Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa
File:                     30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa (raw, json)
Hash identifier:          eqUxm+rB5puMQpRXHhNCHXZDLB0oBzbYaU+GH4Gwsas=
Subject key identifier:   07:B6:0E:8E:4A:A7:4A:12:CC:95:E6:0A:C2:17:4A:0A:52:78:2E:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FFD167D0158B2B843C7A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397204
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ff:d1:67:d0:15:8b:2b:84:3c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4e6b40b1-6ac6-46f5-b741-fc33280b13f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:6e:2d:6f:fc:86:74:7c:a3:71:a7:1e:a7:
                    6e:a2:8c:0e:c9:4d:71:58:66:33:2b:9d:bf:1a:ad:
                    bf:80:5d:3b:86:fc:18:95:ce:59:54:47:4e:c1:69:
                    5c:d5:1c:15:5e:e6:46:62:43:f3:52:8b:cf:b4:5b:
                    09:73:ee:e5:cb:ec:f8:b3:3d:ab:d3:bb:bf:6b:0c:
                    bf:29:0e:71:f6:e2:96:31:c8:a2:70:5f:c3:00:67:
                    91:25:aa:97:25:b3:f4:e3:2e:a4:92:72:a0:d1:43:
                    e8:6c:70:ae:c0:99:ae:1f:8b:07:c6:a4:b0:7f:4e:
                    e6:de:a5:ee:42:f5:cd:f4:a8:fb:43:63:d6:90:57:
                    4b:38:cc:3a:cd:59:f2:11:9a:ff:86:3b:16:b8:ef:
                    b1:17:5f:c5:a2:6b:cf:32:92:50:8d:28:d2:83:00:
                    07:c8:56:42:48:b8:68:72:9a:78:ff:a2:58:5c:df:
                    56:3e:68:9a:ba:0d:33:55:18:0a:1d:cb:6c:35:2b:
                    db:fa:5a:a0:a0:d6:93:28:34:42:dd:22:70:09:29:
                    10:3f:26:96:df:19:85:91:2d:c3:79:6b:b8:3a:94:
                    6c:f8:cc:d9:f7:b9:29:c4:1f:f0:d0:96:eb:53:9c:
                    af:e2:85:e3:72:e5:b6:b1:9f:8e:e0:12:21:08:64:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B6:0E:8E:4A:A7:4A:12:CC:95:E6:0A:C2:17:4A:0A:52:78:2E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30066c2f-7374-3aa9-a1f9-a6896abdcddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:41:93:4b:b0:c4:0d:da:f2:67:9b:b3:03:65:05:ca:59:b3:
         e8:a5:14:e0:0f:98:ad:d0:4a:1b:bc:17:5f:5c:e8:12:5a:a7:
         6d:9d:35:ff:82:c0:11:1e:94:6d:c5:5d:c6:3f:2b:78:18:3e:
         80:2f:46:25:98:67:5b:24:27:7c:bb:35:8f:9c:89:29:aa:19:
         61:f6:b6:fd:5d:ce:75:cf:01:7c:a9:43:d9:b1:c2:94:65:be:
         58:8f:15:ad:b3:b0:85:21:2a:63:d2:6d:d1:30:0e:06:31:d3:
         3c:61:a5:d8:a1:03:00:8e:f4:9b:49:8c:16:72:81:25:7f:be:
         29:a6:26:c0:40:4f:b3:38:34:59:2d:60:ba:67:3f:87:1f:27:
         01:92:43:bb:7b:60:ed:f1:00:b5:30:e0:d7:a8:21:3b:7b:2d:
         63:2b:56:f6:c5:42:8e:80:2d:34:37:92:10:eb:b6:8d:80:0e:
         fd:16:ca:1c:5e:08:f8:40:1f:47:8e:ba:97:ab:1e:4c:5c:47:
         70:bf:b3:84:62:58:e7:96:fa:91:e5:92:ed:0a:00:1b:98:a4:
         90:cd:1e:3b:66:d2:1f:28:6d:5f:b9:d9:7c:be:2e:44:7f:3d:
         aa:ba:45:4f:cb:b8:d4:51:15:0c:73:95:22:49:62:29:e4:44:
         f9:67:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:41 2025 by rpki-client