Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa
File:                     2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa (raw, json)
Hash identifier:          V0Oe50GjCGDjIjy5tT0ykrxWdOlvcNy/nHPyH2r6HNg=
Subject key identifier:   2E:C1:A4:84:71:B7:53:9B:55:66:EC:22:79:29:A8:FE:38:04:FD:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993FA017DE5EEA64A3DD3FD20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396585
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:01:7d:e5:ee:a6:4a:3d:d3:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=d28dabf4-edac-407c-8b84-b6c62311f9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:a5:8c:70:80:07:66:50:5a:7e:a0:a5:77:
                    fe:41:2d:f5:bd:95:67:af:46:ae:26:e6:fb:50:a5:
                    a0:2e:ac:1b:7b:7f:69:30:de:6e:0d:15:b7:2d:ca:
                    d7:f6:73:5a:01:0b:3e:e6:cd:d7:16:45:18:bb:5a:
                    88:7c:e0:c9:67:e2:75:29:6a:b7:f0:f6:09:13:bc:
                    d3:21:1b:88:f9:98:24:dc:63:5e:91:97:74:68:bf:
                    45:34:0d:aa:a5:ae:c0:3a:b1:d7:61:96:72:b1:fb:
                    d1:04:70:68:01:89:5c:85:bb:85:a3:4b:6d:ba:da:
                    23:5c:bb:a4:34:dc:6b:93:09:8a:fd:af:a0:af:d6:
                    97:a8:1b:0f:73:77:eb:a6:4c:9e:70:74:40:08:b5:
                    08:f7:6e:ac:c0:6e:f8:b6:a3:b8:ab:6f:3c:8a:4e:
                    55:af:1e:d9:0a:48:24:a6:2e:17:02:69:d3:9f:a5:
                    f2:66:75:f1:2a:25:6c:9f:0e:ee:a7:8b:b4:89:25:
                    7a:f4:01:8b:c0:ec:bf:1c:5b:b7:f7:a5:9d:b3:16:
                    a8:f3:33:54:9c:a3:86:41:7a:1e:9b:e0:84:e9:92:
                    b8:c4:9e:3d:4c:2b:c7:10:90:68:f4:ec:7c:c7:58:
                    09:46:25:f9:1d:03:2b:b8:5e:cd:c0:44:d0:76:db:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:A4:84:71:B7:53:9B:55:66:EC:22:79:29:A8:FE:38:04:FD:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd7bcde-1c74-3103-9017-2c9f0843cbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:69:18:02:d0:2f:93:f1:76:47:c4:7f:d9:aa:f4:7f:5b:
         c0:96:cd:3a:aa:58:3e:b1:07:c0:41:4d:71:fd:f4:1a:56:32:
         03:2e:a1:7e:0e:ac:cd:2a:7a:b1:2d:0e:83:fb:6e:33:ab:ef:
         f7:45:89:52:da:b2:0f:1e:d0:3c:7b:da:13:be:2c:9e:a7:af:
         4c:b2:09:67:24:f3:19:09:92:8b:ce:9b:a7:cb:b5:35:df:6b:
         6b:08:c5:f2:61:6a:ab:16:bf:24:bc:f9:a5:83:8a:18:38:3a:
         68:52:f0:a7:61:c1:ed:87:ba:e6:56:c8:02:8d:e7:56:2a:9b:
         53:39:ae:e5:55:8c:91:5d:cd:c7:c6:b6:7f:9c:a6:a0:28:62:
         10:29:98:e5:0d:0d:c3:5a:47:74:f2:7e:2e:28:d6:1c:da:e2:
         89:ce:51:c4:5b:b9:cf:d8:f4:15:71:36:11:4f:d9:49:74:56:
         d3:d9:71:28:9c:94:7f:04:bf:ae:d3:81:bd:a0:80:cc:1e:a3:
         f1:48:f2:9f:f9:5d:9d:5a:7a:be:43:8d:ed:cb:53:de:28:4d:
         0d:73:f4:f1:eb:f5:7e:ba:0f:6b:f1:8a:3f:56:cf:a4:e2:30:
         f9:3f:f1:2e:6d:a0:c3:92:a6:0f:ed:31:7b:c0:87:b1:8d:5d:
         34:da:a5:59
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmT+gF95e6mSj3T/SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
ZDI4ZGFiZjQtZWRhYy00MDdjLThiODQtYjZjNjIzMTFmOWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhiljHCAB2ZQWn6gpXf+QS31vZVnr0auJub7
UKWgLqwbe39pMN5uDRW3LcrX9nNaAQs+5s3XFkUYu1qIfODJZ+J1KWq38PYJE7zT
IRuI+Zgk3GNekZd0aL9FNA2qpa7AOrHXYZZysfvRBHBoAYlchbuFo0ttutojXLuk
NNxrkwmK/a+gr9aXqBsPc3frpkyecHRACLUI926swG74tqO4q288ik5Vrx7ZCkgk
pi4XAmnTn6XyZnXxKiVsnw7up4u0iSV69AGLwOy/HFu396Wdsxao8zNUnKOGQXoe
m+CE6ZK4xJ49TCvHEJBo9Ox8x1gJRiX5HQMruF7NwETQdtuXGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC7BpIRxt1ObVWbsInkpqP44BP37MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZkN2JjZGUtMWM3NC0z
MTAzLTkwMTctMmM5ZjA4NDNjYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA2+mkYAtAvk/F2R8R/2ar0f1vAls06qlg+sQfAQU1x/fQaVjIDLqF+
DqzNKnqxLQ6D+24zq+/3RYlS2rIPHtA8e9oTviyep69MsglnJPMZCZKLzpuny7U1
32trCMXyYWqrFr8kvPmlg4oYODpoUvCnYcHth7rmVsgCjedWKptTOa7lVYyRXc3H
xrZ/nKagKGIQKZjlDQ3DWkd08n4uKNYc2uKJzlHEW7nP2PQVcTYRT9lJdFbT2XEo
nJR/BL+u04G9oIDMHqPxSPKf+V2dWnq+Q43ty1PeKE0Nc/Tx6/V+ug9r8Yo/Vs+k
4jD5P/EubaDDkqYP7TF7wIexjV002qVZ
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:46:02 2025 by rpki-client