Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa
File:                     b8fd1043-04ca-38de-928c-018b86fed03f.roa (raw, json)
Hash identifier:          Rk4EtHX5aDQlbzYJTwS5jrTtU4/BACZ6anp6pY4Z5+k=
Subject key identifier:   D8:8F:25:87:8D:40:CF:E4:94:D8:C0:19:51:A3:9C:45:40:FB:CF:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE19700AA40DC612BAAE1DF30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397208
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:00:aa:40:dc:61:2b:aa:e1:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=94af88c0-6c8e-47c8-945b-52132d84c69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:a9:69:da:74:97:63:d9:98:5d:12:07:11:
                    8f:24:a1:69:7b:62:f8:7c:86:ed:9a:54:19:e6:88:
                    43:fa:90:43:38:83:fa:4e:27:06:f2:4e:84:f9:fc:
                    5b:0e:b7:8a:15:23:5a:2d:35:98:6f:9a:41:ad:3a:
                    d9:2b:ae:51:c8:9c:5d:09:bc:58:9d:f4:8b:b7:a5:
                    e1:fa:c7:8b:25:73:6c:a5:3d:2d:a7:f3:f9:40:76:
                    e4:38:28:3c:5f:45:d4:df:52:7e:d0:4f:20:b4:00:
                    4e:63:a1:9d:66:b8:56:d7:b8:70:78:ed:d5:3e:fb:
                    40:8f:35:69:4c:8d:14:df:02:70:d5:98:60:0d:9d:
                    5c:34:75:67:35:a6:a2:6f:8f:d0:9a:a4:5f:cc:9e:
                    c4:48:8d:ad:01:ac:c5:03:bb:23:08:77:e6:dd:23:
                    3d:02:d6:23:7f:45:2d:8e:de:db:e0:01:fa:69:1e:
                    c9:24:60:ee:f5:10:94:e1:0b:9b:1d:08:db:27:d2:
                    f6:1d:ef:b6:e3:ab:47:ef:e7:86:8e:76:de:87:d3:
                    ff:65:c5:67:14:f1:4b:83:35:3c:07:ac:27:6a:3a:
                    4e:1b:8b:bf:d8:3a:d7:e2:4f:e4:75:29:c1:52:fe:
                    5c:bf:f7:6b:11:28:6c:03:fd:45:b6:3f:6a:d2:5e:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:25:87:8D:40:CF:E4:94:D8:C0:19:51:A3:9C:45:40:FB:CF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4c:39:05:f1:40:bb:21:fc:1d:c0:08:85:be:79:fa:91:18:
         3d:02:10:5c:17:73:a0:29:8a:d3:8b:ad:43:b6:74:05:3f:13:
         85:c7:1e:b3:ac:80:01:88:e9:15:4d:52:c7:30:53:34:77:65:
         1b:e5:3b:1b:cf:ab:4b:81:f1:1a:cb:b8:68:34:0e:e6:9f:5e:
         87:e2:dc:9e:dc:19:f6:51:87:4f:58:7a:af:85:58:30:ae:ac:
         67:ed:88:8a:18:ca:be:7e:ed:d4:6c:0c:1d:a6:fa:40:ed:fa:
         03:4c:4e:71:aa:95:23:f9:73:2b:a4:15:06:37:c4:e9:05:d9:
         16:f6:e8:ae:74:00:ad:f8:77:44:73:94:15:1d:c1:e9:19:88:
         da:86:d9:bb:17:d0:2d:9d:0b:e6:3b:d8:f5:ef:29:2e:69:eb:
         8a:65:cb:73:55:bf:91:9f:a6:0e:4c:9d:9a:8c:37:56:9d:96:
         16:5f:a0:b2:8c:ca:11:db:43:e9:42:99:d1:09:83:58:b6:bc:
         50:98:1f:79:d4:b9:c8:66:8f:d2:ca:ca:73:66:df:62:bc:28:
         55:09:bf:71:28:8e:34:44:c4:dd:8f:ba:45:16:8a:99:fd:04:
         da:50:82:a5:f6:8b:2d:79:84:da:16:a2:c5:4d:62:c8:e1:2e:
         b0:8f:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:28 2025 by rpki-client