Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa
File:                     f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa (raw, json)
Hash identifier:          jOVqK7q5bXSK5OWLusdc0AQdM5mkk7TXCc1+aGuGeGI=
Subject key identifier:   AF:FE:69:A3:12:3E:85:78:EE:53:FE:80:CA:DF:6F:5A:78:C7:F3:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB080DE374108D89E37C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396567
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:08:0d:e3:74:10:8d:89:e3:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=90de6149-ba8e-4dae-b9c9-6b96cedc912e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:da:59:37:8c:17:60:91:5f:12:e9:c1:74:
                    22:16:2e:85:eb:75:47:38:73:e6:2e:50:ca:d4:97:
                    fc:f5:82:b2:2b:73:1d:f0:fa:aa:a3:89:62:7c:84:
                    03:59:01:ae:8e:60:d5:da:68:8e:e7:b6:02:78:91:
                    58:ad:6a:d2:61:31:6c:99:74:22:da:9b:6e:c5:7c:
                    5d:06:ba:c5:66:7b:50:ae:2c:09:0d:98:4c:24:db:
                    92:dc:2f:63:80:9f:59:97:d7:fe:ab:8b:c5:9b:7b:
                    aa:c5:5b:11:5b:5c:44:74:1d:ee:0b:3d:21:7b:fe:
                    ae:f6:39:c9:c3:23:b9:c1:20:e4:c3:0b:a1:bf:df:
                    d5:3a:1b:bf:04:b3:3e:03:c9:d0:00:71:59:25:83:
                    e5:b6:f2:52:59:0f:82:86:9a:57:53:86:33:33:b0:
                    bf:54:bf:72:c7:09:b2:5e:cf:3a:63:a6:28:48:a1:
                    b9:1f:f1:75:bc:dd:50:44:cd:ec:ab:7b:de:04:f9:
                    6d:44:c5:16:93:5a:c5:45:b9:ac:2c:fc:44:3d:05:
                    39:aa:33:e7:65:72:b1:13:5e:79:05:a7:b1:e7:23:
                    5d:5f:b7:28:fe:e0:0d:3e:b3:5d:91:af:c0:d2:15:
                    13:42:27:36:1d:be:ab:3f:68:58:94:a4:7f:5a:36:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FE:69:A3:12:3E:85:78:EE:53:FE:80:CA:DF:6F:5A:78:C7:F3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:c5:c2:cb:da:26:84:e1:df:f8:c0:37:c1:79:85:6a:49:
         ac:69:a7:ee:f1:0d:c0:49:94:6c:da:8c:6b:4c:5a:fb:b1:19:
         3f:74:71:9e:7a:98:bc:e4:bd:d3:6c:ff:a8:91:ed:98:dd:32:
         9b:1b:b9:1b:ac:e3:dc:20:67:ce:d9:ee:ad:db:dd:5f:70:a7:
         fb:39:3d:f8:aa:50:d2:23:2e:76:07:cf:91:d9:ba:5e:a1:cf:
         4c:33:cb:66:63:79:62:66:ab:7f:a9:da:75:85:73:1d:46:29:
         2f:d9:ae:24:07:e8:2f:3f:55:9c:d9:0b:cf:5c:38:a9:05:47:
         c2:f5:31:2b:cb:88:ca:62:88:89:a3:0c:42:6a:4a:b7:87:c0:
         12:9e:b5:e5:87:fe:bc:db:67:17:cd:19:c0:e5:15:c3:b1:d7:
         e0:34:48:bd:e5:84:b1:a7:90:38:24:6a:98:4a:43:6a:f2:14:
         47:fd:4d:f1:e8:58:48:d2:1d:2c:ba:62:4e:61:fb:eb:f6:8f:
         6f:dd:7c:4a:80:90:da:a9:c8:e3:e5:b2:85:01:8c:50:12:53:
         4d:67:46:cc:56:ea:0a:ab:b9:2e:2f:2f:68:7b:35:58:d5:71:
         e1:18:49:dc:bb:e5:30:77:5d:12:99:0b:9a:fe:34:7b:67:f6:
         fa:8f:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:06:10 2025 by rpki-client