Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3a69174-0ef8-3a74-9ebd-1792ad5fd30b.roa
File:                     b3a69174-0ef8-3a74-9ebd-1792ad5fd30b.roa (raw, json)
Hash identifier:          E0uantrPNq92epbYYQS0GSH6WihKcXBiBrqIllvF1ZE=
Subject key identifier:   B1:5E:CA:EC:F0:A3:13:90:13:FE:8D:0D:B9:79:1F:B0:60:F0:9D:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF75896028882F4CA5EAB5E8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3a69174-0ef8-3a74-9ebd-1792ad5fd30b.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     36620
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:89:60:28:88:2f:4c:a5:ea:b5:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=6e2f89ad-9133-4e6f-ad00-8712ec35d6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:1a:04:76:fa:39:b0:10:34:73:94:9b:de:
                    a5:1d:b8:82:9d:b4:76:fd:49:56:4a:5e:a2:20:84:
                    7e:b8:cf:9e:24:8e:8b:fe:fd:6e:16:c1:de:07:89:
                    93:1d:19:4d:6d:4f:8a:8e:f7:cf:76:ac:27:98:e7:
                    41:66:a6:bf:2f:6b:14:63:09:23:27:63:fd:65:be:
                    95:3b:28:87:c7:bf:95:d9:72:83:82:db:72:51:2c:
                    7e:3d:51:e1:75:c8:24:26:9a:be:d0:41:50:22:76:
                    b7:42:66:7c:ec:bf:14:e2:3d:8c:f2:b6:f9:d0:cd:
                    08:38:56:63:26:66:fa:28:f4:fc:f8:77:a9:31:41:
                    06:ed:82:f1:e0:ed:3d:8b:fa:b7:2a:89:37:57:1c:
                    7d:ca:b1:b0:ff:43:d8:10:a0:14:02:47:22:64:fd:
                    5e:d9:65:83:51:de:a7:33:df:87:5b:0e:93:b3:32:
                    54:c9:dc:8e:82:f1:91:68:48:1f:70:3c:2a:5c:5c:
                    83:a3:b7:2b:e8:19:20:fb:c1:73:97:20:fe:93:5b:
                    7e:9d:38:6e:9e:a5:73:9b:49:fa:fa:86:9e:1b:85:
                    27:d8:b7:47:f0:a6:c1:8f:9d:eb:18:be:71:36:cc:
                    9d:68:c3:0c:33:b7:88:5b:39:11:63:ba:8f:38:7a:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5E:CA:EC:F0:A3:13:90:13:FE:8D:0D:B9:79:1F:B0:60:F0:9D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3a69174-0ef8-3a74-9ebd-1792ad5fd30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:57:ff:3f:6b:c4:97:b8:5c:8b:1f:b7:16:93:fc:39:d5:
         19:99:09:19:2f:aa:a1:6b:58:2d:5f:02:5b:23:3d:dc:49:6e:
         71:a7:3f:e5:6d:63:29:81:95:51:0b:02:ec:bb:97:ed:dc:c6:
         c8:47:64:32:d3:e9:2a:4e:0b:89:31:aa:06:49:d4:17:18:5d:
         8e:2c:70:bd:39:7f:a9:58:42:cb:4b:11:a5:c8:6a:9a:68:d8:
         91:83:02:92:52:2c:a0:da:cc:b4:79:ec:f5:2c:c0:8c:e8:fe:
         f6:ed:79:44:b0:96:61:37:4f:3d:7f:f7:8f:11:87:78:97:ab:
         60:ec:bb:7a:b3:f1:f6:7c:af:7e:ba:7d:22:81:97:a0:1a:4c:
         fe:db:2e:44:2b:f9:22:be:87:57:0d:0d:f9:d2:a0:e8:c5:69:
         fc:c9:09:74:d2:dd:a8:75:fe:6e:cb:a4:fb:61:89:19:19:12:
         d9:dd:55:ad:02:ea:90:c5:8f:70:0b:8e:26:68:b3:02:f7:64:
         08:06:1e:23:ce:13:f3:51:eb:82:37:e0:b4:01:2d:64:72:9c:
         3d:a3:f3:d5:4f:30:5f:57:14:36:3d:fd:5c:21:0e:31:dc:8c:
         f4:f2:4c:d4:db:46:fb:18:9c:c3:2f:3f:c5:37:0b:e0:a6:0e:
         86:67:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:45 2025 by rpki-client