Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7da3f3b-40b1-3901-abf7-3a4d1c67d766.roa
File:                     a7da3f3b-40b1-3901-abf7-3a4d1c67d766.roa (raw, json)
Hash identifier:          9m18AUGCzHXdm2i4ezE9Us4D4oRENBA2gzz/7aDz9yY=
Subject key identifier:   80:1A:6C:B9:30:47:A0:2C:06:13:8A:FF:78:1F:13:65:07:53:B6:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B78448A68A5BC161C5B99B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7da3f3b-40b1-3901-abf7-3a4d1c67d766.roa
Signing time:             Thu 30 Jan 2025 13:46:21 +0000
ROA not before:           Thu 30 Jan 2025 13:46:21 +0000
ROA not after:            Wed 30 Apr 2025 12:46:21 +0000
asID:                     36627
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:48:a6:8a:5b:c1:61:c5:b9:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:21 2025 GMT
            Not After : Apr 30 12:46:21 2025 GMT
        Subject: CN=a3417bde-d95b-455c-8927-7008eb87873c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e1:c9:b4:52:6c:99:03:b3:2e:d6:f5:7b:f6:
                    d3:bd:e4:54:db:5f:ef:1f:48:de:22:ed:69:98:66:
                    5c:4e:b0:f0:7a:73:09:51:2c:57:66:30:c0:45:25:
                    7e:d9:3f:2a:a7:79:3e:f5:78:75:3c:a4:8a:ec:9b:
                    68:d7:6d:23:d1:ee:61:0a:1c:30:81:47:02:ad:79:
                    92:a6:9a:a3:97:ba:4b:e5:69:18:15:9a:41:18:20:
                    74:00:9c:0d:1b:33:d4:f1:21:c3:e8:cb:11:23:3c:
                    6a:7f:72:74:96:6a:2d:af:d3:73:4d:eb:25:f3:c5:
                    a8:85:ae:73:27:92:80:4c:dc:71:f0:24:7b:37:5e:
                    63:99:3c:c0:5c:ca:9e:c8:8b:1f:b7:4f:5b:70:78:
                    32:90:fd:df:f3:71:86:7e:3b:6a:08:03:18:4c:04:
                    19:47:78:75:21:a5:56:eb:73:7d:31:7a:a0:66:d1:
                    e7:bf:ab:9b:29:93:c3:ee:95:5c:ae:0a:21:ec:b5:
                    64:ec:17:02:6c:a5:b0:24:d9:92:2b:5d:0f:cd:76:
                    f3:e2:03:3a:8f:44:7d:22:a2:bc:78:c1:04:17:f6:
                    07:93:7e:80:6b:f2:8c:ec:06:bf:fd:64:ee:62:82:
                    69:79:53:06:71:0c:de:66:43:88:f1:88:38:1f:82:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:6C:B9:30:47:A0:2C:06:13:8A:FF:78:1F:13:65:07:53:B6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7da3f3b-40b1-3901-abf7-3a4d1c67d766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:6c:28:08:fd:b2:78:fc:04:8e:6e:12:22:db:b5:59:3e:
         4e:5a:9f:25:a3:f0:25:18:ba:4f:af:3c:bb:5c:f3:ab:6d:14:
         db:1a:03:dc:36:ab:13:3b:51:52:b9:a6:28:56:21:24:56:f7:
         45:d1:0e:76:e7:e9:4e:cf:98:3a:58:20:20:76:8e:45:21:6a:
         c0:fd:a3:08:58:6c:4d:3e:d9:14:59:9f:5a:87:bc:58:f4:4a:
         22:f3:9f:0b:bf:27:a3:55:a6:a1:f7:af:6b:f7:c9:7f:dd:5b:
         d9:d4:dc:c9:c6:31:65:4e:b8:db:ec:62:d4:38:cb:bf:4d:75:
         c6:74:6f:d0:86:fb:84:71:9a:8a:f3:c9:0f:b4:93:2d:37:f0:
         9a:26:bf:db:d5:d0:41:59:12:28:80:35:1c:bd:31:eb:00:d6:
         57:6e:34:b0:63:e2:92:5f:3c:3d:fb:85:b7:48:8a:6e:d8:b3:
         ec:82:42:f8:67:7d:80:2d:0a:2e:1b:4e:e7:64:23:b7:d5:33:
         b3:52:76:3d:f2:9e:02:a0:48:29:5e:bb:f3:cb:57:4b:4c:7e:
         0e:42:df:ae:72:88:34:f3:77:89:6b:f2:7f:8a:dc:11:48:9b:
         29:c9:80:96:e4:6e:16:4c:8a:d1:d5:bb:c5:60:1e:17:d1:4f:
         c4:9f:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:18 2025 by rpki-client