Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc04493e-ad88-3ee3-be01-65af54c8fa18.roa
File:                     dc04493e-ad88-3ee3-be01-65af54c8fa18.roa (raw, json)
Hash identifier:          MWVDzFCIK7KBSAqC8/wj07+N7UhUlhHD0dzlTklG75E=
Subject key identifier:   27:94:73:57:02:1F:CB:B9:C8:14:AD:F6:A3:BF:CF:4E:0D:72:1C:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A0C0915ABD8AE4B3316EEF480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc04493e-ad88-3ee3-be01-65af54c8fa18.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397198
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:09:15:ab:d8:ae:4b:33:16:ee:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=67d2db12-e836-4bc6-ada5-6a71f02b75c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:5a:3e:3b:e5:4b:a5:a8:e8:e5:28:a3:45:
                    1a:43:69:99:15:92:08:a3:2c:ca:4e:a3:52:47:32:
                    54:57:b4:6c:2b:36:96:6f:d7:e5:2b:75:ca:98:27:
                    24:ce:42:87:a5:0e:28:5e:00:5e:93:b9:2f:35:9d:
                    39:87:ba:90:6c:0a:31:f7:82:13:4c:f0:3d:db:85:
                    b6:2a:cb:37:59:45:d6:82:d2:3c:8b:8f:b9:55:d9:
                    60:12:af:05:4e:73:85:8a:53:78:5c:55:d7:6d:08:
                    86:5f:e7:f0:3d:e9:b8:c4:1f:dd:21:41:03:d1:d0:
                    3d:e3:1e:c3:ca:3f:f8:07:7c:08:f9:00:60:07:d5:
                    e8:48:a2:51:55:21:e3:b8:23:71:9b:22:0e:88:aa:
                    49:bb:4f:b9:25:a6:ac:40:71:a6:e7:b6:b5:d5:f8:
                    cb:ca:f0:2f:fb:55:ae:b7:77:9f:8e:83:d2:cc:e4:
                    90:a7:a4:6a:0f:69:41:38:9a:75:9b:e0:e4:79:a6:
                    b5:87:c9:b1:6a:a0:c2:c8:0b:28:e1:bf:75:89:bf:
                    f1:02:c8:75:93:73:eb:c1:1f:b2:3b:c5:88:29:b3:
                    79:bb:4c:4d:e5:69:11:99:e9:5a:35:1a:04:5d:df:
                    b5:79:b5:f1:ed:5e:40:fa:81:53:96:62:76:8d:7f:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:73:57:02:1F:CB:B9:C8:14:AD:F6:A3:BF:CF:4E:0D:72:1C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc04493e-ad88-3ee3-be01-65af54c8fa18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:64:56:f9:45:95:de:9b:4d:5e:a5:d3:d5:80:c3:d0:9f:
         93:f3:c7:c1:6b:9b:af:73:28:69:e8:3f:ee:17:5e:07:7d:4e:
         46:12:50:f6:76:0c:d0:2e:34:d9:a0:99:73:ff:b6:9f:00:82:
         78:09:84:4d:17:c9:2a:41:13:dd:8d:b4:2d:15:2a:02:3a:5f:
         01:90:46:30:d4:b3:8b:cf:d8:c4:8a:82:14:b4:56:9f:98:f0:
         b9:08:42:e9:1c:5d:bb:ea:9b:21:32:e2:26:5e:8e:95:c7:a3:
         5f:6c:f7:d1:42:44:c2:7b:56:48:b6:60:bf:04:11:b5:d8:ac:
         a3:a4:0d:b3:ed:79:11:1a:ce:a5:b6:27:f1:e3:99:5d:80:52:
         41:18:8a:29:7e:be:52:9e:97:26:0a:ea:8d:45:49:7b:4c:18:
         dd:56:9f:f0:3e:81:cd:23:2a:48:ea:3c:b7:82:6d:c4:78:b5:
         1a:b6:0f:bb:85:f8:83:5b:ce:5f:43:98:f4:c3:16:c1:92:c5:
         42:47:44:ee:c5:f3:6e:46:a2:51:db:ae:e4:41:64:0f:96:fe:
         e8:38:b2:10:45:fd:98:4e:b4:bb:32:87:d5:23:4f:ea:86:35:
         82:02:cf:4b:f8:8e:f6:b6:e0:47:02:41:a6:d7:16:f2:3f:be:
         e2:73:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:55:13 2025 by rpki-client