Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664f2977-141e-3832-9dac-e2488af0b819.roa
File:                     664f2977-141e-3832-9dac-e2488af0b819.roa (raw, json)
Hash identifier:          0GQMoJbbCBTnZLcYMKv31649rvhaZ862YjqxVkBvTsc=
Subject key identifier:   21:5B:5E:E6:8D:FC:C7:E6:CD:B9:9C:B8:18:B7:16:0F:E1:6C:30:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C77709B7ACB88FBBBE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664f2977-141e-3832-9dac-e2488af0b819.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36623
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c7:77:09:b7:ac:b8:8f:bb:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=41560a10-3cd8-4c1e-a889-e625273f8c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:89:34:2e:1e:d3:99:99:d3:7f:f1:02:93:
                    62:6f:43:83:32:4f:51:9c:61:8a:ff:76:fd:da:45:
                    4e:27:68:fc:08:09:b8:8e:3d:25:9a:68:95:94:99:
                    7e:21:e9:53:d9:bd:86:7a:6b:13:b7:8d:29:88:6b:
                    b3:cf:80:5a:86:63:ed:5b:5b:c3:bf:17:bf:71:d4:
                    28:90:3f:bc:5b:59:9e:a3:96:c9:70:31:29:df:51:
                    49:7e:e9:93:24:bb:42:76:e9:aa:b7:30:93:42:9a:
                    ed:cf:05:1d:ff:41:1f:65:d0:14:33:87:32:5a:b3:
                    ee:34:86:0e:b9:4f:99:a2:1a:39:ca:b5:ff:4c:93:
                    bd:6a:69:c7:23:52:05:7f:26:18:ed:0d:a9:53:a5:
                    f1:57:9c:7a:98:42:1a:f3:d0:3e:a8:f4:7d:d4:41:
                    7c:9a:21:27:4f:19:f9:94:41:a7:a6:42:d7:7f:f1:
                    7a:61:c1:29:d3:77:87:b1:f6:4c:b6:a2:9d:7f:ac:
                    06:a2:dd:68:5f:ac:f3:e8:00:e9:5e:bb:f6:a1:bd:
                    17:b3:1a:f0:50:48:5b:df:5d:38:81:e7:2f:41:33:
                    2a:5c:09:43:b3:4d:94:16:29:d7:01:f9:a7:eb:49:
                    89:12:51:a2:3b:1c:f3:24:72:63:4b:54:27:bb:bf:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5B:5E:E6:8D:FC:C7:E6:CD:B9:9C:B8:18:B7:16:0F:E1:6C:30:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664f2977-141e-3832-9dac-e2488af0b819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:14:85:54:7a:ff:49:13:bb:a5:a0:77:bf:2d:5e:8a:35:
         ac:c8:c5:c1:27:10:2e:3c:ac:80:89:93:64:12:4b:61:d3:1b:
         1c:28:2a:a4:3a:69:01:df:cb:76:9a:82:fc:39:79:f8:8f:11:
         7f:e8:bf:0a:1a:11:fe:60:9f:67:76:dc:44:93:68:bf:e3:28:
         47:59:69:04:b6:00:66:d5:f1:a6:57:6a:43:86:89:f5:0a:d2:
         73:a8:e5:c4:31:95:50:ba:38:6a:d2:e9:65:4e:c6:d7:92:a0:
         c0:57:15:65:80:e6:48:03:73:84:c3:de:61:ff:46:56:9c:e6:
         83:70:50:da:62:4f:fb:77:46:ff:a4:a8:4a:1d:ed:d4:c9:7c:
         a2:58:14:0e:a6:a7:aa:5b:6f:ef:06:29:18:6d:3a:90:ef:a0:
         00:a1:ce:24:c5:42:6d:09:e4:49:71:7d:ec:a8:90:fc:6b:0a:
         1f:7c:b7:8e:68:41:7d:82:7e:b8:7e:20:22:80:0d:aa:e8:88:
         a4:08:c0:31:ab:03:86:94:cd:ac:82:6c:7f:01:cd:55:60:1a:
         fb:04:05:fd:a5:86:b4:66:ac:c6:59:6a:34:cc:3c:0d:fd:28:
         9d:0f:18:3f:af:dc:f1:9d:ad:3d:7a:74:fd:3a:35:e1:ad:83:
         9e:9e:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:34 2025 by rpki-client