Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061448d7-c288-3a26-9950-bfcee45a23f9.roa
File:                     061448d7-c288-3a26-9950-bfcee45a23f9.roa (raw, json)
Hash identifier:          q3nxk0MCvuXXBlBKOsIGyHJdEIjCpfnwLii0CT/H6ao=
Subject key identifier:   33:C8:6B:B3:33:04:DF:73:63:70:6B:17:2E:26:D5:BF:67:AB:28:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EE79A1EDB68D114FF280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061448d7-c288-3a26-9950-bfcee45a23f9.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396574
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ee:79:a1:ed:b6:8d:11:4f:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4354dc26-66f5-4079-8dd4-bbd1797ebd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:4c:4e:79:0c:61:b7:ac:9d:ad:b1:d6:67:
                    82:e5:85:25:84:95:ff:1a:38:a7:b9:83:1b:e7:04:
                    b4:9d:6b:3c:21:41:d1:e3:63:cb:7b:96:9a:95:5b:
                    a7:04:8d:9a:ee:81:42:82:ab:b1:c8:76:a8:37:15:
                    06:68:3a:d6:e3:95:e9:82:b6:0e:c0:c9:4b:46:af:
                    3a:1d:d2:44:db:01:36:eb:69:dc:8c:64:78:13:40:
                    12:ac:7b:99:77:4d:11:76:10:34:71:02:50:14:f3:
                    6e:de:94:cd:c9:a2:c2:12:ef:fc:0a:03:c4:fc:a1:
                    04:d0:f6:92:dd:84:8c:4d:b4:cd:69:aa:0a:59:94:
                    98:cb:cc:6d:dd:15:b3:63:09:30:90:41:27:4f:2d:
                    ed:47:dd:41:d9:81:e1:10:7e:48:6f:8d:ef:ce:57:
                    16:88:c8:87:ad:63:7c:1b:cf:b1:3a:30:b0:a3:a7:
                    d6:e4:2f:96:02:dd:55:af:4b:91:53:29:b5:8f:5e:
                    a5:1c:50:59:10:12:b5:b1:22:19:7b:fb:90:07:31:
                    51:c3:3a:7f:13:f0:70:98:14:ac:89:f1:4e:11:28:
                    da:48:b7:11:89:0e:6c:86:6f:56:76:ed:8c:53:fc:
                    60:da:92:0c:e2:ce:57:4f:8c:9d:10:dd:49:7a:1b:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C8:6B:B3:33:04:DF:73:63:70:6B:17:2E:26:D5:BF:67:AB:28:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/061448d7-c288-3a26-9950-bfcee45a23f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e8:f1:07:31:7b:d8:01:76:6b:66:15:42:0b:a7:c0:c2:a8:
         42:01:5c:cb:8b:91:d5:97:5b:1f:24:be:7b:57:ed:f6:e1:26:
         3f:f5:7c:d1:d0:af:df:ac:6b:a9:7f:ba:1f:bb:30:0c:57:b1:
         57:cc:8f:27:5a:34:95:28:3e:71:d7:33:d6:6b:8e:ab:83:eb:
         5a:b9:0e:e4:e2:3f:bd:2b:b4:37:ae:e5:df:e4:02:05:cb:3f:
         27:40:8f:97:76:fb:0d:ca:7d:e5:63:f8:35:b4:6e:b1:c8:c4:
         e1:ea:8e:2a:56:28:be:3f:62:c4:79:cd:48:a8:57:4a:a6:e4:
         29:95:70:ae:b5:be:e8:2b:d0:f9:ab:61:a7:61:63:31:d5:43:
         33:9b:7a:3d:39:1a:a1:46:22:cc:31:c6:0e:16:d9:b6:18:fd:
         4b:f6:dc:e3:a5:d7:0f:df:63:9f:40:38:2c:1e:09:85:9a:eb:
         59:ea:57:9e:2d:8e:87:3c:b9:c9:e0:e3:5b:6d:63:58:a6:c6:
         6c:cd:3a:9d:9a:2a:35:61:b5:37:fa:8b:bd:f3:f6:a2:15:61:
         52:ee:b4:e9:30:91:5c:59:1a:2e:7a:87:7b:d9:fa:35:3e:70:
         e5:78:8b:e9:c4:5b:a1:79:c6:90:8e:60:e4:ee:39:77:3b:3b:
         11:25:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:55 2025 by rpki-client