Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0deab49b-1446-3609-89ea-27323cd465ad.roa
File:                     0deab49b-1446-3609-89ea-27323cd465ad.roa (raw, json)
Hash identifier:          wXIufEaFhGWopKIUvOC9m6slY0wSbTmL+SIynr4+Avo=
Subject key identifier:   4E:9C:1B:91:9B:E7:F7:1C:05:2E:97:C8:CB:E1:51:AE:4B:13:98:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A268ACDD3D93D0A1F80B6F400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0deab49b-1446-3609-89ea-27323cd465ad.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396600
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:cd:d3:d9:3d:0a:1f:80:b6:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=037d5a18-dbb2-42ad-b3f7-5b6504bf7800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:94:fa:d9:fc:e1:c5:e3:31:71:11:10:99:c1:
                    aa:c2:f4:dd:87:af:ae:3e:5b:d7:00:d8:76:44:a1:
                    87:47:7b:e3:44:fd:8b:3a:45:18:18:26:8e:10:4b:
                    95:fe:b5:8e:1c:db:ce:2b:75:51:16:17:5d:50:4e:
                    0e:f9:17:40:ad:5f:82:08:11:06:7f:83:81:24:d1:
                    68:2d:81:12:a3:36:15:db:ed:73:4e:6f:ea:dd:a6:
                    77:50:96:f3:de:d4:36:99:90:a3:37:f7:8e:f7:d3:
                    90:57:6b:c4:6a:a3:77:d4:96:9e:2d:94:66:8f:c8:
                    9b:bc:a3:e3:0e:8f:78:2b:b0:47:dd:b0:41:06:d4:
                    0f:0f:38:6b:6c:d3:53:75:32:d8:5e:65:8f:cf:fa:
                    e4:e5:4f:42:d6:5f:89:10:8a:c7:da:32:8a:24:a1:
                    c9:6d:48:6e:8f:10:36:02:7b:87:79:45:ff:f3:d9:
                    00:84:22:83:ad:40:70:bf:e1:46:bd:ea:33:29:3f:
                    de:c6:e1:71:d9:18:3e:01:12:fc:2b:9d:c0:9f:c8:
                    14:b5:71:83:11:3d:fb:92:89:89:45:61:59:b8:2b:
                    62:8e:0d:46:ff:c9:28:86:51:37:a2:7a:b9:56:af:
                    d9:63:a0:bb:08:d2:70:94:aa:f7:9f:18:28:04:97:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:1B:91:9B:E7:F7:1C:05:2E:97:C8:CB:E1:51:AE:4B:13:98:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0deab49b-1446-3609-89ea-27323cd465ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a7:a9:f6:d3:a0:06:c4:f3:77:cf:83:6f:bb:1a:a4:00:21:
         eb:72:e9:a4:9a:cd:ae:81:80:6c:2e:b2:9d:75:f4:7e:fd:2c:
         af:16:e1:8e:16:bb:4c:87:39:63:a2:3a:6f:62:df:67:cc:51:
         a8:43:a0:01:63:cb:dd:79:be:76:9f:79:8b:0a:0c:d4:97:48:
         e9:77:e7:16:2f:47:5c:18:ac:ee:42:c3:2d:bd:d2:7c:35:db:
         26:5e:f2:c3:04:78:e0:20:7d:3a:d0:06:08:38:ff:51:11:37:
         ad:98:7e:a0:49:f2:46:c2:71:14:9f:a0:e1:c3:54:e0:7e:e0:
         e8:cd:7f:00:15:5f:4b:94:8d:a2:a9:5e:2c:dd:fa:42:2e:20:
         72:3b:00:88:90:a0:45:74:8f:6f:31:1b:ac:b9:99:43:fb:cd:
         f2:ee:dc:66:34:f7:66:56:53:25:1a:d6:fd:c0:96:1f:03:52:
         0e:41:80:c3:b6:ec:a1:3c:3d:29:4f:f3:ab:d2:6c:91:d0:42:
         ac:b4:b2:c2:4e:fe:24:bf:df:d4:7c:91:21:bf:ea:89:03:95:
         f6:22:a5:0c:fc:33:1d:bd:eb:86:19:37:44:fa:5d:b7:74:4e:
         30:ba:f4:19:ed:01:bd:06:3e:35:54:97:c6:8c:fb:29:da:76:
         da:bb:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:08:22 2025 by rpki-client