Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb6dd70-2a18-3421-83f9-ee0408388be0.roa
File:                     2eb6dd70-2a18-3421-83f9-ee0408388be0.roa (raw, json)
Hash identifier:          EBp4sr5dLQMiAeRAUwBpXKo8MH4+ITRATUUDu6A4iwA=
Subject key identifier:   4F:EB:39:7A:D9:2A:79:2E:4D:D0:65:D7:77:90:F8:F9:14:D5:8A:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FC7B0F978E1859098900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb6dd70-2a18-3421-83f9-ee0408388be0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397197
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fc:7b:0f:97:8e:18:59:09:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6a00366a-3068-447b-a5d7-839798d17f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:2e:f5:a3:b1:3a:02:db:9b:ac:72:4e:f1:
                    13:b1:ce:03:06:e9:d6:ce:4f:2b:f6:25:c4:b5:ab:
                    70:5f:f7:44:bc:14:76:14:63:bc:7c:5d:9d:6e:87:
                    2a:29:d2:f4:6e:62:53:48:da:5b:63:11:96:aa:98:
                    ce:79:93:6c:26:38:64:e8:d9:9d:cb:8e:0c:bf:73:
                    d7:da:86:c9:f4:1c:18:69:55:fc:12:8f:2b:66:3c:
                    a4:7b:65:20:6a:f1:ff:2f:bc:9e:08:ce:48:81:70:
                    7d:64:fe:1f:0c:8e:b6:19:6c:f0:8a:24:b4:48:66:
                    a3:a8:db:66:b5:e5:30:7c:f9:c7:d0:84:89:1e:85:
                    3c:39:f2:ab:a6:2a:38:9a:08:28:a8:8c:12:a2:f9:
                    86:b4:29:96:7b:cd:e9:d4:b7:d3:b5:35:71:8f:2c:
                    c1:08:af:47:24:3c:89:cd:9c:29:ec:ce:dd:10:13:
                    b2:c9:de:07:39:ce:c5:87:af:dc:04:1c:4d:cc:6b:
                    bd:d9:aa:9a:9d:62:f2:4c:bf:61:41:c3:cc:fb:bc:
                    06:d1:4e:ed:0b:8f:fa:8c:fd:11:fc:fd:9c:f2:54:
                    89:6c:24:c5:6e:79:28:9d:34:9b:68:e1:9c:ef:e6:
                    51:75:d9:53:a9:a8:44:d1:51:19:d7:ce:75:8e:ce:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EB:39:7A:D9:2A:79:2E:4D:D0:65:D7:77:90:F8:F9:14:D5:8A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2eb6dd70-2a18-3421-83f9-ee0408388be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:31:52:c7:54:42:5b:d3:79:78:44:c1:b8:06:52:0d:8a:08:
         e3:7a:04:87:e7:94:4b:9b:23:bd:85:d4:da:4c:b4:5c:58:f7:
         5b:f6:2a:6d:63:e5:e0:be:6f:cf:1f:d2:b1:17:7e:97:a0:10:
         ec:1d:59:78:bb:20:e9:5c:69:ca:5f:09:0c:03:71:a2:00:85:
         a6:7f:a3:e9:4f:d0:06:d7:1e:8c:cd:95:eb:15:52:d2:cc:be:
         02:8f:fa:d9:24:38:11:c5:c2:72:c7:26:ff:08:df:27:a9:4f:
         e0:29:09:e1:44:ea:85:26:95:02:f6:55:35:02:0a:ab:f6:bd:
         58:f2:6b:20:58:51:01:0b:c5:a3:d4:18:fd:2c:bb:4b:42:dc:
         8f:55:65:31:e0:ee:8a:1a:d8:47:78:80:eb:90:c1:87:df:16:
         86:6a:83:47:88:29:66:5d:c5:35:49:91:70:33:56:0c:33:de:
         f6:a5:89:02:d8:bf:0d:47:5e:ef:88:fb:0c:01:cd:a9:70:63:
         26:74:9e:ac:95:ac:84:b8:cb:ed:ed:82:3c:58:f9:26:cf:97:
         80:7f:16:0c:da:6b:36:25:16:45:9e:b2:28:10:18:1d:99:0d:
         e6:8b:3b:a0:3a:14:90:94:0b:b0:f7:0b:00:ba:87:21:15:c6:
         db:24:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:43 2025 by rpki-client