Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa
File:                     1398b2ca-4578-35a3-8153-34f01ea14169.roa (raw, json)
Hash identifier:          y02z1XehQgLPSptvqMaox35Co210Ra/FwslwOnueRNs=
Subject key identifier:   95:30:99:5F:EB:A0:CC:BE:26:5A:E8:6D:A0:7A:30:3E:DF:F0:37:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993FA009BD7AF85F989AD4B60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396594
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:00:9b:d7:af:85:f9:89:ad:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=2bd12662-174c-406b-aef5-3eb19f0af8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:05:5d:1e:ba:09:eb:ea:e9:6e:b9:90:09:
                    f0:bc:39:8f:18:55:0a:79:39:1c:30:c6:de:e3:e1:
                    12:71:33:f5:22:56:95:cc:b2:0c:57:71:74:8f:cc:
                    51:5f:0f:3e:e0:4f:1e:ba:a8:0b:72:d5:a3:27:ca:
                    dc:d6:a1:bc:e2:37:5d:0a:61:fc:b0:a5:23:ca:88:
                    f0:79:31:52:b6:24:39:1b:a6:74:cb:0a:24:70:6c:
                    70:25:61:52:17:6e:d1:cf:76:fc:b3:fd:a6:c7:e5:
                    71:36:47:3e:55:b9:b6:8e:4b:d3:56:ea:1c:0e:b2:
                    ea:cb:d4:9c:91:6a:78:83:2f:85:09:5d:50:22:10:
                    d3:b8:6f:29:37:72:6b:9e:9e:b5:a9:de:f1:37:58:
                    a2:5e:3a:1b:0f:6d:3a:41:c8:24:01:17:55:0c:07:
                    eb:3a:3b:99:9f:51:b4:aa:a0:50:e5:77:ca:79:45:
                    df:9e:a9:05:b8:fe:24:53:72:2c:32:06:12:e2:d0:
                    24:c9:7a:ea:33:2c:e5:3d:3a:6c:88:be:9b:6b:34:
                    7a:bc:89:6e:76:ab:46:b0:72:4b:de:05:8a:f6:0d:
                    64:00:07:4b:1f:bb:9c:59:92:7d:bc:af:89:8d:95:
                    f2:27:ac:7d:c5:26:ed:3a:9e:ef:d2:f7:bd:a8:a1:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:99:5F:EB:A0:CC:BE:26:5A:E8:6D:A0:7A:30:3E:DF:F0:37:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:9d:cd:9f:d5:18:eb:a3:34:50:70:7e:0c:dd:fa:bf:31:
         15:50:88:be:02:5c:9f:0a:e4:04:88:bf:fb:5f:c8:e4:d8:44:
         d8:96:cf:fb:83:09:8c:f9:17:9a:12:98:df:84:e6:ff:05:1e:
         53:f0:e5:57:3c:be:29:59:33:9c:c5:cd:0c:13:0d:91:cd:68:
         97:6d:df:64:fc:00:d6:63:e1:9b:19:6a:7c:9c:cc:97:5a:a1:
         f3:87:db:6d:16:c4:cf:51:ea:ae:2e:76:bc:44:f8:69:7a:7f:
         76:fa:ce:86:37:af:0c:d0:47:23:46:6f:77:bc:f9:29:90:f9:
         bc:4a:00:26:4a:a1:f4:ee:19:f1:cc:d4:38:8a:4d:26:4d:bc:
         66:e2:17:64:c2:09:2b:14:e3:10:fc:44:ba:58:5b:d8:f7:af:
         9f:3f:83:af:22:a2:63:2a:d4:fc:83:00:9e:c1:44:76:df:cd:
         97:0f:69:db:b2:40:07:d7:f7:3c:6c:78:66:ca:64:8f:53:57:
         77:6a:77:41:7b:a1:41:7c:19:cf:48:39:bb:40:e2:c0:a2:b8:
         7e:a7:72:3c:f6:76:b6:db:b4:cd:a2:12:36:98:dd:ac:6e:a0:
         42:79:b8:1f:a9:33:bd:72:17:ef:70:73:0a:43:74:e7:8f:0b:
         01:e5:b7:e9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+gCb16+F+YmtS2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
MmJkMTI2NjItMTc0Yy00MDZiLWFlZjUtM2ViMTlmMGFmOGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJQFXR66Cevq6W65kAnwvDmPGFUKeTkcMMbe
4+EScTP1IlaVzLIMV3F0j8xRXw8+4E8euqgLctWjJ8rc1qG84jddCmH8sKUjyojw
eTFStiQ5G6Z0ywokcGxwJWFSF27Rz3b8s/2mx+VxNkc+Vbm2jkvTVuocDrLqy9Sc
kWp4gy+FCV1QIhDTuG8pN3Jrnp61qd7xN1iiXjobD206QcgkARdVDAfrOjuZn1G0
qqBQ5XfKeUXfnqkFuP4kU3IsMgYS4tAkyXrqMyzlPTpsiL6bazR6vIludqtGsHJL
3gWK9g1kAAdLH7ucWZJ9vK+JjZXyJ6x9xSbtOp7v0ve9qKE45QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJUwmV/roMy+JlrobaB6MD7f8Dc6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTM5OGIyY2EtNDU3OC0z
NWEzLTgxNTMtMzRmMDFlYTE0MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqsJ3Nn9UY66M0UHB+DN36vzEVUIi+AlyfCuQEiL/7X8jk2ETYls/7
gwmM+ReaEpjfhOb/BR5T8OVXPL4pWTOcxc0MEw2RzWiXbd9k/ADWY+GbGWp8nMyX
WqHzh9ttFsTPUequLna8RPhpen92+s6GN68M0EcjRm93vPkpkPm8SgAmSqH07hnx
zNQ4ik0mTbxm4hdkwgkrFOMQ/ES6WFvY96+fP4OvIqJjKtT8gwCewUR2382XD2nb
skAH1/c8bHhmymSPU1d3andBe6FBfBnPSDm7QOLAorh+p3I89na227TNohI2mN2s
bqBCebgfqTO9chfvcHMKQ3TnjwsB5bfp
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:20:27 2025 by rpki-client