Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dc18e7b-a43a-3105-85a3-c5939744b957.roa
File:                     5dc18e7b-a43a-3105-85a3-c5939744b957.roa (raw, json)
Hash identifier:          QVPrqhV7DlmV424EaCFyh5cyBEiodQASWL0iQMKq2lQ=
Subject key identifier:   4C:9E:AB:C9:17:74:D6:01:84:68:81:10:58:F6:B9:40:0A:68:A1:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CEA6E7BFD3384654A450
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dc18e7b-a43a-3105-85a3-c5939744b957.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397204
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ce:a6:e7:bf:d3:38:46:54:a4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=17f8550a-f0b3-460b-937b-54b933c9d8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:98:24:8c:0d:4b:dd:42:3a:3d:cb:39:0e:
                    41:e0:e1:12:63:d2:10:b4:73:c2:91:8a:bc:59:80:
                    9b:52:7a:11:1d:11:fe:25:d1:8e:68:8c:ee:9d:6d:
                    57:fe:64:bb:c0:a5:dc:58:d0:57:cf:8f:5a:4f:d3:
                    a3:ff:a2:6b:71:d3:46:d0:1d:0c:b2:00:75:ac:9c:
                    71:29:e8:48:d1:e9:e1:fa:2a:18:8b:64:b7:0a:42:
                    5a:20:34:ef:67:80:fe:bb:d0:51:35:3e:9c:f4:d9:
                    7c:c6:9b:d5:ae:55:85:4d:59:89:cc:8f:2e:c8:b5:
                    ba:97:e5:52:52:bd:2c:fa:de:ff:9c:57:71:00:9b:
                    9c:cf:08:44:cd:98:db:f4:1e:f8:a5:60:e0:e7:1f:
                    b4:10:18:b2:66:2a:8e:e0:65:48:2b:b4:9c:53:7f:
                    00:29:44:97:25:86:27:7a:44:05:93:9e:8c:8e:91:
                    b6:3e:14:72:c2:1f:a0:cf:72:34:77:24:23:8f:30:
                    fb:47:75:7d:2a:d6:f9:89:67:58:91:18:27:93:60:
                    c7:e5:1e:27:35:b6:bf:74:e8:af:e9:34:e0:8f:79:
                    80:4c:64:6e:c7:83:39:80:92:47:6e:06:7d:3f:b5:
                    33:44:e6:86:a5:96:0d:e5:91:b2:1b:e6:c9:04:27:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:AB:C9:17:74:D6:01:84:68:81:10:58:F6:B9:40:0A:68:A1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5dc18e7b-a43a-3105-85a3-c5939744b957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:10:75:50:b0:bf:49:12:fa:1a:79:fd:9f:8a:05:41:a0:
         de:d1:8c:ed:6a:5d:39:7a:e7:fe:32:27:29:0c:a6:17:34:50:
         7c:d8:ff:01:57:9c:2b:69:eb:e9:4d:88:4d:db:c1:a3:25:90:
         05:19:29:05:d0:31:77:45:16:58:f2:b5:6f:a9:d6:c6:b9:3b:
         d2:db:4c:1e:21:b4:bf:08:21:48:96:9e:b9:e7:42:37:79:e5:
         5c:96:9d:44:9c:de:34:4f:d6:f8:a4:45:cd:1d:eb:60:1c:66:
         77:06:02:e1:93:13:ff:0b:14:66:5a:de:25:f5:26:94:4a:4b:
         0a:ad:e7:68:d2:d9:9f:d6:13:8f:f6:bf:13:6b:08:a4:ea:1a:
         9d:08:21:d2:a1:c4:ed:48:87:b0:6d:fa:1b:aa:35:19:4b:cb:
         38:2a:8c:c9:49:e1:97:10:0d:35:c8:0e:5d:c4:3e:9e:b9:65:
         89:69:5a:0a:1e:aa:62:23:84:9c:21:32:65:25:4c:3a:c6:16:
         31:cc:7a:9d:33:3d:15:7a:f1:89:1c:c0:39:9f:f7:1d:d6:72:
         23:62:11:4f:9e:13:2e:9f:8a:ba:1f:0b:d2:61:f2:e1:17:ca:
         6e:82:ef:68:65:f8:5a:ca:a6:be:1f:6b:b8:0f:7b:af:ba:b8:
         1e:63:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:08 2025 by rpki-client