Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa
File:                     fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa (raw, json)
Hash identifier:          KSeeGOwguplWGC96ez2TYwecR3SKC/RczJrKLNypXEI=
Subject key identifier:   FE:BF:79:90:04:6E:E4:50:C4:13:9E:33:DB:CD:73:CD:9A:FD:42:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF4E961D9300211658D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396572
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f4:e9:61:d9:30:02:11:65:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=1100aaf6-3b81-4790-9ca3-692e4189d48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:04:a1:0a:13:b8:05:52:bb:d5:38:1a:95:
                    29:cf:fd:8d:83:9a:ec:b3:58:d7:f9:9e:bd:a1:51:
                    46:b8:8c:68:d6:1c:5b:30:fd:5a:ea:0c:65:2b:49:
                    b6:e5:0b:6b:8f:49:bb:70:66:f8:97:4e:e6:0a:03:
                    4f:5a:a1:47:71:15:e4:71:dc:97:ad:57:4b:da:87:
                    97:f6:0e:bd:84:83:69:85:1b:42:d1:ec:34:3d:31:
                    06:8e:2a:8a:2a:9f:95:e1:26:a1:5e:2d:4b:3d:e2:
                    e3:23:f5:f2:f8:b6:e0:f5:63:72:07:78:ee:ef:13:
                    1b:e6:6e:db:59:6e:d6:5f:ce:35:a7:68:ce:0b:bc:
                    0d:3c:55:c2:ea:7b:08:e9:1d:93:32:cd:f6:01:e4:
                    64:e6:1c:c7:37:fd:a3:b5:be:83:3c:bc:ac:9e:e4:
                    e7:29:5d:b4:bf:49:e8:74:43:66:25:30:d9:70:21:
                    93:0a:50:b7:14:37:31:e8:17:54:f5:33:5d:6e:82:
                    66:9f:09:9e:34:71:8e:a8:99:c7:ae:30:3c:c3:49:
                    ac:af:e8:52:34:d8:be:f3:05:31:bf:65:be:59:b5:
                    6d:c5:cd:ad:83:4c:13:c1:b5:30:25:28:c9:57:02:
                    7c:d6:7e:b8:ef:12:c2:e0:6e:a0:fd:90:bd:f9:d9:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:79:90:04:6E:E4:50:C4:13:9E:33:DB:CD:73:CD:9A:FD:42:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:53:db:e8:8e:36:02:0f:3e:b5:b3:2f:03:c1:fd:f8:93:5c:
         9a:ce:d9:89:30:68:45:cb:3b:d3:c1:4c:b6:6f:e9:14:b4:3d:
         f6:ac:b3:0e:f5:d5:b7:fc:6b:b4:3c:ac:e8:be:cb:bf:e9:0a:
         d7:40:1f:bc:53:23:16:8e:91:f7:94:87:e7:b7:68:df:3f:89:
         10:4d:bf:9f:a4:27:39:7d:7e:7e:e4:c3:59:51:08:ce:52:50:
         61:7f:be:10:6b:4b:c2:a0:24:e8:53:20:98:c1:1a:7d:aa:8a:
         fd:d3:da:18:2d:c1:1d:0c:fb:30:f4:6d:e5:35:47:39:26:75:
         62:65:eb:a5:f8:dc:44:96:a3:03:d0:77:a0:cc:07:fa:f9:2d:
         23:c1:89:d0:43:1e:64:19:40:26:51:40:c9:01:8d:55:13:56:
         6f:8e:b4:91:03:3e:b5:c1:e2:6a:35:5b:ee:48:97:76:43:a4:
         1d:d9:dc:86:b5:ce:2f:46:58:88:8c:4b:9d:bc:ff:ba:3d:5a:
         ab:f7:ec:61:bd:7a:51:aa:c4:4a:9b:db:dc:ac:fa:b0:c7:c1:
         6d:7b:ae:f9:5d:b9:10:4b:f2:9e:39:af:de:3b:18:75:15:ea:
         6b:bd:4b:9d:f0:9f:82:6e:6b:f6:c9:5c:5a:42:a7:d4:cd:a1:
         5b:99:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:35 2025 by rpki-client