Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281bdd07-cef2-30b6-90fd-cc0bf1e58438.roa
File:                     281bdd07-cef2-30b6-90fd-cc0bf1e58438.roa (raw, json)
Hash identifier:          lzvHRiqzz5wg98qLXK71rgq607Cv2/H2xl9LhMo9iiU=
Subject key identifier:   A1:4E:8F:41:5D:58:DB:33:25:12:C7:C0:AD:58:D5:3E:E0:E2:BA:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A7DABA578D2F7AC5FFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281bdd07-cef2-30b6-90fd-cc0bf1e58438.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     397203
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a7:da:ba:57:8d:2f:7a:c5:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=ccae1b2d-ba9f-41db-99b8-2c28a68d05ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:d3:a8:65:ec:e3:cd:03:c9:49:49:3f:0c:
                    45:fb:45:c3:02:80:80:77:6b:f0:0c:51:62:72:71:
                    9f:03:18:52:23:39:d5:be:1a:e0:47:19:1a:35:64:
                    a6:90:48:cf:b7:19:22:29:ec:2c:f0:33:01:ba:8c:
                    7b:44:9f:88:cc:c1:cc:14:5b:fc:4d:2d:9b:34:c9:
                    0b:3b:a0:41:b2:6a:05:08:fc:d2:82:b3:04:05:f0:
                    b9:b1:c0:39:6f:37:77:04:14:bf:fb:45:f2:17:6c:
                    5f:92:25:91:eb:59:59:02:bd:61:20:a1:7d:c0:3d:
                    bb:98:12:ad:75:06:53:67:39:b4:a0:7f:c7:ee:36:
                    2e:9d:e5:91:71:d8:8d:9a:b9:f6:64:47:59:c4:6c:
                    5b:81:29:3a:4e:1b:18:52:81:a0:70:cd:88:25:3f:
                    90:29:6f:20:6b:95:f2:9d:58:96:45:d6:30:af:a6:
                    d6:02:52:9b:1a:a7:96:56:30:ff:60:b4:8c:25:c6:
                    81:c3:b9:74:18:49:c9:94:d6:19:2f:60:29:29:7c:
                    c3:67:87:6c:11:80:3d:db:b9:77:c2:16:86:e5:f2:
                    90:66:af:37:9c:6f:e2:7b:17:21:28:1a:b6:00:1a:
                    7d:ca:b9:a9:bf:1f:81:5e:df:c2:aa:44:c7:ef:ec:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:8F:41:5D:58:DB:33:25:12:C7:C0:AD:58:D5:3E:E0:E2:BA:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/281bdd07-cef2-30b6-90fd-cc0bf1e58438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:f1:55:dd:32:ac:9f:69:93:31:b8:54:de:55:be:4a:95:
         a5:ba:37:02:d5:cd:3e:1a:0d:a8:a6:ba:48:bb:3b:e4:db:ca:
         71:a1:29:ef:54:85:96:35:8e:28:18:65:4c:c1:4a:d2:b9:45:
         54:52:60:e9:bf:78:a2:af:ed:d9:b1:93:f9:3f:18:ea:a8:44:
         95:c1:39:8d:77:2e:f2:26:06:b8:e9:e3:0b:d1:4e:2c:0a:1d:
         78:c7:7f:7d:06:6f:34:82:f2:cc:1f:5f:41:5f:6a:20:d4:3d:
         e1:eb:e0:35:f1:e9:07:3e:c0:82:e6:2a:0c:d3:dd:54:1e:d0:
         db:04:e1:dd:f4:63:f2:aa:4f:81:cc:35:11:4b:75:46:a6:c1:
         aa:b7:03:cb:a8:5c:bc:84:5f:04:13:9f:d8:9f:5b:4b:0e:87:
         1e:4c:5a:4a:3d:b3:9c:56:e0:5d:ad:37:d4:47:cf:55:43:02:
         1b:de:ab:12:19:f2:10:4d:b3:3a:41:de:59:51:b6:a0:56:dc:
         ab:c2:10:ca:c1:37:0f:78:44:5d:72:6d:3b:ff:d9:31:b9:8f:
         91:c3:6b:93:4e:fb:13:45:ff:26:b2:86:07:3b:c4:ec:11:09:
         de:17:7e:9c:bb:b3:22:5e:1f:b9:db:8c:10:64:8b:98:d2:45:
         63:40:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:23:13 2025 by rpki-client