Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9d7336b-554e-39a5-88b9-930003dfff1a.roa
File:                     f9d7336b-554e-39a5-88b9-930003dfff1a.roa (raw, json)
Hash identifier:          JkxdRz3FmBW9N3luFh29Ex+fqmHpw4nv6W7d9SgHQ9w=
Subject key identifier:   5D:94:DC:7D:51:FD:B5:88:23:A8:B9:5E:88:C9:52:A3:79:2F:3C:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584996C4A73FB59DE39EF4A7D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9d7336b-554e-39a5-88b9-930003dfff1a.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     396577
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:a7:3f:b5:9d:e3:9e:f4:a7:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=9f4e39b5-bb44-4be7-b092-723df7c69594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:69:81:f7:74:dc:54:bd:80:1c:b6:46:76:
                    a3:bd:19:e6:42:4f:f6:2d:7c:5c:45:50:9d:37:91:
                    3a:51:af:b1:05:a2:c2:a9:63:f6:66:3c:01:e2:87:
                    46:fe:cf:f1:74:fc:6c:69:07:93:2e:7b:b3:f3:e2:
                    14:78:1b:d9:05:97:d1:a9:86:bf:89:0d:5f:74:f3:
                    03:16:35:80:c6:57:97:0c:25:b5:65:bc:f8:ed:a3:
                    ff:66:ef:9e:1f:4a:cb:7c:00:43:d0:af:d5:95:f6:
                    da:17:92:e1:a9:8b:b7:0b:4e:2b:69:71:3a:23:d9:
                    7a:60:b9:9c:95:8c:68:ee:07:5a:e2:1b:6d:bb:31:
                    64:29:5e:bd:dd:5f:de:55:59:a5:d7:ef:91:59:89:
                    af:84:b0:d4:ab:91:14:b8:06:92:ac:bd:8e:5f:f6:
                    54:7f:b7:69:df:c9:13:ff:4c:f1:fe:6a:cc:c1:87:
                    f3:63:38:d7:b8:bf:6f:13:e2:cd:37:b2:45:df:3c:
                    45:65:da:57:b6:cb:6a:a2:f2:b7:ca:14:51:a3:5b:
                    aa:81:97:7b:a1:56:1a:2e:6c:4f:9c:12:e3:86:67:
                    d6:8d:7c:2c:9a:de:32:5a:c2:9a:0b:ed:4a:96:ee:
                    5f:d8:0b:01:96:68:fa:61:67:ea:42:2f:60:67:c5:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:94:DC:7D:51:FD:B5:88:23:A8:B9:5E:88:C9:52:A3:79:2F:3C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9d7336b-554e-39a5-88b9-930003dfff1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:26:7b:f6:c4:49:87:72:33:7b:72:94:1d:ed:8b:1b:60:c7:
         37:d8:14:bb:27:a8:7f:9d:61:dc:49:fe:7c:96:00:e8:d5:6f:
         93:b0:ef:fe:d9:3a:e0:d2:7a:cc:b9:c8:98:96:4f:51:7f:76:
         b1:00:7e:fa:29:73:27:3b:fd:22:c0:a9:1a:bf:12:f3:f0:3a:
         d7:54:ff:99:d5:1d:9a:8d:20:81:fa:88:70:d6:8f:ab:96:ea:
         6c:82:5a:77:16:fa:f8:6d:d5:ea:29:c0:85:e9:0d:d4:1c:72:
         17:cb:da:f1:04:18:89:52:39:87:1b:07:e9:12:27:22:81:ea:
         a2:7c:11:cf:84:81:41:2e:b1:86:45:fb:57:54:86:dc:b3:36:
         de:b8:4a:26:2a:aa:c8:a8:6f:62:5b:e1:17:c5:ae:1e:81:a4:
         d8:14:fd:58:73:72:a1:fd:e2:81:c5:07:e6:4c:74:bc:bf:38:
         b0:28:c3:28:53:a0:27:b3:0f:a9:14:0d:cf:26:f5:58:85:44:
         88:fc:e1:67:c9:0b:ee:b5:12:3d:84:6b:3f:ee:ae:3f:ae:64:
         d3:76:03:eb:43:71:68:0e:d7:85:da:b1:c1:89:58:b6:0c:c0:
         f1:7e:33:37:85:2d:11:f6:88:88:ca:d1:55:b0:44:2c:0f:10:
         ba:ce:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:46:08 2025 by rpki-client