Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835ffd7c-4d98-39a0-81f3-4ee56ded9bbb.roa
File:                     835ffd7c-4d98-39a0-81f3-4ee56ded9bbb.roa (raw, json)
Hash identifier:          LL2etjyjM9M6Cv843nfSvqs7nmnfrqUpT2co1RyEQs4=
Subject key identifier:   37:61:53:91:62:3C:E6:D2:4A:45:CC:29:1A:BD:8D:8D:9E:1E:12:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183EADF05BCCE10FE10C800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835ffd7c-4d98-39a0-81f3-4ee56ded9bbb.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396588
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ea:df:05:bc:ce:10:fe:10:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=908d66f4-d20d-45b3-9400-1672190c00e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:90:ae:5e:50:58:cd:78:ec:72:9e:ad:fc:
                    f6:c0:58:01:df:7c:19:90:86:b1:f1:70:3b:52:7b:
                    31:d3:0f:dd:6b:0d:de:bd:bf:42:62:bf:e5:be:06:
                    ed:dd:8f:ee:c1:b9:d3:fc:94:13:b5:15:85:7e:27:
                    08:a1:d1:b0:ff:41:87:ef:cf:07:29:ab:25:48:19:
                    39:fd:44:f6:50:a6:8b:d1:17:06:72:ad:66:ac:a3:
                    a9:69:90:61:bb:2b:ea:ee:f8:50:e8:d1:ba:21:13:
                    55:33:84:4a:d5:2d:6f:4b:88:bf:fa:a5:0d:b8:76:
                    a5:72:3d:b6:0c:9f:a7:39:45:9d:da:f6:6b:11:d9:
                    fe:b4:fa:89:f8:fd:ce:70:3b:4d:0c:d1:32:a4:58:
                    0c:ec:ed:43:74:68:88:57:81:71:3f:3d:ae:8f:61:
                    ca:12:ce:22:c8:4d:f0:8e:c6:1d:ea:7c:66:87:9c:
                    94:9a:7b:85:01:52:8f:50:49:e4:fd:3b:c0:bd:f1:
                    3d:da:e9:96:11:ff:6b:05:6f:fe:e9:e0:12:38:be:
                    3e:ee:26:48:97:be:b9:c5:3b:54:5b:73:6d:56:bb:
                    52:42:d5:4f:1c:80:c0:9f:c4:54:86:03:cd:f0:5d:
                    ef:6c:ef:a1:95:b5:2a:98:7c:6d:b3:a8:29:db:43:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:53:91:62:3C:E6:D2:4A:45:CC:29:1A:BD:8D:8D:9E:1E:12:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835ffd7c-4d98-39a0-81f3-4ee56ded9bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:cb:3e:29:d1:d1:dd:ba:14:49:05:06:0c:c0:fa:11:6b:
         33:5a:b4:f6:db:a8:d9:3f:0e:22:69:e0:37:2a:1d:d7:c8:df:
         3e:a8:61:98:e6:35:5e:a4:9e:90:15:af:06:d4:05:46:77:44:
         11:8c:05:9e:76:c3:ba:9a:59:9a:08:37:1e:0c:1a:a6:05:54:
         ea:71:12:8f:e6:19:55:a6:95:f0:09:a2:c9:c4:af:85:c3:6b:
         b8:dc:f1:98:86:66:67:37:46:11:75:4b:4f:61:d4:fb:10:e3:
         51:47:81:cf:25:cd:41:69:fa:5d:8c:0c:49:5f:bb:29:82:c4:
         46:42:60:25:c3:29:78:a2:ad:7d:1e:d8:7a:7a:76:bf:b4:f5:
         cd:18:0b:fc:90:e4:14:6d:bb:05:c3:c8:ec:3c:16:2e:f9:03:
         a3:04:b4:37:f6:44:b3:e4:30:40:d1:63:69:85:cd:82:86:75:
         57:90:b6:47:90:bc:33:1c:31:96:3e:79:11:52:17:89:64:41:
         7b:38:57:b2:bc:28:4c:90:be:ee:02:21:d9:8e:d9:b2:56:fb:
         19:88:ed:a4:e9:81:d8:44:9b:44:73:5f:63:8c:91:66:2a:e6:
         f4:ba:2a:b1:66:00:99:04:d9:63:bf:af:2d:04:3d:db:f8:3b:
         1f:71:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:34 2025 by rpki-client