Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa
File:                     cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa (raw, json)
Hash identifier:          lwsvp2+wE11Ots3LvgRUZ7tFKb2ZEXInoAehwVyTEe8=
Subject key identifier:   58:47:2C:5D:C1:E8:AD:76:C7:C7:54:79:5F:42:7B:64:7B:2C:DA:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849AA4F5FC54D8324E6AF1FF980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     396600
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:5f:c5:4d:83:24:e6:af:1f:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=c55cb707-07a1-49b7-b583-7830d078fb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:2e:a2:e5:96:d4:8f:e4:e5:63:df:fe:31:
                    48:09:0d:42:db:b4:67:c7:20:4b:76:c8:91:16:68:
                    70:b3:68:21:bf:bc:ea:bd:cd:7b:e7:cb:da:bb:c3:
                    af:e6:b7:3f:37:bd:45:a6:8f:4d:11:ac:48:04:a8:
                    f7:e6:8b:90:73:82:46:d1:d4:c4:79:5a:41:5c:73:
                    45:ed:f5:41:f6:6c:cb:2f:67:3d:30:e4:7c:98:93:
                    ad:5e:56:c7:56:55:fe:43:94:54:76:ee:ba:50:ee:
                    d0:d5:6c:e0:c9:6d:d3:34:bb:f1:0c:0b:b6:20:a0:
                    66:ac:bc:0e:85:5d:63:e4:ca:31:2d:95:6b:1c:d6:
                    03:33:c7:2e:76:2c:5d:44:e4:ea:3f:d8:60:35:70:
                    bc:f3:1f:4c:71:e9:a8:f2:38:c6:6d:1d:2c:f5:b5:
                    ac:52:3b:ba:fc:b0:23:d2:6e:da:50:23:d2:78:a3:
                    54:30:d2:cf:e6:a0:e2:9c:aa:78:87:1f:52:08:ee:
                    f2:d0:a9:94:4b:8e:d0:fe:d0:e9:a1:de:d5:f3:83:
                    1f:8f:b7:dc:f8:70:68:b6:a7:ec:02:6e:5d:fa:46:
                    83:30:e2:cc:77:04:76:31:66:6c:e9:98:13:6a:b0:
                    90:06:07:6d:b9:f6:cd:00:fc:ab:9d:b1:57:34:c3:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:47:2C:5D:C1:E8:AD:76:C7:C7:54:79:5F:42:7B:64:7B:2C:DA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:de:11:3f:fe:dd:c8:90:b3:34:5c:d3:2f:d7:87:f7:5f:
         a5:cc:3a:d3:99:b1:08:8e:5a:02:53:71:eb:ac:9d:4e:ce:53:
         9b:fe:4f:48:63:e2:37:8d:8c:bc:d9:5f:12:64:01:4d:b6:22:
         9e:7e:d2:30:fc:fa:97:7d:07:c7:1c:4c:ce:68:41:96:c9:14:
         28:81:cd:4b:42:9b:9a:34:e7:f6:d8:c1:8d:c7:4f:6c:a5:77:
         75:80:0b:e4:f3:14:75:89:47:22:ab:eb:ce:c2:5b:02:a2:78:
         96:09:7a:38:9f:bd:a2:65:db:56:09:95:01:48:a1:51:20:1b:
         c2:9a:50:6f:ea:e2:da:e3:d7:b9:1d:93:3a:72:c1:9d:5e:ed:
         e6:f5:6b:6b:53:36:bb:c9:86:ca:ec:f4:ef:da:e6:42:70:b7:
         c6:8f:97:82:81:6d:0d:87:e6:76:67:b5:0b:6e:76:ed:94:dd:
         65:7d:b3:c4:93:72:05:4e:8e:0d:d9:a4:dc:66:4c:2a:f1:eb:
         6e:99:81:c0:d5:d5:5f:56:cf:c8:27:17:4e:d5:2b:be:27:55:
         5e:9e:74:31:49:38:5a:e9:a4:6a:04:e4:75:cc:e7:7d:8a:e8:
         66:0b:f7:25:3f:6a:28:91:b4:2e:61:30:d8:8c:06:6d:96:79:
         3e:e5:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:45:04 2025 by rpki-client