Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a347328d-3d26-3760-840b-a960b84b2162.roa
File:                     a347328d-3d26-3760-840b-a960b84b2162.roa (raw, json)
Hash identifier:          s5W8UB1diPg9e3rA37c6nAaJxTB9aYVVDDilJGS3Ze4=
Subject key identifier:   5A:3E:67:DA:9C:BD:E6:1D:10:EC:44:44:E2:BE:67:46:94:13:98:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A331B00E89F9466E27E001840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a347328d-3d26-3760-840b-a960b84b2162.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     36624
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:00:e8:9f:94:66:e2:7e:00:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=2d2bf531-3b6c-4c2d-af2c-0f34a0375a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:14:ef:de:59:d2:c0:0e:ef:ae:34:86:65:
                    da:fc:35:93:c4:c8:13:74:bb:ed:fd:a8:97:07:37:
                    e8:c0:2b:29:16:5b:44:60:a9:3c:fc:5c:db:2a:2f:
                    2a:63:22:92:51:00:6a:2e:ea:95:6b:a8:63:07:d6:
                    f7:df:ee:3c:f4:07:ce:bf:e9:d7:6f:af:86:79:1a:
                    b7:26:e8:82:be:34:6a:45:da:f9:eb:34:be:b5:70:
                    b7:75:2e:a5:22:78:ff:d0:86:b5:fd:be:a3:35:fe:
                    12:cd:e8:ae:49:7f:80:f1:1c:db:f0:c0:f5:16:c9:
                    62:4b:bb:d5:a6:c2:78:aa:e4:5f:fc:e2:45:90:bc:
                    60:21:94:7b:d4:20:d9:bc:7e:04:7d:e2:01:5a:9e:
                    86:a7:e2:55:76:61:c6:49:6a:53:f0:8e:28:5d:42:
                    68:0f:6f:0c:34:80:b1:1b:91:88:45:90:6c:36:2e:
                    5d:a0:8d:ce:a6:ca:99:be:9a:c8:6c:84:7f:84:1f:
                    3f:29:58:d5:b7:59:2f:50:42:26:b7:e4:4f:ce:ac:
                    7e:c0:d2:19:e9:fd:17:de:13:d4:92:72:c5:b6:a8:
                    aa:ca:5e:4b:d5:69:7e:f6:7c:c6:43:33:e0:7b:3a:
                    17:ce:12:2a:3e:70:fd:38:c9:12:23:10:59:19:19:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3E:67:DA:9C:BD:E6:1D:10:EC:44:44:E2:BE:67:46:94:13:98:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a347328d-3d26-3760-840b-a960b84b2162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:d9:85:e2:e4:ca:b9:66:95:8b:97:2a:01:81:40:e1:5f:
         fb:95:a9:57:bb:c8:a9:8b:73:fc:e8:0a:9e:41:73:20:65:c1:
         55:fd:f2:65:c2:2e:2b:82:6b:54:1b:e2:e6:60:f0:9f:bf:24:
         45:a9:0a:a4:4d:ca:ea:d1:ff:ab:ee:c8:ac:55:f0:dd:8c:71:
         bb:ca:2b:7c:0e:67:b3:a3:17:69:4b:97:44:b2:0b:27:04:37:
         a3:a2:d0:15:7e:de:c1:a3:44:07:fd:bb:2c:b9:ee:35:62:cb:
         80:9d:4e:86:f2:ec:98:25:ce:63:36:af:d6:8d:ce:46:00:03:
         d1:a9:50:85:63:75:c0:10:a3:bb:b9:b1:ff:d0:48:1e:aa:cc:
         b2:4f:8b:c5:0f:8c:cc:dd:7c:28:14:aa:ac:a3:11:ea:be:2e:
         a0:d5:3a:60:b1:ac:0f:a1:22:d1:a7:ee:c0:11:1c:a3:2f:58:
         0c:ac:70:df:d5:e8:17:17:48:32:16:2e:1d:c4:ee:a2:60:e3:
         73:eb:a3:a3:d7:8a:09:56:24:84:84:85:01:25:b9:1c:92:20:
         63:ef:e1:62:ab:9e:08:9c:a7:f5:7c:fa:6b:2f:05:3f:66:31:
         6f:52:e9:06:db:07:99:85:00:c8:97:12:5d:f5:97:6d:ed:cf:
         83:81:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:14:30 2025 by rpki-client