Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f95a91-6cb5-361b-a494-30088320cbd6.roa
File:                     a2f95a91-6cb5-361b-a494-30088320cbd6.roa (raw, json)
Hash identifier:          DD/57kOJ5XjsODonANrO32ocwGTP3/1E+Dz05shb1nc=
Subject key identifier:   36:0E:EF:5A:98:E8:8E:B3:0C:B5:C1:6E:AC:AB:F5:C4:2F:7F:80:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0F136DD2AA5922EB9EB4C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f95a91-6cb5-361b-a494-30088320cbd6.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     397211
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f1:36:dd:2a:a5:92:2e:b9:eb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=9131da94-749c-4a70-a674-51a806cff7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:a2:85:fd:e5:5d:a7:72:a9:ee:a4:86:1b:
                    50:24:ae:80:c3:84:72:49:af:a3:51:3c:b2:72:07:
                    18:74:a7:04:b4:db:63:f7:cd:00:0d:8d:58:6f:e8:
                    1b:52:f7:59:ef:68:a3:7d:47:c5:20:e3:ed:f9:e5:
                    c5:9e:e0:13:26:17:8f:b9:ad:03:62:82:12:67:51:
                    31:a9:ad:d2:17:b2:27:0d:2f:ef:bd:08:1e:ed:7c:
                    44:1a:ab:73:d0:59:a2:52:4b:1f:72:b3:b4:86:fd:
                    dd:04:d7:bf:d2:49:c6:1b:0b:b0:d4:c2:71:ce:e7:
                    d2:ef:d0:3a:95:f1:de:0c:37:67:ca:92:ef:6e:8e:
                    3e:50:16:e9:8d:bc:95:a5:c8:f4:60:e1:96:26:5d:
                    ca:91:bc:4f:92:0a:86:b4:36:66:70:1f:e5:ca:f2:
                    b7:6f:21:2a:54:3a:15:e3:97:4b:89:f0:01:97:f9:
                    95:92:9d:1c:e4:1e:79:82:00:d9:e8:10:44:48:fd:
                    49:e7:1d:d0:ad:9a:5a:74:d7:1d:f5:b9:58:41:11:
                    d2:31:9b:14:1a:d7:c7:22:18:2b:93:48:15:21:59:
                    f5:52:95:3a:82:72:c6:df:0e:20:f2:bb:bb:7c:3c:
                    93:26:44:e0:ce:b4:f7:f2:ee:a2:4b:c3:9e:e0:f7:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:EF:5A:98:E8:8E:B3:0C:B5:C1:6E:AC:AB:F5:C4:2F:7F:80:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2f95a91-6cb5-361b-a494-30088320cbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3b:66:a6:d7:cf:a7:f7:ee:df:27:b5:f5:54:7b:b7:92:48:
         11:9f:ba:32:71:4f:6e:bb:d9:87:7f:af:de:c3:52:44:0d:c6:
         67:4a:f3:2b:28:d8:e8:2a:5a:28:9c:cd:88:f8:0d:cd:73:8b:
         48:59:1e:2f:91:14:d9:09:35:d3:b9:a3:52:17:86:28:c3:01:
         f4:ef:e5:bd:54:26:56:84:9d:c0:53:77:c6:8e:9e:fe:48:dd:
         43:ef:df:60:68:3d:87:57:54:d8:e1:e5:c8:fc:fb:4f:a9:36:
         1e:9e:e9:33:ac:8a:7e:88:dd:35:ef:b8:0b:24:05:8e:d8:75:
         3e:2f:4c:58:61:19:0a:e2:d2:8f:59:b7:3e:a1:b9:6f:37:fc:
         7f:38:31:9c:b0:25:b0:41:f8:5c:4c:20:1c:a3:c5:90:5b:99:
         97:a2:58:2d:49:b6:61:d7:71:66:58:80:59:a4:5a:96:63:04:
         c7:fb:1e:ea:fc:b1:11:fc:15:a1:c2:62:ec:8f:b7:ad:f8:11:
         cc:b8:32:9e:79:7b:9e:03:20:99:21:b4:b7:69:7f:c4:38:79:
         ab:eb:ba:7a:3b:d8:8a:c7:6a:cf:d8:2e:c8:b8:1a:02:f6:83:
         e7:a7:3f:7d:8b:42:7c:6a:3f:f8:03:94:af:c1:df:c2:1d:15:
         25:b2:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:56 2025 by rpki-client