Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
File:                     f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa (raw, json)
Hash identifier:          Mi7vELzBCi2DH5S4SAhHRdsc6j2GVvv0ygI8ecKfQbI=
Subject key identifier:   C6:13:EA:53:C6:FF:21:5C:8B:72:74:12:8E:09:81:A2:49:DD:41:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584993F9FB67F096166D90709580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     396579
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fb:67:f0:96:16:6d:90:70:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=d9ed241b-daf2-4536-a9eb-4e07f693e61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:be:6e:e7:b5:a6:6a:59:6c:dd:e6:a9:e0:
                    d4:9f:ff:ab:29:8d:db:64:85:b3:7c:c4:62:da:aa:
                    6d:38:a2:17:af:bc:50:98:d1:61:56:bb:a1:35:39:
                    f3:de:ec:df:b1:d8:53:6b:cd:af:f5:9d:1b:ff:00:
                    95:b1:cf:23:68:0d:53:f9:36:a1:34:06:50:85:3d:
                    58:41:9d:45:ce:26:34:13:f0:bc:17:a2:ff:af:c4:
                    e5:05:fc:20:37:d2:e1:10:cd:48:51:a3:bd:43:7c:
                    47:d0:d5:a7:8e:b3:68:a3:52:78:0a:c2:b3:a4:3f:
                    f6:d8:5b:e4:6c:b7:c8:5e:91:08:c5:b8:fe:2d:18:
                    9c:74:a3:84:0c:f3:0f:9d:81:04:59:bb:f6:09:85:
                    e7:2c:06:7f:6b:18:bd:5a:e9:ff:2f:14:9d:1a:9d:
                    60:7b:03:7c:20:49:04:aa:68:c9:a0:a0:23:25:b4:
                    ef:fe:a7:71:1f:96:b5:97:8a:77:b4:7b:06:ca:6e:
                    bc:d7:aa:1e:8a:87:c4:d5:54:7e:8e:20:52:61:11:
                    d4:93:8c:ff:c7:bf:b1:06:71:12:82:fe:70:e4:2c:
                    44:b9:f8:d5:72:4c:d4:91:dd:c6:d4:13:16:54:83:
                    2b:d2:cb:de:c5:1e:d5:a5:3c:18:8d:35:a9:b2:82:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:EA:53:C6:FF:21:5C:8B:72:74:12:8E:09:81:A2:49:DD:41:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:c3:90:42:ed:94:ee:6d:e6:4b:93:93:b0:89:a1:4e:e7:
         40:ab:9d:e7:9c:94:f5:11:58:c0:5d:cf:46:56:f5:25:5e:cc:
         c3:2c:ce:c9:19:1f:5c:af:e1:2a:4d:46:e3:4c:3a:df:ff:c0:
         93:86:e3:05:2d:80:ef:88:11:44:79:ee:f7:f2:9d:e5:78:c4:
         65:85:9b:92:7f:ee:98:bf:4f:b0:ab:e4:1e:c3:95:7c:54:a5:
         2c:4a:32:e2:d7:1b:a0:ae:dc:eb:80:c3:2e:dd:5d:6c:fd:c5:
         c7:2d:2a:50:5a:5d:6f:c6:d4:1c:f2:d8:88:8a:36:24:66:49:
         3e:c1:50:7a:6f:3d:2f:7f:40:0a:58:af:c6:2d:26:6c:38:83:
         49:72:2d:61:1a:30:69:c3:22:2b:0a:de:83:ab:06:2f:26:ee:
         ec:9b:03:3f:0c:8e:59:2f:72:8a:7b:e8:b3:50:09:1a:55:d9:
         b7:94:31:1c:5b:ae:3c:f9:e3:e8:8b:f3:5f:06:de:64:bc:37:
         cd:01:e3:14:fb:ca:56:48:8b:f3:46:46:13:ff:d3:d0:f9:9f:
         ea:91:25:42:1c:5f:1a:3d:18:fd:b0:1a:10:13:35:7c:52:03:
         d1:06:6d:a0:79:f2:b3:fd:ed:3b:20:dd:5d:ae:0f:58:85:ff:
         ad:d0:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:05 2025 by rpki-client