Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
File:                     a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa (raw, json)
Hash identifier:          HrkcIu98QJ8HKP4Mc7RTnTTbVhppP/d5vXvbCBPECjQ=
Subject key identifier:   10:8E:C2:62:6C:2F:9C:1F:4D:EE:A5:24:E0:3F:A9:CE:C2:97:E4:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584964845915DA88EEB82EB35480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     36623
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:59:15:da:88:ee:b8:2e:b3:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=7e4b775f-bd41-49a4-96f3-d2026a20d5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:ee:0c:0f:64:b0:58:7e:40:17:cb:3e:bc:
                    84:c9:4b:c7:02:13:4b:d5:34:72:d8:be:3c:50:25:
                    f1:5a:81:4f:9f:d2:1f:15:59:8f:14:ca:92:8d:57:
                    da:68:c4:90:03:93:20:01:37:12:17:46:ed:7d:12:
                    25:92:fa:4e:9e:44:40:3c:41:44:43:9f:ec:6a:eb:
                    b2:77:25:4f:0a:2e:58:e4:86:78:b3:98:92:43:a0:
                    c9:e3:be:2a:c6:c0:06:48:da:97:f0:fb:f5:e9:87:
                    11:b5:52:31:6d:05:21:1b:57:51:9b:ea:81:76:17:
                    f9:47:4c:10:21:70:a2:50:3a:6e:96:87:58:1f:28:
                    88:5b:2b:57:8a:58:1c:cb:cb:5b:68:4b:48:d8:c8:
                    db:e8:c7:b3:16:6c:12:88:e2:09:c5:a0:31:48:b5:
                    18:76:99:69:98:39:98:9e:d8:78:2b:20:e7:42:f2:
                    c4:e1:22:ab:51:ea:e8:cc:e6:cc:c3:52:8d:45:ac:
                    2e:77:45:af:ed:e8:30:eb:f4:b5:05:76:38:68:c6:
                    52:c3:58:22:ac:ec:0c:5e:bf:ce:35:e0:d7:8d:24:
                    ba:18:33:61:6d:9a:bb:53:c7:9e:45:fc:b8:7b:e5:
                    44:6e:4a:85:89:f3:93:73:fb:38:b2:f0:11:36:e4:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:C2:62:6C:2F:9C:1F:4D:EE:A5:24:E0:3F:A9:CE:C2:97:E4:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a48ce7da-5b2d-349b-82f6-e7f046ccfc63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fd:03:9c:ef:95:7f:08:e0:e1:7a:f2:36:9f:d7:1a:51:6d:
         58:42:92:b7:66:11:14:05:c0:4c:2f:c9:72:43:96:96:a8:31:
         6c:45:00:ea:d9:15:fc:e6:b8:00:d9:d6:d6:2f:56:b2:c0:94:
         a0:76:cc:e0:d6:e7:7f:99:ad:f5:bf:53:4f:ee:07:34:94:66:
         5e:45:96:97:9b:71:41:cf:2b:a1:f4:25:6a:2a:48:43:e6:c3:
         85:b6:6b:9e:ef:8b:f1:2e:f3:52:fc:78:78:15:fa:91:d9:54:
         bc:a9:b4:22:38:60:62:83:45:b7:5c:05:70:82:28:54:5a:49:
         f9:d3:6b:6c:95:e9:a9:aa:9a:c3:bc:d6:f6:e8:da:67:44:73:
         4d:6a:d8:eb:ca:a7:d0:80:17:3b:02:fb:98:6a:7b:f1:de:c1:
         e6:4c:59:b4:2b:81:02:1e:d2:8f:7b:61:57:45:0e:ef:8d:75:
         4c:e5:cf:a7:2d:48:fe:cc:4d:78:7b:10:08:84:ed:37:52:40:
         e7:cd:eb:cd:39:f1:dd:fa:46:75:69:a0:c4:0f:c6:8f:b7:07:
         a3:b8:c6:82:d6:6c:9b:f4:22:c8:d5:23:0a:1b:6f:f0:e4:4e:
         57:5f:3f:ac:5c:47:15:78:d5:72:e3:ac:65:ce:0c:9c:93:76:
         50:4a:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:34 2025 by rpki-client