Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa
File:                     cb607bb4-2d4c-366e-a332-1315e4675481.roa (raw, json)
Hash identifier:          Rv5HTxiOpd7s3XwDxK6J0DzCPYY/y+8FXMfCpDvu8Mk=
Subject key identifier:   2C:FE:BF:2A:DA:74:52:9C:A4:73:F8:E1:94:0D:93:DF:B5:43:32:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FF7610EAD036D93FD180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396567
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:ff:76:10:ea:d0:36:d9:3f:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=e66fb143-7fd3-414a-a34c-2015391dce2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:20:22:0d:90:e6:32:5f:8c:78:d9:19:39:
                    ee:12:33:de:26:40:58:37:99:89:b8:bf:96:f9:14:
                    ed:8c:61:54:6e:45:8c:cc:5f:0f:dc:70:b6:b2:20:
                    e8:9c:1f:1b:33:72:62:19:9c:30:0c:0e:d8:fd:ef:
                    69:73:de:df:3c:5d:a0:67:96:39:b9:b0:cf:2c:2d:
                    10:71:ed:90:8e:dd:4f:69:19:13:51:9d:ee:0a:9b:
                    5a:a1:ac:2e:9a:13:b3:2e:03:0f:45:88:96:a5:fc:
                    20:f9:60:f5:4d:9c:e6:91:64:ae:9a:36:ac:c7:9e:
                    ef:12:49:fa:26:f9:10:ad:c0:dc:9c:ff:40:7d:e6:
                    ab:73:7d:0b:d4:a8:b4:e4:10:d4:40:02:78:a6:fd:
                    02:56:96:4c:68:d8:3d:c2:0f:6d:f8:e9:f2:ae:be:
                    c1:84:84:2d:ba:7e:23:b2:38:68:68:ea:81:21:f7:
                    c1:03:d6:4e:a5:a4:b1:6f:63:0c:cf:13:27:38:cc:
                    70:83:c8:90:1d:35:c0:77:4a:ae:7a:ce:b4:50:61:
                    e6:41:ee:c4:3c:fa:6a:6c:37:3f:d5:33:31:e6:ea:
                    6e:c2:d3:4a:e9:3c:58:1f:20:45:8e:60:27:f8:2b:
                    2a:c5:41:63:6d:17:3b:62:e8:56:d3:b2:a0:77:d2:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FE:BF:2A:DA:74:52:9C:A4:73:F8:E1:94:0D:93:DF:B5:43:32:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb607bb4-2d4c-366e-a332-1315e4675481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:a7:a6:5f:fc:54:13:13:11:d1:99:cd:d7:fb:d4:6f:2c:
         9d:74:cc:5b:e0:91:e4:20:d5:ef:ac:6c:fa:fd:ce:0c:fd:86:
         9a:9c:41:42:5b:04:f5:67:46:b3:b7:c6:c5:3c:a2:1c:65:33:
         96:e0:63:84:7d:7d:a4:ab:70:63:3a:59:c1:2b:c7:0d:17:bf:
         33:22:56:81:fa:2c:21:9b:29:e7:62:f2:1a:81:54:e7:e9:d1:
         6c:2d:70:74:4c:5f:f9:cf:32:22:c6:b4:31:c0:81:e2:c4:05:
         02:2a:b4:33:50:60:cc:fd:60:77:6e:59:83:e8:1b:38:6f:28:
         80:cd:cb:54:43:15:f5:af:2f:f3:2e:6e:93:5f:63:50:0d:29:
         d0:bf:03:06:d6:55:7b:dd:f2:75:26:2b:1b:a6:3c:c4:a1:b5:
         a3:8f:4e:d6:5e:60:a6:eb:bb:ab:b4:47:ef:65:c5:12:76:22:
         f0:4b:8a:01:0e:21:9f:07:fe:31:5c:82:d8:ea:d1:2a:e9:b4:
         cf:08:08:9c:b9:c9:99:4c:f8:2f:cb:5f:d8:27:09:14:ee:f0:
         fb:69:bc:b2:de:a7:36:45:84:b2:84:82:af:f2:79:8f:01:e6:
         ee:6b:7c:7e:11:27:22:ca:25:e9:8b:e1:f2:ad:5b:f0:f2:c4:
         54:33:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:34 2025 by rpki-client