Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa
File:                     52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa (raw, json)
Hash identifier:          y5its7PPIk2fdDsOHux+J7MdVd7IZHBHu1q+UByvDIA=
Subject key identifier:   82:C6:A8:27:87:FB:D5:7C:06:29:AB:DD:2B:0E:81:9C:BD:85:E4:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744AE36FFBA552A378CB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396574
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4a:e3:6f:fb:a5:52:a3:78:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=70e93338-b378-41ba-b54d-009e1eda1c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:ae:11:d0:54:08:83:a7:0f:c8:a1:d2:d2:
                    66:d4:b7:80:68:7f:79:e0:6a:af:50:f6:e0:1d:aa:
                    98:49:c5:79:62:49:74:69:e3:94:56:30:e3:04:48:
                    17:8f:f4:85:cc:54:dc:9d:d3:94:4e:9b:c3:1e:f9:
                    1c:fd:32:cf:d4:2c:99:c1:fc:1d:87:ef:1b:18:9e:
                    ae:f9:95:8f:24:5d:be:72:24:b2:ac:69:1b:e4:6b:
                    8c:26:88:ee:29:62:18:a0:86:b9:1a:83:7b:03:86:
                    05:04:d9:53:8b:9e:ff:ba:90:b0:09:89:e8:61:b2:
                    3e:19:ee:90:dc:9b:63:cd:76:09:ef:42:1f:3d:3d:
                    e6:db:8b:53:d2:9a:c9:d5:b7:b4:b9:73:10:7f:b3:
                    01:92:b6:55:04:88:b6:90:37:a6:84:37:f4:94:3f:
                    46:46:c9:e3:60:14:1a:1a:47:74:41:fd:bd:c3:b6:
                    ad:9c:33:d3:1d:51:f5:ad:01:e8:9b:0d:3d:6e:f8:
                    81:18:f2:fa:12:7b:03:2e:bc:56:76:54:74:4f:a0:
                    c1:b3:5b:f6:8a:7f:45:cd:54:59:d7:01:a3:f8:be:
                    22:9b:1c:e0:a3:0e:63:2c:23:06:7b:e0:85:2f:6e:
                    e2:80:a9:a5:6f:05:f2:65:f8:4c:ed:a9:af:9e:5d:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:A8:27:87:FB:D5:7C:06:29:AB:DD:2B:0E:81:9C:BD:85:E4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52974fa8-c594-30a9-9d44-e92edd0e1f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:12:8c:98:67:f3:a4:79:c5:13:c0:18:45:a2:58:be:ba:48:
         da:be:a7:11:47:e7:18:5d:0a:76:8b:ab:e0:d9:35:d3:70:bd:
         32:b0:3a:09:8e:2c:f0:23:82:d9:2d:8d:dc:0a:9b:b7:40:73:
         63:6d:33:0b:b3:56:a9:79:27:f3:c7:b1:5f:39:1a:4e:24:e0:
         8e:23:77:26:83:ed:80:17:0c:45:ee:0e:b7:db:e7:77:e9:b9:
         87:7c:0b:2c:5a:ef:3b:b9:18:14:e8:df:50:16:2d:c4:75:89:
         31:fd:61:a8:03:9f:f6:27:c5:15:ab:6b:d0:31:18:9a:cb:2c:
         e0:6c:16:c1:76:50:1a:21:4a:1c:ef:7c:ac:9a:65:8f:77:9e:
         64:1b:c7:14:42:9e:e6:59:c6:c9:d8:5f:b7:6d:f0:b5:9c:bf:
         54:fe:49:a0:05:ea:1f:5c:fe:57:33:13:1a:3b:92:83:19:51:
         1e:96:87:69:bc:5e:0e:a8:bd:07:9b:6b:1f:d0:9d:2b:af:50:
         ea:09:f6:5e:ca:75:7f:54:62:ee:b3:3e:da:2a:07:01:5f:db:
         5b:36:6e:d4:a1:f0:50:f0:05:af:61:cc:79:bd:83:4c:42:c5:
         f7:de:28:19:57:29:01:8c:33:93:84:2d:7d:2d:c3:c4:db:c4:
         2a:a1:05:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:42 2025 by rpki-client