Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f195e177-676e-3a0b-abd9-d1a23bcf36da.roa
File:                     f195e177-676e-3a0b-abd9-d1a23bcf36da.roa (raw, json)
Hash identifier:          ohV4xworZAcK2ognUwD5+amwkKsPk0Mv/2YO/g7TLBA=
Subject key identifier:   41:E3:3B:92:7F:BC:69:ED:B5:E7:78:B2:3F:6E:C3:BE:71:AD:93:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB157D95E8B8A035769BEE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f195e177-676e-3a0b-abd9-d1a23bcf36da.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396569
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:57:d9:5e:8b:8a:03:57:69:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=2067e935-68a3-4076-897d-0f549b6e64ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:04:4e:63:fe:53:42:50:f5:0c:e9:7c:f8:66:
                    7e:a1:6d:fd:f4:11:79:7c:2c:11:ce:e9:d7:43:18:
                    79:f8:ef:d4:84:11:51:ea:79:2a:a6:f0:11:46:c2:
                    d4:dd:37:86:d5:63:6b:c0:8e:44:e3:0d:0e:b8:be:
                    f7:b2:12:2c:2c:84:73:bc:81:43:78:e1:04:59:05:
                    71:0f:b0:e4:88:ae:93:15:39:48:d7:78:e6:70:dd:
                    82:3a:98:42:69:4b:4d:34:89:d3:e0:d2:0c:81:13:
                    c3:83:d2:11:c2:cb:d2:cf:e6:5b:0f:70:77:58:13:
                    cf:eb:31:cb:15:96:7e:d4:42:bc:fc:02:f0:49:5f:
                    10:b1:99:c3:5d:87:0f:21:69:a9:e1:76:c0:2c:4d:
                    63:3e:84:04:97:4b:28:a9:3c:5b:47:5e:1a:06:66:
                    26:3a:8c:ee:eb:20:bb:9e:6d:0a:b5:1d:5b:40:ab:
                    14:b4:04:ec:38:0e:a1:bc:96:b3:59:1d:9a:a4:18:
                    5d:d2:aa:67:91:e5:98:7c:a1:40:57:c3:05:3c:bf:
                    23:a0:cb:3d:8e:0d:78:13:35:41:88:20:45:31:ca:
                    dd:03:3b:b9:b6:7f:29:25:44:6e:2a:ee:e8:d8:cd:
                    c0:e3:1f:29:e9:2b:d3:a6:98:7d:8b:b1:27:c5:3c:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:3B:92:7F:BC:69:ED:B5:E7:78:B2:3F:6E:C3:BE:71:AD:93:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f195e177-676e-3a0b-abd9-d1a23bcf36da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:67:0e:4c:ca:de:a0:db:f9:23:6e:e0:fc:48:37:85:cf:
         cf:13:4c:56:fa:bd:59:66:cd:1c:4e:32:fd:17:a1:b0:c1:35:
         08:c0:86:6e:97:a9:0e:a0:d5:5a:53:d5:90:b7:39:fd:ce:d8:
         b5:c0:58:59:fe:c5:6d:5c:5f:e8:cb:e0:25:a4:cb:06:36:29:
         54:13:f4:13:d1:ae:89:38:bc:89:7d:15:7f:a0:40:bf:a0:a8:
         0f:21:03:0a:c7:d8:63:cc:54:24:e2:93:1f:59:3d:ba:de:2f:
         db:87:85:0d:1d:42:01:79:45:df:66:66:6a:1b:c4:4f:9c:2c:
         43:ff:f1:24:46:1b:e6:b8:15:c9:25:fa:f9:b0:2a:07:40:d1:
         e8:0a:2d:75:1a:c7:15:a3:15:4a:d1:fc:f6:7b:87:16:b4:29:
         b8:87:dd:20:cb:f8:8a:47:46:20:f1:fb:67:89:82:bf:cd:44:
         e9:a2:be:f7:9b:9f:07:62:3d:1e:e2:3c:9e:5d:08:b7:c4:7a:
         e2:47:b1:23:26:47:56:8b:86:3d:62:a0:7d:85:d2:80:ca:db:
         cb:b7:2f:a6:93:3b:bd:83:93:bd:ca:14:d0:2d:84:fb:69:3d:
         fa:49:ac:69:be:76:f2:00:04:8f:8c:df:d5:bc:c8:71:c6:55:
         cd:8e:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:41 2025 by rpki-client