Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044ed238-be93-3ba4-936d-cb1beca6933f.roa
File:                     044ed238-be93-3ba4-936d-cb1beca6933f.roa (raw, json)
Hash identifier:          jJVRRjPmYvFBayLSR+G4pO5YtoAaU4nGwVkD1r6qgCM=
Subject key identifier:   71:1A:EF:D7:B8:0F:0E:AD:1D:32:E5:DC:9C:B6:E7:C3:6F:C3:B9:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A58CB126B680BF57E1639C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044ed238-be93-3ba4-936d-cb1beca6933f.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     396606
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:12:6b:68:0b:f5:7e:16:39:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=298e2191-2e5d-4809-988a-af103cf6884b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:b2:f1:f2:84:a8:18:7c:29:f4:56:7b:d0:
                    fb:06:68:dd:a2:d7:35:7e:d6:fe:42:49:51:ac:74:
                    14:68:25:96:31:f8:ac:94:9f:d4:d7:43:36:dc:0f:
                    21:0d:88:a1:d3:33:61:89:b6:18:c7:af:f6:27:16:
                    9f:a7:7d:5b:e3:8f:0f:2d:71:5b:4c:8f:73:77:d1:
                    53:2c:50:f5:94:6f:da:c2:d7:ab:f5:91:4c:52:b7:
                    c5:2c:3e:ad:6b:79:2a:eb:2c:f7:e3:72:a0:d4:0c:
                    a2:02:eb:0e:6b:55:26:7b:29:54:13:4f:6f:fb:97:
                    13:83:ab:82:ac:15:27:7f:2b:68:bb:1f:93:cb:09:
                    a4:13:72:26:d6:08:b4:97:60:27:f8:db:46:98:19:
                    21:72:37:a3:69:57:f6:ee:eb:14:14:1c:e4:ba:4d:
                    c6:e8:77:e5:db:e3:6f:29:68:58:82:79:8f:27:96:
                    1c:93:d3:55:88:b2:d8:dd:35:79:2e:30:1a:fe:4c:
                    d3:ab:94:d4:50:17:88:ac:32:be:5b:db:63:53:0f:
                    2c:42:bc:63:72:06:55:19:ce:c7:e4:43:fe:49:ef:
                    72:c9:1d:a1:6f:ca:40:eb:1a:6a:af:31:08:08:47:
                    c9:19:34:e7:2b:d5:b7:87:42:7b:3e:a8:99:9e:33:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1A:EF:D7:B8:0F:0E:AD:1D:32:E5:DC:9C:B6:E7:C3:6F:C3:B9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044ed238-be93-3ba4-936d-cb1beca6933f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:8f:6e:6f:d5:25:eb:fb:ad:9a:e0:08:9d:f1:c2:2f:d9:
         89:76:a7:aa:31:c7:05:a0:44:8e:0d:af:97:eb:64:40:76:0b:
         01:2a:58:bf:c5:f5:83:35:58:2e:0a:49:61:fd:15:e5:a5:66:
         78:ae:c4:29:eb:09:7d:7a:af:55:e1:9f:9d:7d:38:95:5e:72:
         ff:0e:e0:c5:7a:4f:65:48:e1:b8:be:07:52:6e:95:c2:76:ce:
         6e:a1:cc:d6:aa:ca:5d:6f:05:fd:14:bf:fe:4a:c8:d8:3a:0c:
         c0:8e:21:1f:26:48:78:36:0d:ea:be:f1:7f:de:77:c9:d7:bb:
         bb:37:c8:d5:d9:4c:c5:0b:17:33:db:ec:5b:6d:2c:70:77:d9:
         f3:5b:ae:86:9f:e0:25:32:70:c1:cb:1c:36:b0:e1:9f:42:b4:
         f2:96:ec:9f:40:86:aa:a8:e7:54:8e:6e:d9:aa:28:be:90:fd:
         94:9b:05:e3:67:4b:80:f4:d2:9c:b2:18:a4:b1:17:e5:16:ed:
         5b:25:ae:26:53:54:c2:86:b2:f1:f9:4e:da:4b:37:d6:00:1f:
         50:c6:46:ed:d2:88:d8:4d:01:f7:5f:76:4a:45:8f:1c:ee:d5:
         c5:8f:7a:c4:ff:1f:ae:06:65:24:d4:9b:af:ab:76:14:c9:68:
         97:45:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:32:46 2025 by rpki-client