Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa
File:                     78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa (raw, json)
Hash identifier:          s41HmlpTNpPmZYWkdj1vE2M7Ugsnu02jo0qAzLwQvL8=
Subject key identifier:   F5:5B:38:BE:C8:1F:7E:45:1B:EF:52:EC:11:DC:06:B2:35:E1:36:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493ED3F3A1A1A2445C18726D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     396592
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:f3:a1:a1:a2:44:5c:18:72:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=6f786f8b-f5e1-49eb-ba9c-d45c29e41d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:47:e0:a7:87:07:e0:f1:34:bb:74:50:7a:
                    e4:cf:75:ed:e4:fe:90:13:4d:d0:53:58:7d:a1:b2:
                    58:e4:0f:2d:4a:51:50:2e:1d:32:6e:b6:c7:5f:89:
                    54:92:fe:79:4b:75:0b:22:a7:77:cd:29:4d:f4:93:
                    9c:43:5f:7b:3d:6c:99:e6:8f:74:d1:08:4d:d6:a4:
                    10:bf:08:3e:22:e9:6b:15:e0:dc:9b:3f:d6:d8:cc:
                    24:ab:04:29:ef:51:c4:2d:84:fb:7d:79:c9:70:ce:
                    85:2e:fd:61:e3:eb:23:35:f4:4c:ee:56:75:93:9f:
                    02:09:11:eb:6e:29:25:70:a0:4b:73:6d:7a:dc:c9:
                    cb:fc:32:0c:fd:00:1a:22:95:e1:66:0a:4d:22:ea:
                    0f:86:78:bf:ac:e2:af:14:7c:0b:4a:1f:20:eb:1f:
                    3c:1c:e1:55:1b:79:82:0e:f5:4c:1a:32:10:9b:ed:
                    e7:16:70:ff:d9:b0:bb:95:3b:97:54:c9:ec:03:92:
                    12:57:da:04:0e:cc:9e:89:a2:ca:7e:0b:45:b1:4a:
                    ac:84:a0:9a:3b:fd:4f:86:12:0f:d4:bb:8e:3a:da:
                    46:e9:a8:dd:12:50:07:d3:9b:0b:21:ce:42:4a:ea:
                    24:cf:38:94:45:09:d9:fa:d2:80:5a:37:fa:dd:5e:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:38:BE:C8:1F:7E:45:1B:EF:52:EC:11:DC:06:B2:35:E1:36:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b762d3-20e7-3f84-bdb2-80f58b7832f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:ba:c2:0d:20:35:12:c0:8b:4b:49:7f:37:b5:b1:ce:44:
         9d:73:df:f4:25:d5:34:71:81:22:2a:22:08:53:9e:a3:ba:8b:
         b0:c6:a4:8b:e6:1f:30:30:d6:4c:04:b8:08:d4:d4:30:a1:4a:
         7d:cf:2b:81:d2:53:d2:49:f5:7d:fe:e7:fb:cf:e0:ee:70:95:
         59:23:13:0b:08:72:7b:ce:b4:85:54:a7:66:d9:3f:87:ff:59:
         5c:e3:a0:f7:04:42:b4:da:e9:bf:48:3a:b4:14:22:d9:56:fe:
         66:26:7a:8b:3f:50:b4:9b:67:a9:cd:55:d0:7b:bc:b8:16:8f:
         1e:ef:8c:7a:ea:26:29:92:7c:b6:50:ff:1a:64:aa:a5:54:5b:
         1c:2b:32:97:08:b5:d9:f0:8c:ed:e9:28:62:60:8b:3a:bc:72:
         b2:d9:3f:b6:bd:5f:f4:85:f0:e8:4f:22:80:de:e3:ae:24:81:
         99:43:96:e5:2e:77:5d:bc:70:6a:00:e3:34:c4:14:fc:fb:15:
         04:16:9c:98:f4:52:31:0f:36:28:e0:e0:60:35:28:33:65:6b:
         32:e5:11:2e:8d:40:e9:7e:c6:d9:37:55:45:46:54:7d:1b:fc:
         cf:bc:90:03:59:e0:7a:e9:b2:e6:6b:97:46:72:76:57:c8:8f:
         59:e5:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:01:05 2025 by rpki-client