Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa
File:                     5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa (raw, json)
Hash identifier:          kjuqSiz903tHo/1UtNzblbNd44cX8/FQnWiNjsm3ph4=
Subject key identifier:   B1:A8:3F:CF:9A:BC:0B:6D:A1:F0:E5:20:A3:BA:68:44:39:D9:AB:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FAA03862B2DB080F8680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396587
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:fa:a0:38:62:b2:db:08:0f:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=79a809f7-0c53-478f-8321-e3bc75f33081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:e1:0e:c9:df:ae:20:bc:01:2e:89:9f:0d:
                    2e:08:79:aa:97:19:14:61:cc:f4:2d:1f:23:d0:d3:
                    2b:e5:2c:78:7c:30:cb:cc:c1:78:20:a0:fa:50:4a:
                    8f:7b:1d:cb:88:df:05:f0:bd:00:cc:47:5d:74:8b:
                    8f:f5:34:f4:de:dc:cb:b8:a9:04:79:54:e5:34:d0:
                    f0:74:47:b7:0c:85:3c:68:ba:45:5d:1c:de:63:64:
                    ea:f5:58:ef:47:28:70:dc:0f:54:cb:ba:80:71:b8:
                    9d:39:7a:4a:83:4c:ae:c1:0b:68:83:9c:ab:57:27:
                    8c:7c:82:dd:62:10:07:13:f0:81:7d:42:31:18:cd:
                    2c:d2:02:12:b2:fc:87:32:e1:63:ac:72:04:f3:c8:
                    b4:38:cc:50:85:b3:ee:39:06:4f:a6:44:87:69:22:
                    63:05:86:e3:20:92:3f:56:5e:04:d2:14:fd:45:67:
                    8a:e3:91:ae:10:13:0f:81:de:77:dd:35:0d:54:30:
                    07:c7:fe:ba:66:fa:86:ec:42:78:7f:3e:31:d2:b0:
                    a8:c5:01:cc:2f:cc:59:88:68:5e:3c:5b:81:21:80:
                    3a:2e:12:9b:c1:9c:93:f5:ca:8c:0a:19:6d:c6:7d:
                    5f:e1:23:2d:91:f2:b1:7c:0c:22:7c:d3:b9:87:e3:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:3F:CF:9A:BC:0B:6D:A1:F0:E5:20:A3:BA:68:44:39:D9:AB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:22:ca:f4:04:9f:70:dc:8c:fa:de:eb:8b:95:3d:21:3d:
         8b:57:c7:f1:fd:dd:99:52:08:0d:41:89:14:0d:c4:a9:4c:4b:
         c9:d5:64:f2:91:69:77:c4:68:c6:6b:38:a6:da:f4:a7:c9:13:
         60:f7:00:33:3f:b8:23:06:11:66:61:68:d7:27:cd:7d:54:15:
         93:df:ae:a2:6d:b9:61:a7:4e:9e:56:a8:c5:3f:40:d5:bd:46:
         48:4e:91:75:34:49:4d:37:9b:3f:32:05:8e:6e:78:78:9f:b9:
         4d:67:22:b6:19:66:9a:22:6e:63:0b:7b:b1:98:1d:c0:ae:6e:
         7d:29:1d:53:bd:3b:a1:64:da:03:7a:31:96:c4:41:04:27:79:
         6b:9f:9a:9b:bd:d5:f0:57:b4:fe:78:33:d1:1f:29:5f:ed:68:
         69:3d:bc:da:04:0e:66:0b:89:0f:a8:7f:a4:08:84:f8:9d:c2:
         7b:14:40:45:ee:8e:2d:93:c6:69:d9:33:17:96:f3:61:9f:a7:
         61:57:06:92:39:cc:62:d7:ab:fa:db:08:27:94:be:36:ed:4d:
         9e:d9:d8:e4:92:3a:3e:6a:56:0b:6d:32:d0:81:78:b0:80:36:
         27:b2:37:c3:e5:38:8a:62:cf:9a:00:18:1a:6b:f9:97:c0:5f:
         e2:0a:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:39 2025 by rpki-client