Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74aad6ab-c56b-3d3b-90dd-9f4783a8897c.roa
File:                     74aad6ab-c56b-3d3b-90dd-9f4783a8897c.roa (raw, json)
Hash identifier:          RWbQa3shd5HI6U8cQhKLt7HHBV87DzWoi8mvMxrXgLI=
Subject key identifier:   57:B8:1B:A5:40:FF:66:23:1B:38:CB:69:B2:4E:F8:FD:CE:63:CF:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C808D55FAC40712ADC600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74aad6ab-c56b-3d3b-90dd-9f4783a8897c.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396561
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:80:8d:55:fa:c4:07:12:ad:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=e22aab79-8039-4299-a30c-919bfc7d26de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:16:fc:3f:f5:f5:81:b1:7d:93:09:50:2f:
                    3b:c6:3d:36:20:b9:ad:da:91:a3:1d:70:fa:06:27:
                    31:a5:bc:44:0e:cc:e9:8c:0d:87:8c:5e:b5:fe:50:
                    eb:8d:b1:9c:79:33:4d:83:7b:dd:d2:b9:60:fc:34:
                    8d:32:80:6d:26:6a:84:8d:d6:01:cb:45:c3:25:b1:
                    77:1b:77:e8:ac:4e:41:91:8b:ec:f5:9b:9c:0d:0e:
                    bf:94:77:9d:55:eb:b3:fc:c8:27:95:e2:ce:dd:16:
                    c2:8d:63:1f:38:a7:7a:32:f3:26:21:d4:c9:a7:b6:
                    ea:ab:97:b1:67:96:e7:d2:e3:b0:ec:c6:a0:ca:53:
                    a8:6d:da:89:6b:9a:f2:cf:e2:55:6a:fc:e2:91:b4:
                    ef:32:13:93:59:09:36:97:7a:f1:87:40:4a:e1:14:
                    3e:1f:b0:6e:43:31:ef:b1:13:2b:1d:50:4d:d9:19:
                    64:42:45:72:20:36:61:7a:59:5e:d2:27:5c:6b:32:
                    83:17:f3:4e:28:52:d7:4a:ca:79:a8:b4:f5:c0:ec:
                    51:db:68:30:d3:61:8f:6c:6e:4d:37:61:92:bb:1d:
                    04:1d:0b:db:18:d3:bf:79:dc:af:4c:69:23:d7:98:
                    6b:b8:82:ed:ca:7a:47:97:5c:30:ff:31:dc:66:0e:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:1B:A5:40:FF:66:23:1B:38:CB:69:B2:4E:F8:FD:CE:63:CF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74aad6ab-c56b-3d3b-90dd-9f4783a8897c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:79:ef:40:14:2c:60:00:17:11:6b:4c:4a:b9:47:9a:40:
         ec:3b:99:93:26:db:2c:46:ec:30:9c:6c:99:43:57:e4:6f:9e:
         23:3f:dd:00:83:c4:e3:06:5c:5b:d7:d0:fa:3a:7f:fe:35:eb:
         8b:7d:0a:6e:a5:ff:09:1f:95:5b:56:26:a9:55:2a:c4:73:9b:
         ca:2f:09:a9:c7:0a:f4:2b:c7:89:04:cf:76:38:93:5b:7b:4e:
         01:95:dc:39:ad:e5:09:a7:0b:47:0a:92:d1:92:a9:e6:8c:06:
         77:64:56:a2:a2:81:82:80:e8:df:48:c6:fa:4b:e0:26:f4:f8:
         90:79:86:5e:a3:6e:ee:e4:ce:ea:3a:13:41:7f:48:e8:b0:c5:
         22:51:4f:02:2c:ca:46:66:d8:b0:9e:5f:ad:22:5b:f1:a4:14:
         e5:b3:dc:80:76:d2:2e:f6:b5:f9:fc:90:b3:23:1c:28:f6:50:
         72:c0:e3:d5:78:cc:35:83:03:72:de:50:5d:c3:54:1f:e5:b9:
         d3:dd:df:3a:2c:ac:f5:e3:f8:96:a0:79:86:88:c8:87:4d:62:
         bb:4d:ee:20:d4:6c:3d:39:45:61:a1:52:75:17:86:e1:4c:ec:
         29:83:ca:ad:f5:25:db:32:46:e7:36:da:96:c5:6f:8a:41:bb:
         e0:1f:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:38 2025 by rpki-client