Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a034ba-2d25-3875-a9cb-b91f694dd18e.roa
File:                     48a034ba-2d25-3875-a9cb-b91f694dd18e.roa (raw, json)
Hash identifier:          JLUTZ7tBRbgCIilHi+tuzmH1ezWw/3wkNiY7Wod+MpI=
Subject key identifier:   0E:95:E6:71:AD:82:50:15:AB:F2:04:D7:38:73:CA:91:7D:D5:B8:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB244F28E157B0CC9B2100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a034ba-2d25-3875-a9cb-b91f694dd18e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36619
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:24:4f:28:e1:57:b0:cc:9b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=db46566e-f8bb-4fc2-9189-6e9ac123aea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:9f:00:13:e7:dd:76:1b:80:8d:44:57:f0:
                    67:c5:6d:7d:9f:ff:14:66:37:c7:2b:32:e4:b5:03:
                    b6:fc:b0:ad:8d:81:ed:33:34:01:b5:77:74:9c:f3:
                    43:90:ea:f8:36:bb:36:58:d1:9f:e8:6c:b7:e6:b2:
                    bc:9f:2b:38:1f:01:a8:4d:8b:64:2d:77:83:3e:29:
                    b0:91:7d:f1:50:f6:55:48:04:a1:de:6a:57:fb:e4:
                    9c:07:8d:4f:ca:3f:e1:60:39:86:a9:d1:cb:67:3d:
                    50:b5:f7:68:81:ea:0d:99:25:44:67:d7:3c:8b:5f:
                    14:48:f7:38:36:55:cd:8b:91:b0:55:e8:a8:94:eb:
                    51:73:e8:62:b7:29:4c:b6:ea:55:b9:10:bb:5a:22:
                    9b:da:2d:f1:6d:6d:54:c1:c2:69:72:11:62:6f:79:
                    bc:df:24:20:2a:52:38:70:ba:96:6c:19:02:35:76:
                    89:d5:8d:82:04:23:a9:6b:fb:f1:e4:4b:1e:a4:10:
                    af:28:af:ed:01:44:9f:f9:b4:9a:91:f3:18:8b:1f:
                    cd:11:f1:7d:e2:b1:1a:03:d9:da:73:1d:86:3a:fd:
                    86:45:30:73:b3:14:39:f0:95:76:41:0f:1d:02:6a:
                    8c:97:98:e3:ff:c6:95:36:02:88:cc:08:41:2a:b7:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:95:E6:71:AD:82:50:15:AB:F2:04:D7:38:73:CA:91:7D:D5:B8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a034ba-2d25-3875-a9cb-b91f694dd18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:0d:79:c1:b6:7b:8b:28:af:bd:c3:6b:8d:78:9a:39:91:
         69:61:e4:15:13:23:76:ad:0a:68:57:7c:de:25:53:72:ec:56:
         a8:fd:b9:76:76:d2:35:af:0e:f7:82:e5:3c:55:f6:b0:55:a4:
         3c:5a:d4:e7:9d:09:69:bd:01:c0:2d:03:b6:ad:67:57:12:2e:
         b8:2b:f0:5d:56:d7:ae:4c:1e:df:f3:49:e3:91:9c:44:4f:94:
         55:3a:1b:90:f6:b6:07:2a:6f:0a:a3:fe:76:1e:8b:b7:d1:44:
         4e:bc:51:22:ce:be:3e:5d:39:ef:d3:dd:05:15:e4:5c:ae:a5:
         ca:bc:69:38:61:d5:08:04:e9:d9:1e:e2:06:15:17:26:3d:33:
         e3:a1:d3:82:b6:ca:fd:a1:c6:10:08:b5:4a:ed:d4:67:68:99:
         c1:4b:66:a2:98:66:91:eb:8b:69:cd:bc:95:2f:76:33:ef:61:
         3b:53:17:5c:8f:95:b5:30:e6:01:07:78:64:8d:19:fa:21:67:
         5e:89:48:9c:e8:48:1f:5d:f2:b1:75:14:73:87:27:9f:01:31:
         d9:e9:fb:1f:d9:6c:b6:6c:8f:ab:54:14:51:fa:ea:3b:f2:0a:
         01:1b:86:0c:96:4c:e3:5f:f3:ae:5f:d0:89:14:98:91:98:59:
         f9:8a:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:56 2025 by rpki-client