Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa
File:                     978b852e-6909-336a-9078-8b28915c3136.roa (raw, json)
Hash identifier:          Ib6JGtA9/bvmuLF2xoVkB3f392cMNz/TUYkuKn4NLKE=
Subject key identifier:   8B:93:C1:8C:C6:2E:D0:60:B2:37:8C:0B:5A:78:E7:B6:0E:0F:71:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F5DB3A9F949634A751980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     396597
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:5d:b3:a9:f9:49:63:4a:75:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=4381a12e-a8d9-4aea-87dd-1e4ba7edd8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:02:89:66:9b:26:04:61:28:9e:e5:c5:72:
                    12:5b:ae:95:07:e5:dc:9f:af:5f:b4:8e:dc:b9:1b:
                    63:86:c8:20:cd:5d:46:40:92:49:44:6b:03:b6:a6:
                    0e:c8:3a:07:c2:5a:73:de:a9:c4:7d:85:df:b5:16:
                    25:2c:3b:c8:36:6e:d6:af:5b:04:b2:1e:03:ed:f2:
                    52:67:8f:2f:44:b1:f7:5d:98:42:fb:55:9e:7d:94:
                    7b:bb:7d:1c:37:49:97:55:68:4a:c7:e1:8f:0b:27:
                    59:07:10:9d:1e:7a:87:fd:40:81:76:8e:d2:20:0f:
                    e6:f2:26:9b:de:a0:5f:9b:a3:25:73:9a:99:fb:db:
                    5c:19:f0:be:0b:7d:4b:9a:e8:84:3b:47:08:a9:12:
                    bf:7f:6f:07:ef:1e:01:32:40:42:5e:ed:94:fe:3d:
                    e9:07:67:db:8d:ea:ad:61:e0:b7:a1:ee:68:20:62:
                    3f:73:ee:91:82:37:22:d9:ea:d3:5a:da:25:6e:23:
                    cd:6e:6a:18:1b:72:3e:cb:36:75:cf:1f:4d:3f:84:
                    8b:9f:e1:f7:63:af:cd:3f:0c:45:b0:14:de:cb:d0:
                    91:50:2f:4b:9f:0d:34:b0:89:4b:1f:fe:f3:01:96:
                    5c:c0:17:9c:73:67:2a:5c:68:92:dc:ab:39:a7:13:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:93:C1:8C:C6:2E:D0:60:B2:37:8C:0B:5A:78:E7:B6:0E:0F:71:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:6e:f8:40:f8:cc:ef:1c:57:79:ee:a5:4c:d7:08:46:eb:
         f8:41:c3:20:52:f2:dc:ce:95:46:71:e0:0b:0c:d8:3b:36:8b:
         dd:3f:8c:f6:b3:53:17:29:ca:58:06:f2:18:96:42:ce:99:3d:
         b5:30:c1:6e:cb:87:ed:e4:47:05:a4:9a:a4:66:1f:97:c8:fd:
         0e:37:bc:65:bc:f6:11:5e:01:e6:70:2e:21:c6:f6:1f:bd:ac:
         0d:3b:52:5a:5a:7d:14:e3:70:e4:0e:96:50:db:47:5d:36:4d:
         28:71:7b:27:b2:c3:32:7d:43:2d:0c:cf:83:c6:31:d0:34:dd:
         17:f8:a7:e0:c0:13:bf:6c:ae:38:50:8e:34:7d:d9:4b:d6:f2:
         dd:df:42:71:f7:50:f9:bf:7c:db:51:64:17:e4:e3:e4:3f:13:
         99:de:de:46:b9:3a:3a:70:b8:98:3f:ef:62:13:96:a8:e2:1c:
         bc:cd:25:4a:d4:61:a5:b7:4f:9e:9e:7d:d9:90:6f:64:14:71:
         82:4e:ee:78:a3:d9:b5:c4:2d:ea:15:6c:35:bf:15:0d:57:25:
         56:92:b8:7c:ee:33:82:96:d1:c1:d3:32:59:3f:fd:8f:e6:84:
         81:96:7c:71:3e:1f:6e:02:37:e5:42:68:4b:a5:d6:13:92:bb:
         fd:a9:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:12:41 2025 by rpki-client