Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb00f958-6305-34b6-bebc-121244e5322a.roa
File:                     fb00f958-6305-34b6-bebc-121244e5322a.roa (raw, json)
Hash identifier:          es7u+z090UdbT6bbX0ZCmhHSz/WC4dvtuB9GASGei7U=
Subject key identifier:   D7:51:F4:F2:4D:B7:6A:09:11:E5:E0:A8:3E:1E:5B:A5:18:4F:14:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB092B92CF694E2C7BD3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb00f958-6305-34b6-bebc-121244e5322a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396586
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:09:2b:92:cf:69:4e:2c:7b:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6f71084d-f2b3-4f77-ae41-70a66991c22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:95:73:a6:9a:ba:c7:14:fb:49:b7:81:ba:12:
                    76:a2:f7:e4:21:ed:07:6a:56:15:8e:a2:bc:c5:d3:
                    6c:4e:3a:f0:95:06:43:39:8d:bc:ad:a3:0c:66:31:
                    52:d9:cd:02:7f:8c:33:95:ed:0e:8d:f0:67:27:e8:
                    5b:a7:ab:15:f3:25:90:4c:e4:38:08:70:38:b0:48:
                    2e:23:ae:27:29:f8:97:7b:fc:c2:d6:c7:45:fd:b5:
                    51:c7:cd:99:9a:25:02:a7:e4:02:e8:15:a3:5d:68:
                    93:f7:8a:8b:07:4a:dc:12:62:ed:10:72:31:e6:1c:
                    8d:b1:a2:87:78:fd:4e:e8:8e:3a:bf:60:df:aa:0a:
                    ee:66:e3:94:88:1e:49:be:f9:5b:22:48:e9:16:db:
                    6d:ab:cb:b4:cd:40:51:d6:85:06:dc:90:8b:be:5c:
                    ac:ed:f9:93:c7:57:78:42:2c:ae:2c:88:0e:a9:27:
                    2e:7f:bd:a4:02:5c:05:8b:81:97:06:13:b6:c4:f8:
                    ff:31:5b:2b:e9:c7:a6:83:46:59:87:dc:e5:a2:44:
                    4a:61:5d:8b:ef:5a:27:a1:8a:69:7c:ed:be:7a:f2:
                    dc:b6:67:33:b0:2c:04:29:c9:62:17:0f:1a:9b:a2:
                    fc:85:ba:53:01:fd:a8:4c:ba:12:3c:29:b4:d7:60:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:F4:F2:4D:B7:6A:09:11:E5:E0:A8:3E:1E:5B:A5:18:4F:14:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb00f958-6305-34b6-bebc-121244e5322a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:15:f9:16:72:23:9b:95:93:6d:70:f4:b6:4a:e9:d6:7c:
         6b:58:cd:2f:4c:d6:ce:d5:ad:3c:a2:03:ad:e0:36:5c:4b:6c:
         68:2c:c6:0f:fc:09:fb:1c:82:fa:bb:fe:9d:f8:9e:43:88:e7:
         12:9d:b0:a3:45:83:b0:79:7b:5a:35:72:76:c8:0b:25:19:08:
         6f:c9:09:d7:4f:a4:9f:4b:b3:2b:76:03:96:77:de:8e:54:d6:
         da:70:bf:29:ef:1b:f6:6b:b9:ba:d0:f3:7c:c9:fa:b7:ef:79:
         41:1d:23:80:35:91:ba:cd:da:b7:2d:e8:ec:f1:3b:89:29:d4:
         be:08:c8:6e:96:fb:ee:c9:4b:1b:5f:2b:ec:70:67:42:a1:c6:
         2e:a9:b9:31:0c:24:89:d0:37:89:3e:47:9e:f6:b9:74:91:73:
         20:41:ed:27:e3:d8:8a:38:75:34:6d:4f:ab:ac:f6:1e:50:78:
         fe:12:6b:dc:72:d9:d7:bc:e9:b2:54:c2:64:64:ab:4f:3d:84:
         4a:93:47:1f:93:5f:75:8c:29:dd:b1:33:58:d2:8c:26:a5:c7:
         04:1c:ad:de:ac:6a:a9:1c:61:00:7e:d2:02:31:fc:e6:07:80:
         05:b7:29:50:02:10:82:b4:ad:7f:a8:46:e6:b6:70:50:58:0e:
         6b:11:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:44 2025 by rpki-client