Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa
File:                     2e2788be-6abd-36a7-98bd-397f82c136c6.roa (raw, json)
Hash identifier:          BsJ+cdDtml4J2m/1ldTm8SrtcPYKzqxc2qa6lq+EtqE=
Subject key identifier:   40:96:00:58:63:F4:49:C3:1F:76:6D:27:F3:A3:B0:C7:1D:F9:71:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F5962E19CEBCBCEE09600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     25485
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:59:62:e1:9c:eb:cb:ce:e0:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=6a66beec-4d58-4f96-ba4d-f97ec38e6c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:a0:cb:7c:e1:cf:00:24:1f:c5:98:ed:1b:
                    0f:32:96:91:f2:80:d3:c8:95:83:38:e0:2c:4f:18:
                    7a:d4:52:a6:a7:aa:c1:0e:8c:87:6e:34:fc:23:eb:
                    f0:b4:a5:07:b4:4c:1c:c6:74:00:2c:75:30:f9:50:
                    e5:61:e6:1b:70:a3:19:7a:75:da:96:1d:38:1d:c2:
                    b5:6d:e0:87:26:7b:ad:f5:fd:d4:44:ac:25:c7:5b:
                    a2:1b:a7:a0:78:09:d4:c7:88:bd:2d:aa:df:b3:04:
                    94:fa:d6:bd:23:b8:59:f6:39:55:48:09:08:32:d0:
                    6e:34:0b:57:2b:dc:39:61:c9:c7:19:8f:eb:6d:f1:
                    06:6f:26:f1:b2:6a:2b:7d:3b:4e:9e:a4:58:9e:5a:
                    e6:f9:43:de:27:f9:2d:80:db:b5:cb:68:29:89:01:
                    2e:be:e6:97:39:cf:1b:c1:0f:8f:eb:73:cf:4b:8b:
                    e8:f8:fe:7d:04:cc:c8:54:6e:70:50:61:94:4c:ef:
                    cd:20:2f:85:6b:28:55:59:e8:30:35:13:76:93:be:
                    0d:f9:e9:9d:b3:1b:a0:c1:3b:04:b9:be:5a:89:ba:
                    d3:f8:ff:02:b4:99:1d:c5:68:10:bf:b1:14:a1:6d:
                    91:03:ad:3a:ef:f0:b4:4e:98:bc:ca:e5:54:a6:2a:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:96:00:58:63:F4:49:C3:1F:76:6D:27:F3:A3:B0:C7:1D:F9:71:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:c5:44:4d:4f:e0:e4:ad:f8:14:d8:f3:45:d4:eb:b9:38:
         bb:b4:ee:d4:50:14:bb:a7:7f:b2:c3:75:a6:28:41:ac:1d:43:
         7b:c3:07:8c:3e:22:1e:c4:a7:fb:81:37:b2:cd:d4:61:cb:3a:
         8a:54:98:03:42:dc:c2:01:8f:e7:27:3c:3d:64:ab:48:7b:ed:
         f8:08:e0:66:f5:5a:19:5a:81:ff:8e:06:14:85:1e:1e:e9:70:
         c6:e1:c5:03:4c:35:2e:f4:a6:c1:11:c4:11:aa:65:e9:b5:a4:
         d0:81:68:4f:1f:28:5e:41:56:67:19:25:6a:08:ac:27:0f:7e:
         8c:6d:bb:87:fe:0e:9e:89:1d:21:50:f0:dc:d9:c0:aa:94:0f:
         c0:0c:ba:09:2f:98:13:f2:78:72:e6:14:dd:e2:76:4d:f4:5d:
         08:28:04:dd:f9:b7:c6:ba:04:35:04:fe:fd:7d:6c:8e:00:90:
         ee:df:f7:55:82:33:89:9a:a8:2b:3e:f5:f6:9e:99:08:40:b1:
         22:18:26:03:03:03:56:61:88:0b:27:29:2e:dc:79:fd:f6:93:
         b0:1c:31:30:87:7d:93:8c:b6:ae:64:18:64:30:8e:b3:12:79:
         11:a0:0e:8e:0f:51:00:94:e5:4c:0c:28:12:62:02:ea:8b:cc:
         e9:58:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:49:26 2025 by rpki-client