Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa
File:                     36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa (raw, json)
Hash identifier:          DHjMSmqWWnEHVja6Ik5MFbbnd0vtNUodAR/LOUmdbJQ=
Subject key identifier:   19:41:75:E6:7B:1E:BC:AC:F2:B8:E9:48:C7:13:46:84:19:F5:DA:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A9A07C92661704CE1600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396547
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a9:a0:7c:92:66:17:04:ce:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=31932089-6dea-447c-81f0-cd01d11a7767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:f8:8a:ed:41:6d:f7:eb:9c:51:6c:d1:90:
                    29:1d:0f:1f:fc:a0:c4:01:a5:b0:d2:21:f5:44:c3:
                    fd:a8:27:25:25:69:9e:e9:38:28:f9:2a:ae:7d:a2:
                    5b:5b:eb:8c:98:1b:a3:ff:20:91:5c:80:b5:7c:3d:
                    50:5b:65:44:85:df:77:89:43:50:9f:3e:a8:0e:5f:
                    c6:14:73:29:80:1b:06:04:d0:ba:b0:2e:b6:47:cf:
                    a7:5a:90:03:34:b2:a4:c1:a9:40:29:24:13:83:8f:
                    0f:47:a1:bd:95:43:bd:2c:69:12:5d:21:74:a7:bb:
                    78:9e:d3:2a:b8:a3:e0:03:d0:60:97:9b:ac:af:46:
                    7a:60:e4:8e:37:57:46:6c:2d:c2:ca:10:60:c7:d3:
                    08:5f:c4:3c:60:21:7d:17:76:34:dc:48:ce:ee:60:
                    b1:33:78:a2:1f:35:20:2d:a3:c4:2d:a1:5e:db:cf:
                    36:88:d2:99:ec:cd:32:d6:fa:76:9b:01:96:f3:e6:
                    a3:f6:bd:f6:fd:3d:fa:02:6c:16:27:06:d1:74:94:
                    8f:14:ed:12:cf:1b:a5:84:4f:ab:aa:ee:fe:e1:c9:
                    28:94:c4:93:d7:b2:d4:28:70:ad:1f:61:c4:62:43:
                    27:91:00:2f:e9:a8:24:22:a3:4e:7c:03:ee:ec:6d:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:41:75:E6:7B:1E:BC:AC:F2:B8:E9:48:C7:13:46:84:19:F5:DA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36dd343a-52f1-31d2-8197-05e6b2e44dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:96:93:6d:44:26:21:e4:1d:ac:d6:63:92:64:ae:de:ee:
         93:33:ec:19:2b:11:1d:2f:bb:4e:55:8b:18:59:b7:14:39:ca:
         f7:7f:09:e1:38:40:82:d2:c6:fc:e5:cc:87:5f:c3:9d:77:46:
         99:66:91:0f:d0:09:f6:d9:4d:89:71:b8:40:08:d6:3a:2a:e8:
         70:b4:2a:3b:23:ab:29:bf:07:1b:33:8d:d8:91:e3:60:09:00:
         df:5a:3e:b9:0d:f3:7a:ce:c6:4a:aa:44:43:94:b7:09:bc:84:
         52:58:e7:83:55:7c:46:65:c5:4d:f3:2a:fe:2d:c7:e0:88:ff:
         16:e6:7c:13:7d:ae:bd:d4:d2:a2:f0:29:09:d0:be:88:97:7c:
         7c:62:cb:d3:74:64:4b:7f:14:1e:ea:ee:d4:cd:b4:dc:6c:0d:
         3e:35:27:d7:f4:70:a0:14:48:57:dd:ad:32:1f:46:e0:a4:ed:
         c3:32:ba:32:07:cd:b1:6c:ac:f0:a3:2e:b7:fa:37:4f:5a:1f:
         7a:3a:6d:fa:e4:c6:6b:66:b4:2a:49:57:97:86:8c:f3:40:32:
         7e:38:94:62:f2:ec:44:91:bd:13:94:b4:ce:9c:e5:5d:0f:d1:
         14:58:52:22:7b:1c:25:75:38:70:2e:d2:2f:ea:fe:e0:41:56:
         8e:9b:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:19:33 2025 by rpki-client