Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11e995db-33f1-3c77-82ec-38322f4c48e3.roa
File:                     11e995db-33f1-3c77-82ec-38322f4c48e3.roa (raw, json)
Hash identifier:          I+Oxyo6N25L9SgY39Tiz1wjhm2QmqOBxEBATiVxijyY=
Subject key identifier:   68:56:A0:62:CA:17:9B:A1:C0:FA:15:CF:6E:3E:AB:ED:A9:B6:84:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498E64A8B0B246979176D01AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11e995db-33f1-3c77-82ec-38322f4c48e3.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     397200
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a8:b0:b2:46:97:91:76:d0:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0c25ed86-9603-4bdd-b26b-1717b3215b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:40:9a:04:a7:fc:2a:4a:54:2c:32:50:ca:
                    8e:7f:5f:2f:bc:e1:50:7d:66:00:78:03:bc:bb:05:
                    d7:70:ce:65:00:94:53:27:01:e9:a9:42:51:ac:b4:
                    20:f7:a1:15:48:52:79:b6:c9:be:46:8e:c8:0c:d9:
                    2b:c0:56:aa:cb:f7:49:4a:98:e4:fd:31:6d:d1:52:
                    d4:3a:b2:ad:83:70:49:62:94:00:8a:1f:53:fb:b3:
                    2b:50:75:cb:09:d8:38:ba:8a:94:71:bd:97:17:8c:
                    7b:05:d9:c3:a2:6d:40:fd:68:20:86:f3:a4:50:b0:
                    6d:a5:94:93:73:3f:02:4a:11:16:a6:9b:26:1d:93:
                    b7:73:a3:d3:92:7e:53:39:98:42:3a:cd:29:b0:4d:
                    89:2f:53:ac:98:68:2d:e0:18:b3:d2:e4:2f:5e:8d:
                    ae:9c:82:1d:ba:e5:82:2a:1d:38:46:46:1c:5a:ed:
                    ae:7a:3e:b0:da:81:d2:be:bc:0d:8e:95:3e:6c:08:
                    2b:a0:3a:01:c9:36:cf:ee:3d:4b:44:12:56:7f:00:
                    b3:47:38:9f:fd:0c:ea:6e:b7:93:f6:05:9e:f5:85:
                    70:95:68:5b:48:e7:aa:21:24:30:fd:df:98:e5:ce:
                    c4:97:e5:fe:f8:30:28:30:4b:76:90:92:9a:f0:0a:
                    f8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:56:A0:62:CA:17:9B:A1:C0:FA:15:CF:6E:3E:AB:ED:A9:B6:84:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11e995db-33f1-3c77-82ec-38322f4c48e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:97:bb:15:17:59:01:f7:09:b4:d4:cc:25:fe:40:85:62:
         50:1f:4b:6e:82:48:4c:28:7d:4f:23:30:8a:5c:5a:70:6e:04:
         c5:3a:88:f1:38:02:c0:99:74:ba:7d:3d:11:7e:55:43:eb:ac:
         79:20:60:8b:b6:60:3c:70:cf:d9:bc:ac:2a:15:cd:5e:e1:9a:
         e7:8c:da:1f:7b:03:82:7d:ad:b8:06:94:da:1c:00:a6:ea:0a:
         9d:92:ba:da:48:27:3d:4b:34:9b:e5:36:28:e6:2c:03:f4:47:
         f7:50:3b:ac:53:40:7e:a9:85:18:88:f2:ba:ee:34:a6:49:0e:
         46:7c:58:96:c4:cd:76:66:1f:2d:b5:24:5f:5f:34:46:27:bc:
         26:08:ec:00:e8:20:7a:68:49:df:2f:ff:16:0a:00:ab:87:11:
         fd:c8:e5:ca:1f:56:b0:e6:d0:85:c1:41:24:20:5b:bf:eb:f2:
         16:27:ec:20:51:35:92:a7:c8:97:14:91:e2:c8:92:b9:ea:23:
         ef:20:b5:1d:e7:49:9e:0a:63:dc:2e:84:03:cc:5a:25:ac:3a:
         7f:d6:8d:9e:2d:51:5c:51:38:81:6c:07:33:50:f9:b3:b9:21:
         1c:c8:c4:22:c3:fb:cc:56:9b:19:be:05:ef:db:19:4b:e5:f9:
         c4:64:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:08:47 2025 by rpki-client