Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d801f480-7e3f-3bb1-81c2-25a4007bec78.roa
File:                     d801f480-7e3f-3bb1-81c2-25a4007bec78.roa (raw, json)
Hash identifier:          v24OMAo5SV/b49JbPieJrA2azgjBC9zM2evCJjG409M=
Subject key identifier:   E3:92:0E:9B:C8:97:AD:A4:06:25:E5:73:4D:CB:FC:ED:EB:7E:B5:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7843FC8C6E2E9AA8DD19680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d801f480-7e3f-3bb1-81c2-25a4007bec78.roa
Signing time:             Thu 30 Jan 2025 13:46:17 +0000
ROA not before:           Thu 30 Jan 2025 13:46:17 +0000
ROA not after:            Wed 30 Apr 2025 12:46:17 +0000
asID:                     396575
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:3f:c8:c6:e2:e9:aa:8d:d1:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:17 2025 GMT
            Not After : Apr 30 12:46:17 2025 GMT
        Subject: CN=8c175ea2-0d23-4603-9405-a133b4cb5c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:8b:38:1d:3a:75:d2:fb:04:28:2b:5c:bd:
                    01:14:44:a1:23:b1:66:bf:4a:28:9c:33:81:a8:0a:
                    e0:67:b6:f8:a2:4f:be:c3:d9:33:93:ae:2c:30:d3:
                    77:69:cf:d7:28:ee:76:0f:bd:41:40:4a:b8:61:fa:
                    21:fb:43:af:10:b7:0a:6b:2e:04:89:c3:22:63:c9:
                    92:20:5f:72:0c:73:c7:6c:26:07:35:f5:db:c1:c5:
                    1f:e4:db:3b:bc:02:e4:36:d1:91:fd:a3:49:6d:dd:
                    94:82:53:96:36:5e:1a:d0:d7:5c:a6:bc:0a:33:50:
                    0e:c8:d4:bb:cc:1f:99:ae:dc:e2:fc:d2:c0:fb:be:
                    44:6e:7b:1c:d9:10:b2:ca:08:81:3a:cf:2c:38:3c:
                    1b:53:41:9e:e5:76:ec:c9:0d:5d:5f:96:7a:84:b9:
                    53:89:6a:ea:05:47:f5:e5:a9:52:01:eb:f1:b8:f8:
                    be:b3:8b:47:0c:04:fb:21:f2:d1:2b:dc:80:b1:45:
                    71:32:25:64:20:5f:42:9b:01:0a:33:f4:a3:f7:fe:
                    db:7b:59:ab:3c:d7:5a:de:ec:36:f4:2d:9c:b6:30:
                    2e:91:79:9a:dc:7e:c7:d7:c4:d4:54:62:65:55:d0:
                    e7:b1:47:38:8e:3d:a7:eb:84:c5:53:af:ce:61:a5:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:92:0E:9B:C8:97:AD:A4:06:25:E5:73:4D:CB:FC:ED:EB:7E:B5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d801f480-7e3f-3bb1-81c2-25a4007bec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:47:6b:0b:74:9f:3e:ac:44:00:94:f7:e1:13:eb:af:2d:
         ea:8d:96:6a:cb:37:b1:94:43:9c:e9:60:6c:c8:38:d4:d4:47:
         59:0a:7e:45:96:99:64:2d:2e:f9:30:7f:22:80:2d:2e:60:ce:
         a1:6d:d4:3e:68:31:73:ce:b0:da:9c:94:3d:cf:43:eb:f4:42:
         c2:d4:9a:79:a0:04:8a:fa:86:f4:bd:2f:97:04:74:35:7b:dd:
         61:7a:25:f6:39:70:86:ef:92:58:a4:22:c5:78:f1:07:de:0b:
         7a:7a:6f:cb:52:a2:6b:f4:31:b1:75:bf:cc:ce:8d:36:c1:e0:
         91:01:30:11:73:12:eb:bb:ef:92:b2:f2:af:05:0d:94:03:30:
         5b:0d:b5:a0:16:ae:72:d2:6c:af:b1:51:7c:3b:ca:12:ff:f0:
         15:ee:47:be:83:0d:d3:c7:7f:74:61:c6:4d:e1:0e:28:1d:83:
         50:f9:55:ad:d6:2e:41:18:7a:f0:c5:d9:53:23:7e:ed:e1:bd:
         b4:a5:80:c4:10:90:77:be:07:1e:8d:29:1b:fc:89:0d:85:49:
         72:d3:ad:17:86:d2:28:59:cc:7d:e5:12:2b:4b:ed:b6:1d:23:
         f0:8d:db:84:1d:12:34:71:fb:83:9e:a8:10:a8:05:6f:37:97:
         2c:b1:2c:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi3hD/IxuLpqo3RloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMDEzNDYxN1oXDTI1MDQzMDEyNDYxN1owLzEtMCsGA1UEAxMk
OGMxNzVlYTItMGQyMy00NjAzLTk0MDUtYTEzM2I0Y2I1YzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56eLOB06ddL7BCgrXL0BFEShI7Fmv0oonDOB
qArgZ7b4ok++w9kzk64sMNN3ac/XKO52D71BQEq4Yfoh+0OvELcKay4EicMiY8mS
IF9yDHPHbCYHNfXbwcUf5Ns7vALkNtGR/aNJbd2UglOWNl4a0NdcprwKM1AOyNS7
zB+Zrtzi/NLA+75Ebnsc2RCyygiBOs8sODwbU0Ge5XbsyQ1dX5Z6hLlTiWrqBUf1
5alSAevxuPi+s4tHDAT7IfLRK9yAsUVxMiVkIF9CmwEKM/Sj9/7be1mrPNda3uw2
9C2ctjAukXma3H7H18TUVGJlVdDnsUc4jj2n64TFU6/OYaWAfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOOSDpvIl62kBiXlc03L/O3rfrXWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDgwMWY0ODAtN2UzZi0z
YmIxLTgxYzItMjVhNDAwN2JlYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAT0UdrC3SfPqxEAJT34RPrry3qjZZqyzexlEOc6WBsyDjU1EdZCn5F
lplkLS75MH8igC0uYM6hbdQ+aDFzzrDanJQ9z0Pr9ELC1Jp5oASK+ob0vS+XBHQ1
e91heiX2OXCG75JYpCLFePEH3gt6em/LUqJr9DGxdb/Mzo02weCRATARcxLru++S
svKvBQ2UAzBbDbWgFq5y0myvsVF8O8oS//AV7ke+gw3Tx390YcZN4Q4oHYNQ+VWt
1i5BGHrwxdlTI37t4b20pYDEEJB3vgcejSkb/IkNhUly060XhtIoWcx95RIrS+22
HSPwjduEHRI0cfuDnqgQqAVvN5cssSwV
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:32 2025 by rpki-client