Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133c17c8-f868-363b-b1a7-befbc831901c.roa
File:                     133c17c8-f868-363b-b1a7-befbc831901c.roa (raw, json)
Hash identifier:          euBCv9MMxpvt016uO+/eDz+1dOFwhzRo3b6zKYgDNKI=
Subject key identifier:   C5:50:31:69:0D:8A:69:51:EA:04:B6:01:B8:A7:BC:1A:19:61:80:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B980C9DC7693B30B8AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133c17c8-f868-363b-b1a7-befbc831901c.roa
Signing time:             Wed 20 Aug 2025 14:36:59 +0000
ROA not before:           Wed 20 Aug 2025 14:36:59 +0000
ROA not after:            Tue 18 Nov 2025 15:36:59 +0000
asID:                     22547
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:98:0c:9d:c7:69:3b:30:b8:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:59 2025 GMT
            Not After : Nov 18 15:36:59 2025 GMT
        Subject: CN=3af6bb9d-9722-4160-a9fb-97811a28083d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:4f:9c:96:45:01:64:f7:76:be:d5:af:df:
                    33:b7:78:30:98:f6:97:37:86:fe:a9:46:59:83:a4:
                    9c:8c:1c:43:32:bc:3d:92:cc:37:45:ad:6d:10:41:
                    23:8a:5a:dd:0d:d9:f4:a1:fe:72:29:ee:72:31:53:
                    31:24:63:cd:5e:16:72:c7:1b:d2:ee:37:05:ca:2d:
                    69:28:4b:6b:82:b5:fa:ad:58:57:8d:66:b4:c5:29:
                    9d:e8:ff:c1:0b:09:e2:70:20:cf:1c:1d:6d:05:f6:
                    47:78:56:b6:20:f7:a2:8a:c6:c2:e4:0d:33:44:9d:
                    6a:53:5f:9c:f9:fb:8b:2e:ed:be:67:89:0a:4b:f7:
                    67:cf:6f:27:cb:c2:65:8a:9d:18:1f:e4:90:10:da:
                    67:15:ad:ac:7b:02:fa:cc:7b:9a:03:6c:0b:33:c9:
                    0e:f3:56:89:c6:0e:62:eb:a8:71:70:35:a0:e9:b1:
                    3a:8b:56:1b:6d:e9:ba:2c:11:51:68:eb:f6:26:c5:
                    01:66:03:9f:3e:5d:fb:ee:8f:ff:50:6c:3f:f5:7c:
                    d0:16:e4:6f:2d:22:b5:1b:a3:5d:86:90:a2:31:4e:
                    f5:1f:fe:3c:7d:9e:13:8a:8a:8b:ca:41:c2:10:14:
                    e2:6e:0a:de:9a:e6:98:e4:99:12:b7:b5:59:8d:40:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:50:31:69:0D:8A:69:51:EA:04:B6:01:B8:A7:BC:1A:19:61:80:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133c17c8-f868-363b-b1a7-befbc831901c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:2a:f9:d1:6a:51:df:34:37:ba:15:45:4b:40:d0:c7:78:
         4e:01:2c:63:53:b2:ea:0a:41:63:7f:66:b2:a5:09:08:2d:8b:
         e0:02:5d:62:86:e4:a9:76:9b:68:93:86:12:06:b8:4a:ad:0e:
         d1:ca:15:7c:12:60:17:85:75:e7:b9:b5:1f:2f:15:b1:1d:b8:
         77:d4:fe:6d:be:b5:8b:db:1d:57:3b:3b:8e:d0:56:08:05:5f:
         19:9d:2e:34:ef:9e:e0:6b:36:37:7c:e8:88:9b:b0:fd:2a:b6:
         fa:f2:c8:3a:0e:36:48:6a:d3:bb:f4:cf:3f:64:2e:e7:db:ce:
         9c:a7:8e:ca:ff:40:a3:76:eb:5f:3d:5f:c2:cc:22:a2:f9:46:
         ac:2c:08:2a:a6:15:7a:94:d2:40:9c:bb:bb:d1:b6:3e:7d:74:
         09:83:9f:57:fb:98:f2:10:ff:92:91:d1:6f:2e:40:d8:ae:f8:
         3e:4c:02:40:26:b2:87:18:49:4c:4a:75:45:66:bd:d5:06:66:
         2d:61:01:7b:1c:0b:52:b0:d4:0d:12:be:cb:77:d3:d3:9d:1f:
         67:a5:91:ae:e8:7c:a0:d5:40:e4:d3:f9:c1:9b:6e:4a:15:eb:
         39:96:7b:83:79:d5:10:26:c2:c4:d9:92:c7:08:c7:d9:2c:42:
         61:3c:8d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:00 2025 by rpki-client