Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc694d3-e2f1-361e-9125-8bac63e43371.roa
File:                     5bc694d3-e2f1-361e-9125-8bac63e43371.roa (raw, json)
Hash identifier:          yinW0cg2XyPyLLoSN/nE4daNfuHjew7vRYRSoYCHsag=
Subject key identifier:   80:2C:46:90:DE:87:EB:6A:86:E3:32:9A:EB:00:6C:F2:A0:3B:CB:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493ED3EEAEC3412423A0505300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc694d3-e2f1-361e-9125-8bac63e43371.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     397202
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:ee:ae:c3:41:24:23:a0:50:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=a79a2b9e-22d6-4f60-8dd5-4b1c97b6ecab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:3f:04:74:e2:84:0f:4f:d7:7e:96:2d:17:
                    58:83:49:05:10:14:f6:ec:92:f4:e1:08:6e:c9:fc:
                    1c:cb:71:e5:3e:ca:9a:fe:fd:61:0e:f5:65:32:16:
                    9c:e4:31:80:52:88:d1:cd:ae:26:ed:67:84:41:8f:
                    be:55:4a:a3:9e:8d:8c:8b:ff:c3:fd:b7:ad:78:cc:
                    34:7f:0d:3d:eb:ea:f8:f1:eb:37:d9:da:c0:b2:d1:
                    82:7b:d7:f0:f1:e3:f4:d6:03:34:10:b0:3b:14:d9:
                    c0:cd:ae:4c:d9:36:4e:8d:60:00:f2:fa:12:d5:d5:
                    58:d4:c1:24:6c:34:61:78:fc:3e:8e:58:01:07:18:
                    96:32:08:14:30:f8:b2:89:95:80:99:9c:12:19:fc:
                    62:3f:9a:fa:d0:e9:18:84:2f:b5:bd:1a:51:ab:7b:
                    09:3e:e9:00:19:bf:f8:a1:36:01:01:57:a3:ce:2b:
                    c7:3e:f0:fd:68:3c:1d:81:27:e4:34:4f:34:f6:9d:
                    bc:99:44:5d:a4:82:d9:c8:fe:6b:f6:fc:ab:2e:aa:
                    aa:24:44:25:49:5b:86:69:4c:de:b9:ac:df:0d:79:
                    ce:ea:53:40:d3:e5:eb:f7:c0:79:8c:1a:f4:b7:3a:
                    a9:74:e0:08:ac:72:b1:2b:a2:61:f7:93:76:1c:c1:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:46:90:DE:87:EB:6A:86:E3:32:9A:EB:00:6C:F2:A0:3B:CB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bc694d3-e2f1-361e-9125-8bac63e43371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:bc:c8:a9:22:34:6d:ad:fc:57:17:7c:be:24:9d:e9:7f:
         39:9a:c3:e0:84:19:44:15:e4:0d:2d:7f:c5:46:8a:6b:00:9c:
         f2:bc:e5:27:04:a5:46:7a:ea:c9:e0:fe:9c:32:ef:af:10:cf:
         21:ef:a1:7e:db:aa:a1:c6:3d:ac:08:8e:be:9f:a4:4e:89:e8:
         9c:56:24:99:a7:6c:25:00:dc:70:53:71:8e:41:3d:d4:f4:e0:
         ff:3d:84:cc:03:a9:c5:20:2c:51:4c:38:f4:66:a0:e7:9d:c8:
         f2:2b:e4:d3:e3:da:da:1e:35:e5:09:43:4e:3f:25:89:4b:97:
         19:67:a6:40:3d:58:de:a8:ed:a3:e6:35:15:b3:6e:de:cb:57:
         6a:1e:e6:cc:9b:b3:82:05:67:b3:a7:78:dc:a0:b2:21:81:7f:
         be:9c:2e:d5:09:bc:ce:ae:81:cc:aa:6c:6b:8b:a9:85:b3:fa:
         59:a7:65:9b:d5:11:90:9d:d8:05:98:d2:ae:5e:8d:e0:e6:2b:
         11:21:09:0e:f1:e3:60:51:e1:f6:6f:ee:f6:f4:ed:5f:26:66:
         c1:42:55:b8:d9:8d:93:40:3e:46:46:3c:2d:cd:67:48:fa:1c:
         47:0d:2e:10:87:74:2d:bc:cd:53:5b:72:b9:e4:6f:df:df:43:
         34:56:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:56 2025 by rpki-client