Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d83e9e-a0f0-3014-8946-cb58ea52682e.roa
File:                     08d83e9e-a0f0-3014-8946-cb58ea52682e.roa (raw, json)
Hash identifier:          8E8Z0s7DJ14T232lYeYu3QhJUfHgosKNLmCAqwyFQA0=
Subject key identifier:   DF:29:AE:0C:DB:3C:FD:0A:8F:5C:43:0D:29:E0:DF:FC:C3:68:24:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AECC58BEE59474500C8210580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d83e9e-a0f0-3014-8946-cb58ea52682e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396580
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:8b:ee:59:47:45:00:c8:21:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=35078060-3088-4f90-9eb3-683468213661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:10:c6:a6:10:86:40:ae:e6:28:e4:5c:37:
                    52:5f:aa:da:e1:49:08:09:f3:09:29:80:b1:45:26:
                    d1:70:ae:27:f9:0e:e1:20:18:44:41:c7:79:1d:3c:
                    47:b8:58:95:95:85:9e:41:8f:eb:a9:e1:f9:cb:c1:
                    ec:4e:26:39:92:98:11:ff:47:05:59:1e:37:9d:a2:
                    fd:f7:3b:3f:ff:0d:b2:ba:25:db:07:4d:41:1e:0d:
                    94:cb:6c:40:d9:16:37:55:f3:fc:15:64:f0:a7:e4:
                    06:d5:ac:ea:5b:c0:f9:90:44:a7:ea:1e:2c:2b:4f:
                    4b:d7:27:d5:c7:81:de:92:7f:db:b9:0a:2b:cc:be:
                    77:d4:8f:92:ae:0e:8a:14:b6:05:5a:80:fc:61:fc:
                    e8:25:83:b7:a2:5b:43:a9:3a:91:19:5c:11:c3:71:
                    f7:10:b1:d0:bf:de:06:59:2c:97:cf:bf:c4:31:9a:
                    b1:19:70:85:4d:95:e5:14:2a:86:6e:62:5d:57:1f:
                    b9:a9:df:48:a7:d1:07:0f:5c:28:ed:7e:33:05:46:
                    c2:35:ec:ed:fa:f4:4d:5d:19:85:2a:e2:bc:01:b1:
                    b3:30:74:83:8b:fb:1a:a6:fc:cd:82:a3:bf:d6:07:
                    9f:5c:13:aa:57:0d:22:98:21:7e:c5:d4:53:91:08:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:AE:0C:DB:3C:FD:0A:8F:5C:43:0D:29:E0:DF:FC:C3:68:24:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d83e9e-a0f0-3014-8946-cb58ea52682e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:33:4c:e8:13:ec:b1:1d:53:3f:ed:08:18:fc:45:27:86:68:
         71:1a:f9:e0:35:f1:16:4a:4c:e0:c5:0e:ba:3d:6d:16:04:7d:
         50:3f:68:79:2c:b4:91:2e:13:99:bb:bf:10:6b:47:3b:1c:16:
         06:a6:e8:3c:51:12:75:e0:52:aa:64:98:bf:ca:a1:96:3a:f7:
         9c:bc:7c:0f:24:d1:e4:1e:c2:5f:52:65:46:02:d9:56:1c:cd:
         cf:45:56:89:7b:5d:15:6a:dc:c4:5e:8e:30:01:1b:26:41:b0:
         c4:1a:de:e6:5b:a6:67:f1:5b:62:ef:c2:ab:9a:ae:e1:3f:b1:
         de:60:87:d8:da:52:c7:a8:c0:ea:7a:c2:f9:17:97:69:27:1a:
         bf:dc:d0:ac:c0:e6:02:4b:ea:2c:52:c7:4c:5b:44:bb:19:d4:
         bf:41:f0:99:a8:47:bb:dc:bd:ed:d2:0a:52:d0:20:73:cd:ea:
         80:2b:60:76:10:6d:d7:df:28:9f:3f:ff:15:4a:25:23:54:d5:
         ef:d6:cd:cb:b7:44:d6:3b:bf:6e:66:65:60:24:f7:ac:9c:9e:
         51:38:66:be:9c:a9:61:39:e5:db:a2:f6:41:dc:6a:d5:c6:52:
         1c:4a:10:4f:f0:75:66:79:9f:25:85:45:98:1c:e4:68:15:6f:
         e9:c5:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:45 2025 by rpki-client