Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa
File:                     acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa (raw, json)
Hash identifier:          Rn06no3EeN1JHCxeZ6IElp5lO+MXdG6q6s3+uGvOZmg=
Subject key identifier:   25:94:70:66:B7:48:97:7A:3E:33:44:57:7D:26:FB:8A:09:84:E6:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C091C87AE2BC2201FF94440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396595
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:1c:87:ae:2b:c2:20:1f:f9:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=e66a7d3f-aaf6-462a-939e-1a99f2f8f9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:6c:10:4b:75:4f:62:2f:e8:9a:ba:00:ca:
                    ab:5f:18:8d:19:74:97:a1:32:8b:55:c3:61:e4:e2:
                    4a:fa:ee:20:14:9a:c5:f4:e4:1a:06:af:8b:bc:62:
                    ff:b9:2b:8b:cc:54:71:cf:35:c9:31:71:26:eb:e6:
                    e8:7d:41:46:b9:14:21:29:ed:37:0c:31:05:80:44:
                    2d:50:16:a1:02:3c:a9:0e:ff:af:7e:8b:d6:19:9c:
                    5b:5e:30:cd:19:b3:ba:8c:4f:f4:20:22:24:81:bd:
                    e2:ff:7c:6b:6c:a3:f7:41:da:87:83:2c:ca:36:c2:
                    ed:8b:c1:5f:c7:25:de:8d:0a:eb:65:8d:03:e8:41:
                    23:d0:a9:91:48:a1:fe:bf:92:d6:92:4b:fb:88:f4:
                    03:b5:91:cb:13:39:96:6d:8e:21:f7:5c:cb:5e:e0:
                    c1:54:21:54:5e:c9:c9:76:34:fa:7d:95:e0:25:64:
                    8f:8e:77:c0:41:8a:df:e6:51:3b:15:73:3d:24:88:
                    b3:72:27:01:99:ce:eb:1f:61:37:1f:65:2e:21:73:
                    3c:71:ac:32:fd:c5:e4:b8:f8:9f:9e:e7:a9:3c:2e:
                    a2:ec:d8:ca:74:13:56:c6:b9:c0:a3:f1:37:9c:9f:
                    34:c9:63:f4:dc:b8:bd:fa:55:a9:ad:1d:2b:18:c6:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:70:66:B7:48:97:7A:3E:33:44:57:7D:26:FB:8A:09:84:E6:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acf10c6c-d48f-37f4-a7c7-622c7362a1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:d1:89:27:f0:a6:00:d0:f1:75:21:b5:76:03:9e:fe:e0:
         d3:bc:94:2f:81:89:7b:5e:94:37:5f:b5:63:02:bf:76:6c:2c:
         0a:e2:ff:e3:1f:d7:63:33:e0:f6:58:77:87:ba:09:75:fa:3d:
         1f:e7:8e:0a:98:a6:17:9b:ad:49:c9:94:55:a9:3f:e0:36:76:
         a1:67:79:71:16:c0:c2:7f:18:35:80:4b:6e:dd:16:eb:64:18:
         31:45:72:86:1c:7e:49:47:bf:37:dd:8f:b0:5b:57:22:25:0d:
         71:cd:cc:66:95:64:39:1c:ea:b9:75:00:6a:d8:4f:03:0f:6a:
         05:e2:e4:b8:6b:1e:10:97:57:b8:32:dc:59:82:29:41:eb:e7:
         b8:79:4f:ee:d1:17:b8:13:ac:49:d2:65:40:30:5b:ce:39:27:
         e2:8c:d1:06:1d:d7:ab:4b:4e:9c:ce:97:40:94:a5:3b:3f:e8:
         ef:18:11:73:b1:53:18:0e:bf:51:8d:73:5e:64:0e:97:98:53:
         d6:53:c4:d2:c6:33:bb:b3:50:6a:53:d1:88:4a:c3:99:23:c9:
         b8:bb:a4:de:11:ed:13:e9:c9:d8:fb:d4:13:f2:5b:7a:35:e9:
         62:8c:03:c9:23:aa:47:74:fc:67:a7:8e:a5:5c:72:1f:d4:35:
         ad:a9:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:17:59 2025 by rpki-client