Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa
File:                     b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa (raw, json)
Hash identifier:          TAhNxb9pqdA+/mer0trPGAuiaav4Dyzlxhyz54m2yAo=
Subject key identifier:   B2:E0:47:B6:DD:20:F0:BB:50:84:70:C6:ED:E6:3C:8D:EF:3B:0F:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E00996AC6629B36A3C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396570
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e0:09:96:ac:66:29:b3:6a:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=16aa920a-4366-4891-adf6-e63407b3b7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:f7:98:ce:b8:70:a1:bd:d7:94:c0:7b:50:
                    cf:94:f5:df:fc:f3:ff:99:6c:0f:e1:43:68:d3:48:
                    ea:59:5d:6b:f7:91:ce:30:f6:91:da:52:97:e9:50:
                    e1:b9:f2:7a:b5:7e:44:3f:da:d1:03:29:af:e5:78:
                    82:0f:29:49:28:a7:b1:c5:75:cb:ee:19:bb:25:c4:
                    2d:db:73:c6:05:81:2d:cc:20:b8:6a:bf:a9:b7:08:
                    80:35:d7:ae:fe:78:e1:bd:13:25:54:28:9f:46:57:
                    7b:06:bd:98:59:88:ab:1e:21:e9:16:63:b9:6c:62:
                    a3:19:09:9c:ae:68:9f:e5:23:4b:fa:bb:0f:8c:18:
                    c7:ba:2e:cc:c3:30:90:00:7d:f8:17:49:c9:3e:e3:
                    27:29:59:7b:4c:55:48:ee:1d:42:dd:20:99:3e:db:
                    96:f7:d1:e9:50:a1:9d:21:3c:b8:c0:7d:17:eb:47:
                    33:89:f6:6e:04:53:05:94:d9:d2:52:00:c0:eb:6e:
                    2d:87:d8:46:c3:cc:84:10:17:c8:9e:52:9f:13:0e:
                    6a:23:82:be:0b:87:99:1b:a0:8f:04:91:d2:17:0d:
                    33:25:af:e5:c2:79:21:a7:eb:d1:30:36:64:d6:f0:
                    0e:5a:7c:ee:87:ba:88:53:bc:e2:56:05:c8:96:fc:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:47:B6:DD:20:F0:BB:50:84:70:C6:ED:E6:3C:8D:EF:3B:0F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1c20289-ad1a-3ac3-9832-39cdfa5b92a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:03:a3:49:1b:d4:67:43:3e:b8:47:7a:a8:f9:08:38:76:37:
         22:28:52:de:54:ca:08:bb:b3:61:d1:01:3f:4b:66:7f:e4:e6:
         22:a0:d4:0a:e0:ad:36:fa:61:ec:c1:2e:6a:34:95:7d:e2:30:
         b6:55:72:14:0e:96:2a:9b:1d:d1:d8:24:f4:f7:b0:3e:2d:8b:
         79:15:8e:31:d4:9c:25:df:eb:62:e8:14:99:d9:e5:4b:04:5c:
         88:5a:8a:bc:c5:ec:e9:49:52:a8:e3:6b:e1:d1:ab:20:83:69:
         64:3b:1c:c4:b2:a6:eb:9a:da:6c:27:c6:5e:65:22:8c:a4:25:
         87:e2:cd:3c:a5:d7:2f:3b:68:b3:12:67:1b:bd:df:f9:0a:bd:
         d7:ae:a3:3c:3f:12:31:44:20:60:4e:92:31:02:b9:ea:2f:10:
         39:d6:b5:4b:f2:a1:5b:d5:03:4c:8d:54:b8:2f:0b:04:44:b1:
         e5:2f:84:d7:59:75:2b:fa:d1:f4:7f:e7:7e:d8:65:17:41:55:
         0a:3b:96:52:0c:f5:9c:d3:be:49:2e:f5:0a:8b:f7:3a:45:0e:
         a5:82:fb:a1:b8:db:7d:e4:59:e5:4c:87:50:18:70:a5:fe:fb:
         02:05:04:9d:84:c1:79:d5:97:14:2a:1f:18:88:af:09:1f:f6:
         90:cc:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:46 2025 by rpki-client