Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cbd5748-c7a3-31fe-8f72-0df347b5fd82.roa
File:                     7cbd5748-c7a3-31fe-8f72-0df347b5fd82.roa (raw, json)
Hash identifier:          iAFX42HrlWG6egtSMKOnPeithLteYpDHTAvU+HdcPyk=
Subject key identifier:   F7:E0:9C:D4:68:4A:2F:68:7B:4A:74:2F:33:27:37:1B:D0:D6:DE:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F8DF5F511D07797F96C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cbd5748-c7a3-31fe-8f72-0df347b5fd82.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396582
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f8:df:5f:51:1d:07:79:7f:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=0321e183-3b7c-4dfb-8b8b-9c8037ea457e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:85:89:7d:6e:11:af:66:c7:51:59:e5:22:79:
                    d6:d1:e6:aa:05:dd:bb:11:99:2f:d8:1a:99:68:4c:
                    e2:ae:20:d7:2f:3d:11:45:82:78:78:53:e4:87:9d:
                    0d:69:eb:9d:7c:4b:96:f8:96:51:79:f6:90:e3:cf:
                    bf:40:3b:12:f5:66:c6:dc:6a:f5:17:f6:9b:55:72:
                    f7:66:e4:04:6e:eb:63:41:61:70:d1:92:26:35:23:
                    cf:c3:49:43:8d:69:21:b7:6a:cf:f0:21:f2:57:4d:
                    5d:93:26:7c:79:f3:bf:d8:6d:0a:81:e6:50:71:7d:
                    72:d0:da:6d:a9:e1:5d:c4:06:ee:6a:c2:15:3a:45:
                    a3:48:72:ac:22:d3:cd:22:46:32:1b:71:76:02:16:
                    c0:7e:3a:44:fc:b4:5a:47:c6:23:24:d7:d7:8b:cc:
                    46:72:7b:e5:a2:91:a1:fd:11:2d:6b:2e:b1:2f:21:
                    7c:8d:fd:35:e6:50:6d:d5:b9:ae:f0:55:1f:3a:a0:
                    89:8a:cc:96:68:3d:e8:57:54:e2:25:a9:66:1a:dc:
                    7f:ce:a8:07:c4:83:8d:d9:f3:ae:52:bc:98:a3:f6:
                    bc:e7:0d:f8:8b:c0:9c:15:29:4f:f2:05:e5:b0:f5:
                    e2:91:4b:a1:68:14:6e:6b:74:f3:17:18:63:2d:f9:
                    01:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E0:9C:D4:68:4A:2F:68:7B:4A:74:2F:33:27:37:1B:D0:D6:DE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cbd5748-c7a3-31fe-8f72-0df347b5fd82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:22:99:af:7b:94:61:3d:95:fd:b5:07:75:56:0f:1e:2d:
         2c:bc:d1:2d:6b:c8:d0:ea:f2:44:6b:25:8f:94:8c:23:13:6b:
         47:95:ae:5b:76:bb:48:e5:75:ec:26:0f:e3:05:4f:cc:3e:03:
         75:12:22:0f:48:d4:3b:0f:8f:ac:b1:ff:12:c0:d2:53:2c:83:
         df:8b:01:7c:44:f8:90:41:64:2b:6f:ff:4e:69:46:21:ed:1b:
         ab:4d:40:f0:5d:51:e0:d9:e7:59:47:17:16:5f:2c:73:01:52:
         cd:ae:24:c7:d4:2a:4f:7a:59:c5:c7:c1:f5:89:c0:fa:ce:d7:
         8e:98:5f:a3:5f:ae:62:ad:ea:d4:52:30:d4:db:4d:18:a1:f2:
         03:f5:a1:f7:c8:6b:98:64:55:7b:6d:21:d2:2d:1a:f1:1b:bb:
         3d:6d:87:74:8b:72:17:32:16:2d:74:04:94:d7:ce:97:91:72:
         2d:bd:23:af:59:d6:c0:ea:09:77:2e:3a:1c:22:54:9f:91:ff:
         62:07:e3:74:6e:79:f6:ee:20:40:ac:d6:7e:44:64:7b:ba:f9:
         a4:53:82:04:bb:2b:5d:d7:9a:97:38:ee:dd:b0:6a:f3:59:15:
         c4:5a:bc:30:35:b8:5c:81:01:d8:42:b8:b5:98:47:fc:e7:d1:
         90:b8:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:28 2025 by rpki-client