Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
File:                     bfb9dfec-b85d-3860-978d-511ab6c14113.roa (raw, json)
Hash identifier:          rX9Ioc5RkcVZ3bE7jPyAF5HmLHux5tI2IACCMlxuwic=
Subject key identifier:   37:7E:F7:E0:FE:E0:D4:3A:D0:EC:C6:8D:00:60:1E:F6:27:88:93:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4AD819633739F6E2C5C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396567
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:ad:81:96:33:73:9f:6e:2c:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=be26a48b-877c-4266-8693-1ca7834bbf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:91:e9:ca:f8:4c:47:c8:74:b5:ce:cc:b8:
                    26:e3:b6:99:9c:6b:3b:2e:41:8e:e4:20:39:4c:54:
                    a6:20:df:7f:05:25:7b:20:f2:63:be:e7:73:86:aa:
                    a6:72:78:84:81:52:9d:c0:bc:86:03:2b:c2:38:51:
                    91:92:d9:97:27:49:be:a1:fb:d0:6b:cf:9c:23:32:
                    9a:2c:5c:b3:8f:a0:c4:18:91:1a:de:36:9b:ec:73:
                    92:b5:fc:b3:4e:d2:0b:46:d8:c1:b8:9d:13:8c:09:
                    44:9e:85:14:c4:5a:d7:6e:d1:ff:fd:e4:de:17:41:
                    3b:7c:e9:fe:9e:f8:45:6c:10:fe:a3:92:fb:3a:fe:
                    57:71:b0:34:35:11:5b:d7:f2:cd:65:87:14:c1:35:
                    1a:93:33:2d:03:49:ae:f1:ad:a1:a0:eb:d6:4a:8e:
                    a5:a5:ff:49:60:95:37:69:5e:52:a9:56:4c:c2:1a:
                    ef:72:c3:99:4b:83:54:37:64:07:f7:b8:1d:70:5f:
                    15:52:90:03:7e:97:39:02:7f:82:03:59:80:33:18:
                    31:cd:bf:f4:86:0c:39:8e:be:35:f9:e6:9c:0c:7d:
                    31:9d:cb:9a:4f:c4:96:32:ac:09:29:35:05:5a:79:
                    08:58:9a:1b:2f:45:79:d9:1c:15:7a:af:37:cf:41:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7E:F7:E0:FE:E0:D4:3A:D0:EC:C6:8D:00:60:1E:F6:27:88:93:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb9dfec-b85d-3860-978d-511ab6c14113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:bc:45:62:95:bd:89:b6:6b:87:8b:46:ef:43:52:ac:dd:f9:
         5d:78:48:b6:68:b4:70:2d:d9:9a:53:dc:67:93:aa:fe:2a:d3:
         43:e6:41:17:3e:ea:84:fc:5b:92:4c:af:68:d6:43:0f:65:71:
         d3:f1:63:17:8f:4d:07:c3:36:30:29:91:b6:fe:42:91:01:c6:
         34:5f:76:a9:10:e5:eb:a3:7c:d8:9e:9b:e1:6d:0c:5f:f1:ab:
         ef:1f:73:31:44:1d:52:a7:02:1b:58:58:eb:2f:a2:1d:98:0c:
         ac:30:cf:4e:53:7a:17:80:9f:dc:3f:d3:d9:07:42:5d:96:8c:
         33:ec:b6:44:8f:5f:d5:92:ba:1b:df:a2:0c:3b:cb:72:ee:f2:
         96:61:c3:b9:04:8b:f1:ec:74:8b:6a:f2:cb:7b:bf:92:0c:53:
         50:fd:f7:53:d6:55:f6:19:33:62:01:95:63:ff:bb:07:7c:36:
         9c:75:5f:3f:9b:5a:86:fd:3b:04:db:ea:b1:1b:54:1f:a6:e2:
         1c:d3:d9:1f:95:ab:03:1d:c4:ea:d6:9a:9d:b2:b0:c7:94:fd:
         d1:14:04:69:b5:26:cd:bf:6e:29:04:84:53:14:85:38:51:f1:
         3a:cf:9b:d1:17:c2:d1:54:9f:a8:27:b9:39:3d:b1:88:b5:0b:
         dc:8a:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:23:47 2025 by rpki-client