Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa
File:                     4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa (raw, json)
Hash identifier:          +5HMEVyMz4o/fNweqyYIXr+AZI8WGUfmEwTQVGpk+qg=
Subject key identifier:   86:42:E3:82:C9:1A:8C:FC:79:ED:B2:E6:79:1A:BD:58:2F:3C:ED:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843F50F7131CED4FD62240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa
Signing time:             Thu 30 Jan 2025 13:46:17 +0000
ROA not before:           Thu 30 Jan 2025 13:46:17 +0000
ROA not after:            Wed 30 Apr 2025 12:46:17 +0000
asID:                     19836
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3f:50:f7:13:1c:ed:4f:d6:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:17 2025 GMT
            Not After : Apr 30 12:46:17 2025 GMT
        Subject: CN=aee76c5a-ee4b-4f87-8236-cf24daa31124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:ff:d5:3c:4c:62:fb:4a:cb:a8:f3:31:93:
                    0f:f8:00:28:96:8c:68:40:ca:a2:ce:6e:fc:86:b8:
                    91:9e:e3:32:6b:34:b0:f8:45:be:a9:1a:84:bc:97:
                    a2:bd:30:62:5d:6d:84:64:fc:1a:3f:bd:0b:0f:5a:
                    6c:5b:61:80:aa:d5:ef:af:7e:7e:af:1a:b2:3a:d9:
                    ba:6a:b9:82:7b:11:dc:ca:ef:ee:83:21:f3:4f:b9:
                    21:93:20:8e:b4:b7:fa:0c:93:ea:92:eb:3d:59:88:
                    79:36:f7:7a:b2:bb:b3:5b:44:5a:16:34:0f:23:4a:
                    ab:b1:36:74:c6:64:40:65:33:d0:8c:de:ce:60:89:
                    c1:f9:f1:28:2f:1e:7f:a7:84:95:89:94:ec:fa:a2:
                    b1:34:14:0f:62:41:52:9f:cd:d9:8d:7b:c6:d9:6e:
                    06:7b:c2:bf:fd:43:f1:2c:0a:b0:02:b0:61:08:65:
                    34:3e:d6:ed:5f:c6:38:fb:2c:e3:ff:c9:ea:5d:78:
                    c9:4b:e0:a5:96:81:f8:9c:4e:8a:8c:f8:51:c0:ff:
                    15:53:4d:45:43:fe:30:0c:fb:eb:91:09:0a:b9:3d:
                    21:d9:e0:db:76:9c:3a:d8:0b:d8:11:5b:21:3b:6c:
                    5d:17:c2:24:d1:72:ad:4b:4f:42:a4:93:25:ab:67:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:42:E3:82:C9:1A:8C:FC:79:ED:B2:E6:79:1A:BD:58:2F:3C:ED:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c9f5674-2f17-3a6b-903d-c7c19c08241d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d5:8a:75:59:de:91:1b:e8:25:67:0d:e3:51:f6:4a:8d:a8:
         5b:9a:df:22:fc:30:eb:ba:ba:d1:77:f5:2e:ea:70:45:84:bd:
         8c:8f:ea:49:62:27:f1:30:55:27:63:79:27:23:20:4a:21:bd:
         56:0d:a5:8c:1a:25:50:62:8e:1b:49:9d:9b:ba:20:14:22:7b:
         ac:6c:dd:99:7b:48:7c:e5:25:15:12:13:af:86:50:f5:bb:75:
         85:10:76:2d:38:76:d5:98:9a:9b:18:85:f4:15:9d:a4:54:0f:
         69:b0:f9:41:a0:20:90:f9:14:8b:43:f1:a1:1a:d9:1f:ea:5b:
         04:bf:de:66:75:03:49:ff:1b:f3:fb:b9:61:76:07:dc:10:95:
         91:c5:5a:91:5f:c5:ef:9b:92:0f:40:38:a1:12:64:da:2b:6f:
         2f:fa:a8:24:14:68:c2:99:ce:cb:9f:a8:76:e6:9d:64:8c:44:
         22:05:ac:a8:1c:ca:cb:54:b0:91:a8:1d:d1:e9:68:96:99:a8:
         c1:a5:6b:25:1e:ff:a4:8f:12:20:1c:59:fa:62:e5:79:26:f5:
         03:fc:34:03:f3:ca:41:06:2d:8f:01:b0:09:49:4f:f8:87:17:
         83:e2:4d:73:0b:49:08:a5:02:98:ce:9a:f9:e2:a0:d8:7d:54:
         5b:ab:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:47 2025 by rpki-client