Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd0e73b-e67f-3352-b5f5-c4a2b4dcf271.roa
File:                     bbd0e73b-e67f-3352-b5f5-c4a2b4dcf271.roa (raw, json)
Hash identifier:          Ybrw0phOvItUlGkE+brDjERZmI5PHf4xMO8BzRPqC/c=
Subject key identifier:   36:EE:93:46:8C:9A:4D:8F:AF:3A:FD:73:23:C7:70:92:42:3D:5C:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C09219C36F9F26665AE4200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd0e73b-e67f-3352-b5f5-c4a2b4dcf271.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     396613
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:21:9c:36:f9:f2:66:65:ae:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1afc1239-784d-4585-bbbb-881ec2c55395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:5b:ff:ec:a1:ac:62:1a:48:14:c0:28:5a:
                    25:37:22:a8:87:04:2c:dc:80:61:f0:92:47:ef:96:
                    e0:6d:72:9e:a7:3a:ef:45:cb:fe:45:3e:15:da:0f:
                    b1:03:b1:cb:20:ee:b2:fa:90:f2:55:8f:16:f9:41:
                    83:05:31:37:a9:f8:70:25:24:8a:f0:41:07:67:4a:
                    e2:00:87:c8:01:e1:de:f6:5d:f7:ed:3e:55:31:07:
                    18:fb:ee:0c:4a:d0:87:d1:85:de:f6:20:c1:76:19:
                    15:7c:c4:8c:cd:00:54:fd:d7:19:b4:da:1e:c2:c8:
                    5f:d5:af:44:90:4b:fe:76:37:ce:95:bf:32:84:17:
                    42:92:78:14:9c:c0:40:1a:40:3e:16:a1:ae:09:aa:
                    bd:de:4d:76:2c:08:18:5b:b4:63:1e:38:33:c3:88:
                    45:ca:36:d2:f9:18:69:6d:24:c6:e8:13:8e:2e:92:
                    7b:35:74:d7:42:f2:9c:9e:61:7e:a3:fe:3c:8c:61:
                    c8:eb:51:fd:03:9d:15:b7:9c:e6:1b:16:e5:96:98:
                    03:ed:0e:ac:87:87:1e:e4:8d:b0:dd:ce:a3:0e:f1:
                    bb:95:d0:04:78:69:17:49:4f:f7:41:11:10:26:4b:
                    22:b5:05:a1:1d:76:d1:73:89:69:f6:50:32:2b:09:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EE:93:46:8C:9A:4D:8F:AF:3A:FD:73:23:C7:70:92:42:3D:5C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd0e73b-e67f-3352-b5f5-c4a2b4dcf271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:b1:67:81:51:79:13:0c:bc:d0:fb:d2:b1:28:61:98:19:
         41:a8:00:a0:b3:06:41:3c:c8:d6:13:ee:c6:6e:f8:98:16:72:
         a1:b2:70:51:15:3d:99:40:e7:16:5d:e5:a7:88:c5:8b:47:39:
         df:d2:29:13:fd:3d:6b:fd:4e:96:c9:d0:d3:30:76:bd:e1:c9:
         fa:62:13:8f:d3:66:70:ce:fa:e6:74:2f:3f:06:d5:50:8c:8f:
         6a:f8:b2:78:e2:d3:c6:7b:29:3b:40:89:c9:4b:79:c0:39:7b:
         37:2e:15:4b:22:9b:2b:8b:1c:0a:25:94:62:24:ea:04:82:83:
         c8:5d:e1:e6:26:83:42:a2:c7:45:7e:0e:b3:2a:95:a7:90:ad:
         76:86:87:44:ce:4f:cd:db:41:60:8a:4d:a9:db:5e:46:73:96:
         2e:8a:cf:74:c9:6b:ea:a9:b0:e5:8b:a6:fd:09:0d:8e:cf:19:
         c4:cf:27:bd:3a:b2:4e:d0:c8:ab:75:e8:aa:5e:e1:79:14:03:
         4b:73:cb:78:80:ff:32:16:35:5d:73:3e:d1:7f:d6:ae:8e:bd:
         f9:c2:68:fd:45:d4:6d:1b:50:9e:f2:a3:04:3d:57:62:da:da:
         88:7f:d3:2b:39:53:3d:9e:5a:60:53:89:c0:eb:8a:5d:72:cf:
         69:04:16:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:59:20 2025 by rpki-client