Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa
File:                     355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa (raw, json)
Hash identifier:          m4N9qHYF8PkPzZJYLfqEhEWlId5/Lzly4G2ZJCZPLLA=
Subject key identifier:   F5:B0:9B:75:FE:F1:D1:B4:8E:5D:86:CE:81:34:12:18:3A:F7:01:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A0E9B69273312D46BF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396555
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a0:e9:b6:92:73:31:2d:46:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=1a0fd7c7-3856-40d0-8046-3e1dd8878ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:0a:ff:9a:81:e6:1f:d9:aa:b1:2d:86:ac:
                    36:3c:75:65:b8:90:2f:ab:2d:e3:80:2a:cd:61:35:
                    02:42:3a:ae:94:69:15:5a:d4:5e:3d:6c:67:d3:80:
                    82:c9:db:c6:5d:ff:eb:96:6e:d3:ac:ba:c9:13:a8:
                    fb:f2:1b:b9:7f:be:3f:ca:0b:28:3b:6b:8c:42:94:
                    30:e8:5c:f1:84:86:40:c6:3f:44:68:8a:31:92:23:
                    dc:2b:a6:c8:c3:e9:14:a1:24:6b:c8:fb:82:97:72:
                    13:5b:c0:f5:b7:63:ac:e7:02:96:95:49:23:b3:88:
                    ea:f3:0c:3c:e1:12:c3:ed:40:f8:66:ee:05:e7:0d:
                    1f:f0:58:54:3c:e2:e4:67:67:ff:68:25:99:83:33:
                    37:00:ec:6c:b5:08:22:90:f2:d0:57:84:3a:2d:d6:
                    7f:2b:3e:d3:e8:71:d3:60:dc:9c:00:3d:0e:87:04:
                    90:ad:b0:3f:a8:0a:c3:f7:ef:be:a8:0a:bf:d8:c9:
                    9c:a9:3d:82:ef:fd:60:1f:55:f8:31:19:db:1a:18:
                    be:1e:e3:0f:e7:b8:8d:9f:84:0c:d7:b5:15:d8:80:
                    55:35:ab:f3:f0:cc:51:34:16:fe:66:fc:b3:8b:90:
                    dd:b5:bd:5e:de:2d:35:97:de:25:cd:d0:9b:66:a5:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B0:9B:75:FE:F1:D1:B4:8E:5D:86:CE:81:34:12:18:3A:F7:01:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355b363a-ed5a-3bd5-8a0f-7f69dd06dbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:78:a2:d1:fa:ea:3a:25:4b:3c:7c:41:e4:d6:66:8b:8d:24:
         53:5e:7d:e8:8c:aa:2f:e6:e9:11:f5:7c:52:3e:26:60:fa:83:
         82:ff:9b:98:df:25:3a:3a:9e:38:a2:d0:db:61:2d:84:ab:84:
         67:07:af:e3:96:b9:53:05:6b:95:01:a9:20:91:36:f1:b8:1e:
         bb:b9:a9:5e:7f:34:15:71:9c:eb:62:c4:df:16:ca:e9:4a:ce:
         cd:74:1f:97:26:f9:6a:21:2a:15:64:b8:a3:df:b5:92:7c:66:
         87:45:98:83:16:23:b4:2c:11:d8:15:02:cc:df:8e:73:3f:41:
         85:73:9b:9c:13:35:8e:01:54:20:16:0b:78:18:db:ca:e6:98:
         6d:8f:f9:95:a9:c3:27:69:eb:bd:6f:59:b8:3c:75:e9:ef:7e:
         da:15:76:2b:66:2f:c7:2b:03:5b:bc:b3:f1:87:3f:b9:95:80:
         2f:e4:07:19:22:67:d2:08:21:76:34:84:64:b4:09:3d:dd:e4:
         e4:e6:01:05:c1:20:69:a2:18:3e:b3:ab:24:0f:fc:19:95:8c:
         20:ea:d3:9f:92:4e:b4:52:b8:3c:14:94:9c:08:28:75:af:18:
         e0:ab:cf:33:4d:3e:bb:23:e3:0a:66:98:5e:94:ed:11:fb:84:
         c2:1a:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:44 2025 by rpki-client