Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d428ee6-5c34-3608-aeac-61ed66ac717b.roa
File:                     4d428ee6-5c34-3608-aeac-61ed66ac717b.roa (raw, json)
Hash identifier:          Vwf2ITjD/7d1FK5UB6HJf37M/Zm0PTu3MHUAvplcLZc=
Subject key identifier:   F1:90:B4:31:36:FE:1D:6C:60:D3:04:73:2C:F1:A7:F1:D6:38:25:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F571D601D02395266B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d428ee6-5c34-3608-aeac-61ed66ac717b.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396575
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f5:71:d6:01:d0:23:95:26:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=85633a77-eedd-4af8-8cf1-9a7425c31d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:36:e5:6b:3b:27:70:3d:c2:37:b8:08:e9:da:
                    f4:43:49:ae:61:91:24:b4:b1:c6:d5:ea:e4:0b:65:
                    68:7f:ba:c2:f9:f0:35:ac:a8:66:dd:76:fc:26:de:
                    9e:1a:a0:3b:77:1b:4e:b4:e7:07:44:00:b8:b6:b7:
                    3c:31:b6:02:28:45:9c:10:d8:19:30:ab:d0:53:de:
                    50:ce:e2:b9:4c:e6:e7:60:10:c0:19:7a:41:30:c5:
                    ff:3b:e9:04:63:2c:f4:70:3b:d6:61:de:b5:40:de:
                    20:ba:cb:6e:75:d7:6b:ea:c8:70:e0:9f:31:00:b5:
                    69:19:cc:58:fa:5f:7d:7c:84:36:b1:15:e8:85:85:
                    55:d1:05:0a:93:92:5f:a9:0d:c8:c9:6c:91:b8:7e:
                    7a:dd:23:b1:21:7a:53:78:67:4e:1a:c3:b1:9c:c8:
                    79:84:cb:88:0f:57:a2:ee:8d:9c:75:90:38:3d:8f:
                    0d:35:42:9f:a7:09:a2:af:01:69:e9:93:db:fa:21:
                    35:49:98:3a:b4:9c:f2:1b:5f:d6:a6:1d:7c:45:04:
                    79:ff:86:8f:e7:49:69:d2:64:fc:4d:09:40:57:bd:
                    24:0e:20:fe:01:0f:eb:ce:80:5a:50:70:c1:ab:b4:
                    fb:84:b1:e0:b1:95:ff:09:ec:68:c5:62:07:55:cc:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:B4:31:36:FE:1D:6C:60:D3:04:73:2C:F1:A7:F1:D6:38:25:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d428ee6-5c34-3608-aeac-61ed66ac717b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:14:c1:dc:06:c6:c8:95:67:fd:b6:9f:40:44:53:58:66:4e:
         28:b2:78:bc:e3:4a:ab:1b:40:22:a9:80:e3:75:7e:45:af:50:
         cf:bf:4e:5c:e2:a1:96:41:eb:c1:86:a6:2f:84:00:d0:04:6c:
         e3:65:8b:b1:11:0a:6a:57:6f:8b:15:46:78:79:49:65:31:3a:
         2a:bb:85:38:43:23:06:e8:d7:5d:00:ce:b8:ab:61:e3:ec:2e:
         28:43:80:74:9b:a1:f5:de:dc:84:46:61:a0:b0:5c:0c:5f:72:
         75:c1:36:99:bb:07:15:bd:13:e4:97:6a:f6:a3:e5:b3:94:ba:
         4c:d1:99:02:17:38:30:64:4b:d7:cf:b6:fb:44:26:db:06:4f:
         01:30:ee:fe:7d:2b:ae:f1:52:c2:5d:92:5e:66:ad:39:b7:fc:
         25:55:55:1f:e2:e5:08:ae:36:2f:b0:52:63:9b:49:7f:66:8d:
         65:e5:84:2c:8d:61:f3:8c:ec:b1:31:3b:a0:c8:e4:e6:87:46:
         91:a5:10:2d:6e:b6:a0:1d:a5:9a:1f:c4:e3:31:a9:7d:33:33:
         55:09:de:1d:f0:2e:cf:fe:3a:78:25:59:3c:83:1b:fd:55:88:
         0f:81:8e:cf:e9:2e:da:43:49:76:bd:b9:f6:bd:cc:c1:84:f0:
         30:ca:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:08 2025 by rpki-client