Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73390f98-3072-3202-b733-e0b74eac4652.roa
File:                     73390f98-3072-3202-b733-e0b74eac4652.roa (raw, json)
Hash identifier:          xnobEJzkrjSq9uSrM6tZwUhIdLlSwm27XFSzqn12juI=
Subject key identifier:   FA:D7:28:31:3F:8D:A9:A8:F0:7D:BD:4F:71:4B:77:E8:FF:72:CE:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DEEE9C334C4F29C96B70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73390f98-3072-3202-b733-e0b74eac4652.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396615
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:de:ee:9c:33:4c:4f:29:c9:6b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=f4a91953-ade4-4d14-bb66-24608614a007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:b4:9b:51:a1:a2:7f:9c:5e:a4:00:40:a5:
                    34:17:ec:21:26:22:a7:1c:5a:a6:80:96:d9:b6:e8:
                    79:de:aa:58:5b:5a:08:fc:e5:f6:4a:5c:d3:5e:ab:
                    e5:14:2d:0a:c1:31:c9:87:8f:08:7a:22:9c:cd:6a:
                    d2:a3:ba:3f:62:5e:e4:c9:77:28:ce:ee:1a:a4:59:
                    2c:a2:bd:a9:b6:55:37:62:3a:a8:bc:60:b3:43:d5:
                    30:4f:63:10:c7:46:f0:2d:54:73:bc:52:07:50:49:
                    b5:9d:e2:d0:5b:76:12:3f:3c:2b:f4:05:99:bd:5c:
                    44:b5:90:b0:68:86:74:16:52:a0:20:26:ac:71:21:
                    31:75:e7:54:c1:ea:ec:36:c9:00:6b:cd:d4:63:62:
                    43:2a:9d:5f:97:4e:e6:4b:83:ad:cc:92:4c:b2:4f:
                    be:c6:98:ee:ec:51:19:25:7b:fd:c9:4b:da:59:5f:
                    c3:ce:4c:9a:b0:3f:a6:45:6b:77:bc:6c:d3:10:c3:
                    73:75:c8:d1:18:af:1c:1d:6f:5b:2d:30:20:20:bd:
                    c6:09:cf:cb:ce:85:a5:08:3d:07:a3:c3:8d:a9:cc:
                    85:b0:e5:81:f7:b7:6b:97:b5:77:48:6a:2f:75:8c:
                    67:f7:d7:d3:ad:fe:d7:42:0e:5e:95:d7:5c:95:7d:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D7:28:31:3F:8D:A9:A8:F0:7D:BD:4F:71:4B:77:E8:FF:72:CE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73390f98-3072-3202-b733-e0b74eac4652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:34:08:86:c4:d0:76:49:33:a1:cd:15:e1:9b:27:a3:b1:
         91:e5:87:df:12:6f:ab:29:74:11:d5:51:ed:ec:53:a3:89:c8:
         4f:5f:27:a6:b1:0c:e0:a6:1e:ff:24:ad:40:57:7d:cc:14:4e:
         9b:19:5e:17:c3:77:d4:85:7f:dc:29:bf:a5:b6:14:ca:25:78:
         f9:74:20:1e:b2:ed:98:55:ed:31:da:9e:b8:18:bb:f7:5a:cb:
         7b:d3:78:5b:04:da:4f:52:8d:30:80:e8:38:b9:16:30:52:ed:
         e0:69:83:f4:28:0a:6e:01:d2:e7:9d:4d:42:0a:58:dd:05:9a:
         3a:a8:f2:2f:98:e9:e3:4b:8c:cf:b6:86:a8:9b:16:96:bf:82:
         0e:5c:71:1c:c2:c2:d6:75:20:b3:73:76:ed:14:91:1d:c4:b1:
         bd:0f:db:04:94:0b:74:1a:a0:bf:99:a2:36:09:61:1a:ee:d3:
         ec:32:91:11:bb:26:66:1f:3b:bf:95:d2:b2:47:e2:5e:45:14:
         f7:e1:f1:58:45:aa:d4:d1:13:c8:fe:c7:ee:95:da:c4:16:75:
         fb:e8:17:89:87:a4:5a:69:6c:47:82:d9:99:28:a2:c0:7a:e4:
         8d:50:cd:35:e3:d2:ba:3b:40:ac:7b:0b:a3:8c:a8:6c:47:0c:
         a1:25:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:54 2025 by rpki-client