Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cff4464-180b-34e4-ae44-72840f8f771b.roa
File:                     7cff4464-180b-34e4-ae44-72840f8f771b.roa (raw, json)
Hash identifier:          65WHp3YGXSReFgQaR15tI6p4T6KKd7l26Wtq+biM4ho=
Subject key identifier:   EB:AF:48:12:94:D6:CC:88:35:B7:39:86:2E:0C:FA:A5:CC:DF:4D:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B784416299D1A78A2A218100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cff4464-180b-34e4-ae44-72840f8f771b.roa
Signing time:             Thu 30 Jan 2025 13:46:18 +0000
ROA not before:           Thu 30 Jan 2025 13:46:18 +0000
ROA not after:            Wed 30 Apr 2025 12:46:18 +0000
asID:                     396580
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:41:62:99:d1:a7:8a:2a:21:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:18 2025 GMT
            Not After : Apr 30 12:46:18 2025 GMT
        Subject: CN=4285b94c-27b4-4b4a-b03b-9459aafd0135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:ad:5e:4a:95:08:34:7e:8a:2a:0d:4e:33:
                    70:58:b0:7c:30:e2:5d:57:f4:43:38:be:a6:56:b8:
                    9c:c1:c1:85:b1:ba:68:3c:04:b4:e3:82:b1:b1:4b:
                    b1:02:20:a5:73:8b:24:08:94:bb:b6:a2:1d:6d:3d:
                    30:bb:9d:75:ff:03:e5:15:dc:b5:05:bc:6c:9f:0f:
                    3d:2c:fc:5d:ce:ee:7c:99:20:ce:6d:f6:da:0a:69:
                    6b:80:e5:60:22:c3:1d:57:dd:b4:d6:0e:a1:0f:4a:
                    f6:29:ac:da:51:a3:ae:2d:8f:14:8a:73:25:e6:81:
                    d8:ee:b7:a6:20:a1:c1:21:c0:cf:a1:fa:2a:04:e8:
                    f1:6c:9c:4d:30:95:40:c4:8d:fa:6a:0d:d4:ad:cb:
                    ca:2e:2c:b5:9f:56:1b:21:a7:7a:4b:88:ad:36:fe:
                    e9:89:79:2b:6e:c5:83:8a:53:69:a3:65:8d:b9:85:
                    a0:6b:92:ba:5d:fb:9f:51:22:d2:fc:da:2b:af:ad:
                    e5:a6:97:19:09:3d:18:4b:ee:ce:96:41:57:25:41:
                    a5:35:57:e9:97:98:cb:de:4f:ca:69:92:0e:56:a9:
                    8f:27:b0:8b:4f:73:29:2f:27:08:4b:1c:87:ac:ac:
                    df:a4:0e:83:e0:01:0f:29:32:1c:8b:36:8e:39:0f:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:48:12:94:D6:CC:88:35:B7:39:86:2E:0C:FA:A5:CC:DF:4D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cff4464-180b-34e4-ae44-72840f8f771b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:66:b2:19:57:52:03:1e:35:09:73:4a:1d:9c:22:09:fa:a7:
         84:70:e5:57:61:06:90:c3:3f:46:18:be:46:17:0d:4d:b1:68:
         30:4c:4c:b0:aa:f0:9a:2d:84:90:ba:d6:05:ff:c6:62:a7:d2:
         d7:24:8b:fd:d6:c8:e0:d4:c5:98:cb:2c:60:d8:16:23:d7:21:
         97:ef:dc:0d:97:7d:a5:5c:67:f8:79:56:cf:45:29:60:63:5a:
         17:eb:57:f8:d7:2d:c0:8d:1b:b5:47:40:65:a6:72:e2:b6:1e:
         64:bd:30:1d:d9:88:b0:f5:8a:22:50:b8:96:ae:f8:4d:0a:eb:
         d1:21:56:ca:44:9c:3a:fc:be:33:0e:c9:3e:7c:22:5d:c4:ad:
         71:93:61:ac:1e:69:7a:0d:76:bf:e8:3a:b7:c6:64:db:b8:c6:
         ff:d2:ea:51:0e:18:d0:8c:57:67:07:09:42:ef:ff:ef:3c:4d:
         92:78:75:cb:c5:2d:5b:4c:84:ac:ec:3e:69:f9:ea:d0:10:f1:
         1d:a7:75:ed:57:42:5a:5f:b1:8e:a2:1c:fc:fb:7e:d1:68:97:
         d7:83:f1:75:3a:64:97:68:05:71:de:cf:2c:0b:b5:7a:db:d3:
         40:f1:56:44:1f:58:13:96:da:fa:f8:00:47:0b:83:bd:73:3f:
         e3:fc:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:17 2025 by rpki-client