Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dfccfc3-509a-3b5f-9794-bd2bbe49d9d4.roa
File:                     9dfccfc3-509a-3b5f-9794-bd2bbe49d9d4.roa (raw, json)
Hash identifier:          M6HPGiOJwhA4AL9pELy3vuGzoZsw/H18B4iWTTANxBM=
Subject key identifier:   8F:E1:DF:AD:84:B8:CE:1F:0C:3F:BA:12:CC:55:70:34:AE:5E:F4:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4AB72AC689C8A48749980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dfccfc3-509a-3b5f-9794-bd2bbe49d9d4.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396826
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:ab:72:ac:68:9c:8a:48:74:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=abba8275-e35f-4996-b5ce-feed943daa56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:56:5a:a4:97:86:da:a1:67:01:98:95:0d:
                    a1:ae:e5:c4:ce:fc:d7:10:f7:6f:b6:b1:05:f7:24:
                    99:9c:70:05:d9:a8:49:de:5f:e8:3d:19:c1:0f:21:
                    4b:8f:eb:c5:65:24:6d:a0:87:27:85:71:39:af:2e:
                    9f:fc:d5:96:74:dc:e6:c1:58:9c:00:03:51:40:27:
                    87:95:f6:f4:c7:e3:80:79:9c:e0:5e:d1:c5:d6:d1:
                    91:fb:35:78:42:22:66:9c:2a:85:87:74:30:e0:43:
                    d7:ff:71:ed:b2:a3:49:93:4e:71:60:12:aa:89:83:
                    2f:4e:12:15:ea:f0:1e:ed:09:46:ed:75:2f:a7:a7:
                    45:94:74:84:37:b6:81:e6:c0:3a:6a:2a:90:55:69:
                    18:f9:97:1b:c8:76:f8:ac:5f:fd:be:7e:e1:38:1c:
                    f0:c8:af:0c:c1:3f:f8:04:08:f6:46:47:79:f6:cf:
                    23:07:1d:02:24:c5:75:1e:f8:e9:97:16:69:2d:0a:
                    bb:0e:f3:46:b5:03:27:95:22:8c:22:47:c7:01:9d:
                    2d:57:38:7b:78:9a:66:69:fc:26:6f:74:71:ea:93:
                    68:d4:31:29:ef:60:a8:60:63:8d:f2:72:0b:7a:cf:
                    d7:fa:a3:2c:39:fa:7a:ab:51:e4:47:ba:26:8a:cd:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E1:DF:AD:84:B8:CE:1F:0C:3F:BA:12:CC:55:70:34:AE:5E:F4:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9dfccfc3-509a-3b5f-9794-bd2bbe49d9d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4d:74:1b:f3:75:ff:86:47:84:4d:f7:96:09:5e:2a:f9:39:
         40:de:24:e8:9b:a6:62:50:ab:52:6c:b9:fb:f9:df:68:af:27:
         d1:65:c8:8b:c0:51:70:ac:8c:32:e2:64:e1:01:22:24:40:ad:
         17:07:bf:39:db:32:00:24:7b:b8:0a:73:aa:85:0c:a4:20:ae:
         78:48:55:a8:ab:c5:fc:cf:38:f4:ab:5a:b1:6e:5a:b3:a5:43:
         01:5e:b3:31:d5:d9:1f:16:36:7f:86:f0:2c:6d:b1:d2:f7:e2:
         3f:37:bd:43:3a:e9:cd:a2:aa:a3:67:07:6d:ab:99:4e:25:9c:
         13:6d:fe:c6:a2:c4:88:b1:4a:4d:1a:ca:13:5c:ec:3e:d1:38:
         ef:fe:7e:6b:29:48:91:bb:51:b1:e4:34:ed:9a:5d:bb:b4:7d:
         52:99:49:8b:e7:e7:d8:b2:ab:bf:38:86:be:19:95:c6:04:1a:
         89:be:e7:b9:0a:72:da:e5:01:71:60:59:42:eb:52:e0:0b:31:
         7e:ac:ea:53:d3:ec:18:30:91:8d:91:dd:80:10:33:20:d6:32:
         d8:04:91:f0:27:4c:2f:98:83:24:56:a9:ea:6f:e7:f9:e9:3c:
         e1:bf:70:2f:cc:4e:11:cf:1f:59:c0:22:00:05:b3:49:18:69:
         60:14:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:34 2025 by rpki-client