Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/726d1c3c-df51-3af5-864e-37f0532e1842.roa
File:                     726d1c3c-df51-3af5-864e-37f0532e1842.roa (raw, json)
Hash identifier:          Gw49qZMtpT4N1xYeywo/S84Y4y4Ebwqp1Z/ZS/w1uz0=
Subject key identifier:   95:25:1E:0C:B0:88:0D:11:AE:CC:AE:19:19:CE:E3:C8:36:76:F6:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB16143DCA41F12025BE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/726d1c3c-df51-3af5-864e-37f0532e1842.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36616
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:16:14:3d:ca:41:f1:20:25:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7d78b6aa-dc86-43db-9fae-a3426a58c94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:da:ed:9d:47:83:73:41:a7:70:6a:b2:f4:
                    a2:f7:87:c9:9f:86:11:18:ed:33:d7:27:8c:29:1f:
                    6c:c8:24:0f:ca:89:32:f0:8c:83:c8:21:a6:8a:13:
                    3d:b5:40:df:a4:54:10:21:18:c8:88:e9:e9:d2:e5:
                    d4:89:e4:c2:d1:bc:61:20:af:a8:4c:96:f5:65:48:
                    01:90:db:f2:f4:27:01:e0:da:b4:41:07:b3:12:58:
                    d1:44:f2:de:36:b4:47:d6:3e:38:76:02:82:3e:57:
                    6b:71:be:8d:91:b7:ff:75:cd:12:68:67:19:fb:b1:
                    d2:c4:3a:8d:89:03:1a:2e:20:59:2c:c1:c2:b6:fe:
                    03:44:b4:64:b3:78:a2:a1:87:94:22:4d:1f:77:f7:
                    46:9e:b8:66:2b:21:1d:08:06:3b:0d:3b:7e:ff:95:
                    3e:06:0f:aa:9e:1a:28:79:61:ed:48:48:9b:aa:2a:
                    3a:a9:b1:94:76:51:5e:22:f1:e7:3c:d1:54:42:40:
                    9c:d8:2e:d7:9d:97:0a:77:39:55:35:75:ca:fd:4b:
                    67:18:e7:8c:04:43:c6:86:3a:c0:0f:2b:19:be:be:
                    95:bd:9d:16:67:ec:3b:41:4a:83:7b:42:03:0a:04:
                    83:fc:04:14:a1:fc:f7:43:fb:e3:f5:dc:63:fe:58:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:25:1E:0C:B0:88:0D:11:AE:CC:AE:19:19:CE:E3:C8:36:76:F6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/726d1c3c-df51-3af5-864e-37f0532e1842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:eb:b9:c4:90:1f:9c:fd:6d:81:c7:db:84:5c:00:ba:66:
         73:80:15:50:31:33:78:23:97:3f:15:d5:d1:23:53:a3:3c:2c:
         57:e9:13:8c:54:bb:3e:04:b6:77:29:9d:41:4e:29:13:31:82:
         f4:9c:36:b8:13:66:44:72:93:f9:89:b8:2e:e6:5f:8d:1e:bc:
         aa:52:47:76:0d:cb:3d:a1:10:f1:ac:dc:43:f4:ec:f6:d8:60:
         78:ef:6c:d2:a1:4d:71:43:4e:3e:94:6a:93:08:8b:60:6a:54:
         e9:4d:47:0d:78:39:18:be:d3:87:a7:e0:be:00:82:52:dd:7f:
         c4:4f:63:24:00:ff:2f:46:d8:78:36:64:11:f0:19:fc:5a:d6:
         83:1e:e6:2f:46:d8:4a:b4:69:58:10:ed:d1:57:1e:70:1b:d3:
         10:d2:f0:e8:9f:59:2d:e3:f8:49:f7:88:c2:31:11:ee:85:04:
         8a:28:21:0b:bc:ab:62:50:0a:c5:dd:b8:aa:48:4b:13:a8:e8:
         8e:96:72:41:b1:be:92:e1:69:2f:c9:18:90:6b:35:2d:47:77:
         fd:c9:92:57:c3:1b:05:61:08:96:28:31:8c:eb:00:75:4e:2d:
         57:71:db:c0:23:09:b0:4f:68:76:5c:cd:90:ad:c9:db:a1:c2:
         94:aa:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:30:00 2025 by rpki-client