Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abd15ce9-3472-3573-9881-262d2f29b2a7.roa
File:                     abd15ce9-3472-3573-9881-262d2f29b2a7.roa (raw, json)
Hash identifier:          S0g63pGWcl48x32uKWZUmcS+4f//DimTk3dYX0hJTfc=
Subject key identifier:   9F:17:75:01:A7:3F:68:53:B4:B5:A5:B3:BA:B4:4E:77:17:FC:1C:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F5C0203E381076719DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abd15ce9-3472-3573-9881-262d2f29b2a7.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     396540
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:5c:02:03:e3:81:07:67:19:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=5a5b06d6-349f-4c93-a410-b2aad371bdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:34:99:0d:8c:aa:9a:a8:7e:40:5c:22:4f:51:
                    92:b9:4a:8f:8d:0d:be:3b:32:a0:e6:df:45:ec:3b:
                    21:1e:1b:f4:a4:b9:6c:2d:c1:1f:a0:1f:3e:f7:26:
                    ee:cf:14:31:ba:2e:a4:35:9e:f0:ed:04:20:bc:a2:
                    b8:a6:c5:52:18:ee:fa:51:44:d0:2e:8a:f5:cc:86:
                    9a:64:65:88:aa:47:a1:e7:32:28:a0:a5:42:ce:19:
                    95:82:b8:d7:d7:cb:d1:06:37:2f:94:4b:10:44:c4:
                    2c:36:32:78:69:c7:d7:e8:a1:76:1f:8e:19:51:36:
                    c0:1e:ab:e1:5e:6b:b4:44:6c:54:a8:48:93:c3:a0:
                    48:16:7c:02:f3:f9:a3:85:92:2f:f6:c6:92:71:78:
                    83:30:2a:cc:b0:41:1a:41:84:8d:ca:d0:32:92:4c:
                    b6:a4:94:5d:45:2a:6d:30:75:3e:1b:5d:c0:46:95:
                    38:75:3d:69:57:39:02:98:8a:bf:be:71:e0:11:53:
                    4c:58:f0:19:67:0c:fb:5e:3e:14:d8:6e:c6:7b:52:
                    fd:e4:d6:da:77:d7:6d:ad:bd:b7:84:fa:1e:97:5d:
                    2c:f8:9e:5f:23:ca:7c:85:03:68:5e:5c:23:e4:d1:
                    48:c3:94:5e:9c:06:ce:61:c8:33:36:0a:f2:6b:62:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:75:01:A7:3F:68:53:B4:B5:A5:B3:BA:B4:4E:77:17:FC:1C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abd15ce9-3472-3573-9881-262d2f29b2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:e8:d6:68:07:16:03:03:fb:8d:71:c9:7e:29:58:12:9a:
         10:68:6a:9a:c3:1d:91:ae:c2:2f:14:99:dc:84:2d:8a:a4:03:
         48:fd:3d:a2:65:95:51:45:93:fa:21:56:a8:1e:e3:3e:61:87:
         7d:c5:73:8a:80:71:95:3b:79:d2:51:89:db:3f:84:59:4f:7e:
         c7:af:75:e5:fc:71:ad:6b:e3:d4:27:ce:bf:03:f4:e6:f9:6a:
         2a:21:da:1d:4b:ee:50:bf:29:87:09:0a:4d:45:ca:43:20:58:
         a3:30:c6:17:a7:d4:3b:15:d0:17:54:09:03:fb:af:49:53:6e:
         7c:6e:4e:b0:63:0b:9c:3a:59:06:64:21:c7:c6:d6:84:fb:81:
         d1:93:90:22:c9:89:d9:87:5a:20:24:0d:1e:e6:bb:af:bf:ea:
         28:23:5c:5f:2b:4e:20:76:61:ce:6e:b0:14:ed:60:55:6c:52:
         fa:26:71:fc:01:ec:cb:b8:20:0a:2e:c0:74:8b:d3:e6:79:93:
         31:2d:63:85:b0:55:c7:79:44:bd:42:11:26:6c:df:50:b4:68:
         2b:52:1f:e2:a9:1b:da:ee:44:d8:91:ce:1f:0b:ea:b9:cb:e0:
         b1:65:b3:c0:c4:5d:1a:3c:7a:1b:b3:29:d2:45:4f:9e:10:73:
         11:e5:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:28:17 2025 by rpki-client