Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b9258-d259-3992-93e5-c21d21ecfb30.roa
File:                     de6b9258-d259-3992-93e5-c21d21ecfb30.roa (raw, json)
Hash identifier:          4N96sbmHhdYP5C+RJzpkFAKrMMV7KL/QhQN+gHtgNtw=
Subject key identifier:   45:3B:65:E2:8F:97:CC:4A:63:23:62:5C:3F:74:A1:CB:6B:08:60:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C7EA1B0D2093D02846D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b9258-d259-3992-93e5-c21d21ecfb30.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396572
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:7e:a1:b0:d2:09:3d:02:84:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=a0d0963b-08a6-42a8-a0a2-8543aa7dfd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:ca:8d:4b:3e:ee:ea:5e:92:8c:ab:06:90:
                    ad:8f:0a:06:6e:1a:6a:f6:ca:fc:60:a6:38:e1:c5:
                    72:f3:9a:bd:8a:56:d2:06:44:b1:92:1f:ba:6c:95:
                    b2:1e:4b:06:b0:dc:21:6b:84:bc:1a:85:a7:eb:2d:
                    0d:17:c9:c3:d2:60:6a:f1:4c:b0:57:a2:bc:d3:ba:
                    34:7b:97:40:de:bd:d5:de:e5:f4:4a:0e:4f:4b:18:
                    67:c7:7d:5d:09:96:b3:c9:a6:3e:30:c3:06:6c:13:
                    29:60:e3:af:59:de:3e:fa:6c:b6:b9:fd:e3:ac:b5:
                    5a:ee:5c:07:c1:4e:68:d3:cd:e3:cf:c0:48:9e:08:
                    c1:78:0d:9a:35:ea:71:01:30:34:2b:6a:36:10:52:
                    dd:e6:a0:aa:f4:90:74:12:70:32:b0:e7:19:6b:c3:
                    ba:8f:3b:d2:dc:a9:78:3a:c4:05:3d:01:16:3f:8f:
                    31:90:2f:93:e5:36:e5:0a:df:0d:65:f1:35:05:31:
                    d1:45:35:90:b5:50:9a:bd:fc:39:fe:a7:b9:97:0c:
                    05:2e:ff:f1:97:08:f4:6c:80:e9:df:1d:cd:df:ae:
                    c8:40:d5:b3:1a:0a:37:c6:b3:77:c7:b7:04:fc:ca:
                    7d:31:65:bb:16:47:36:71:81:44:62:29:46:1a:a0:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:65:E2:8F:97:CC:4A:63:23:62:5C:3F:74:A1:CB:6B:08:60:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b9258-d259-3992-93e5-c21d21ecfb30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:3e:9c:68:c2:d2:8c:80:bd:9c:44:48:d3:e0:65:11:16:
         79:bb:7a:70:86:c3:53:d6:a9:c3:ef:13:ba:97:9c:aa:e1:0f:
         d2:d9:ad:d1:b0:63:65:0f:96:4d:a0:96:09:13:80:54:dd:22:
         34:22:c1:4d:44:16:c6:cb:73:ef:fc:0c:49:cb:1f:f8:cb:77:
         f2:5c:f7:e8:7c:37:03:c9:32:ea:cd:b8:b5:59:13:11:03:e2:
         c0:5c:e0:ee:37:ae:6f:42:c7:7a:c6:43:b6:02:85:f1:da:b7:
         68:9a:bd:62:a1:83:5a:bf:3a:8e:41:d1:64:93:e1:01:b7:3d:
         6b:56:22:e0:31:44:a1:c6:46:33:98:0a:53:89:aa:3f:3d:e7:
         3e:c2:2b:78:59:48:84:e5:c7:b0:e7:26:ce:68:a7:ce:20:6b:
         42:1f:ea:99:21:f4:f1:8f:4d:1a:d8:b3:68:10:18:1a:4d:d6:
         da:a0:5c:23:d9:97:67:f5:72:ec:1a:04:80:16:8a:01:bf:d9:
         e3:5c:ff:5f:98:67:a3:ee:b5:4f:15:e3:e1:4d:0f:2a:3d:ad:
         2b:4a:9a:d0:12:08:05:fe:c6:be:6f:3d:2f:76:eb:c9:ee:05:
         34:d0:f9:44:01:8d:ef:f6:e3:23:b8:26:7b:14:ea:ba:05:ea:
         80:3b:06:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:15 2025 by rpki-client