:77:ed:eb:85:34:10:43:36:a9:
                    cf:4f:e4:4e:05:74:7c:fe:aa:6d:1c:21:04:c9:fd:
                    50:e6:3e:5e:7d:36:b9:97:41:58:c6:c8:88:27:ee:
                    74:c7:66:9d:15:45:04:04:3d:22:1f:9e:72:7e:99:
                    6d:cd:46:6a:1a:92:25:32:e7:c5:f2:5e:01:6d:18:
                    c3:00:26:75:6a:f2:17:39:82:44:53:79:69:37:d1:
                    41:89:47:ad:de:c4:08:3f:3e:29:49:3f:7a:19:53:
                    e3:54:88:00:e9:13:6b:ee:f0:b2:3e:21:7b:75:9b:
                    e6:c7:b0:59:4c:26:aa:56:c8:e1:34:2d:a6:dd:ac:
                    34:00:f0:cc:c4:8d:c3:91:56:cc:b4:d4:1b:bd:4e:
                    11:ae:d1:a3:63:e6:28:99:2f:8b:f5:27:df:a2:53:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:17:AA:F3:B3:5B:71:4F:90:75:EE:96:D1:E4:97:10:1D:74:B7:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49b16299-b58e-3f38-83cf-37dd25f2cc52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:be:e7:a8:7c:59:59:0d:21:18:bc:31:82:09:90:93:23:b4:
         38:9b:8b:12:a6:0e:4c:f7:91:f4:a9:e1:50:60:e4:92:3a:42:
         85:26:87:cd:c0:ae:24:77:19:77:33:73:b5:78:41:6f:8c:f9:
         bb:7e:66:16:9c:9c:6a:26:c5:52:03:72:e3:3e:d6:30:dc:07:
         dd:57:1f:a2:0b:e3:02:a9:46:11:c1:2a:44:71:51:6c:0a:28:
         b3:50:34:0e:8d:c4:11:0e:af:9a:93:47:4b:41:63:01:cf:a3:
         ef:4f:db:69:49:2f:08:5b:67:44:b4:84:10:29:c4:c6:ae:e8:
         fc:bf:20:a3:9a:dd:ff:cd:63:29:ab:ff:cc:cd:f0:ef:99:9b:
         f4:76:c0:6f:8d:a8:4a:f7:a1:89:5b:c3:80:06:a9:3c:2e:14:
         11:be:01:62:d0:81:ba:b0:9c:ed:e0:82:01:62:00:8f:03:db:
         56:fe:a7:09:f5:2e:81:10:72:25:42:29:87:10:5b:fb:25:87:
         01:83:d2:52:14:1f:48:2c:f1:63:46:52:7f:de:d7:13:da:b9:
         51:8d:53:f4:7e:15:77:d9:cb:9e:de:12:82:95:d8:84:a0:ab:
         5c:0d:81:21:cf:0d:26:01:9e:be:44:75:c1:c4:75:41:fa:eb:
         fa:a4:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:56 2025 by rpki-client