Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b51efdaf-23bd-32d3-b318-7d49568397dd.roa
File:                     b51efdaf-23bd-32d3-b318-7d49568397dd.roa (raw, json)
Hash identifier:          Tz+9JVtnf8v1T9ycVnawkBV7HZMr/aG1YilMjeYT1G8=
Subject key identifier:   92:2A:70:52:D3:F2:FC:4F:21:6C:3F:74:6C:58:B0:ED:74:5B:5A:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196FF39A166E87745EDFA20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b51efdaf-23bd-32d3-b318-7d49568397dd.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396600
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ff:39:a1:66:e8:77:45:ed:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=794b8c7e-563a-4db0-8523-3a5ec5b239a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:32:e4:f8:e3:b3:72:07:bc:b5:bb:af:32:
                    fd:91:48:20:55:fc:92:d6:cb:52:4b:10:55:0b:cd:
                    9c:77:36:03:53:cf:c6:9a:46:41:0a:63:df:82:f8:
                    9d:fe:ff:e3:31:5b:6c:a5:8c:72:b1:98:46:8c:2e:
                    34:8f:fd:5f:66:c4:39:81:45:38:d9:1d:b8:9e:0f:
                    77:a5:b7:ae:60:10:45:35:aa:53:36:18:ec:ca:63:
                    ad:4a:37:5f:78:40:8a:86:ca:96:ae:e3:a6:23:75:
                    81:e7:2d:6a:dd:08:df:7a:e0:84:a1:38:26:8c:d3:
                    16:a7:bb:ea:ba:13:fc:ce:f0:87:49:c5:2e:50:6e:
                    b0:4f:c5:f9:27:68:bb:ab:80:50:2e:6b:27:24:6d:
                    46:5d:76:50:4e:b3:07:4e:84:d2:6e:a8:33:e9:1e:
                    6d:80:41:e5:c5:f3:24:12:82:76:23:71:9e:e6:01:
                    fb:51:c2:ff:aa:49:2a:30:e8:96:bd:b7:73:bc:f5:
                    73:f6:81:81:99:63:9c:ae:12:d1:69:ac:5e:59:a5:
                    de:48:9e:ec:f8:29:b1:14:dc:5e:8a:3c:66:05:19:
                    77:56:81:59:48:fd:ec:51:61:b6:3c:42:6e:77:29:
                    01:7c:6e:d4:4b:ec:88:2b:1e:05:cb:da:d2:09:4e:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:70:52:D3:F2:FC:4F:21:6C:3F:74:6C:58:B0:ED:74:5B:5A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b51efdaf-23bd-32d3-b318-7d49568397dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:46:86:db:12:f0:c0:8e:57:99:31:7d:0a:0e:95:b3:f0:
         6c:83:ec:76:54:63:a2:14:fd:05:b4:0b:77:82:08:d7:68:99:
         10:2d:62:e9:b9:bc:a7:33:c4:10:a6:a0:4d:11:62:5f:e7:38:
         e0:4e:bc:05:27:19:9d:ee:b3:91:a2:c7:13:0b:55:25:3c:98:
         91:e6:a9:31:cb:cf:2b:b3:da:29:59:5f:35:1f:41:d8:04:7c:
         68:d1:53:63:13:a9:27:0b:41:e1:9e:a9:5d:54:3a:02:50:10:
         06:0b:b9:ca:9b:f5:07:d7:48:0d:14:6d:13:98:0a:94:ea:df:
         a3:8b:a7:8b:0b:1d:39:63:6b:5e:6b:ac:e9:04:77:73:e2:9b:
         97:1d:0d:5e:05:82:6e:7d:2d:59:ab:61:62:7b:a5:7c:42:df:
         78:2e:66:82:ce:00:8b:b5:d3:9b:b9:b5:9f:51:6e:14:3c:e0:
         20:a2:ed:43:58:80:1e:94:cd:97:4b:d7:60:0c:b3:e8:ba:dc:
         8d:58:cf:59:05:e1:6e:ff:1f:af:27:9f:99:7c:1a:30:9c:13:
         51:43:9b:d9:95:b6:51:16:f7:0d:9f:d1:f5:c5:20:73:c3:87:
         e1:87:26:9e:ff:bf:81:b9:5a:93:e9:5d:ff:f3:61:f3:cd:c8:
         38:e1:25:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:18 2025 by rpki-client