Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bceece1d-e191-31b8-81cc-caf8c6bc28bd.roa
File:                     bceece1d-e191-31b8-81cc-caf8c6bc28bd.roa (raw, json)
Hash identifier:          8mC67q5V4Gpq/lqQfWS8zQsth6E3eiYleRMpmlbFVrw=
Subject key identifier:   CD:92:5B:71:20:D8:10:76:68:F4:7C:EF:57:BB:FE:F6:3B:EF:7C:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B96018506DC0ACEA02C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bceece1d-e191-31b8-81cc-caf8c6bc28bd.roa
Signing time:             Wed 20 Aug 2025 14:36:58 +0000
ROA not before:           Wed 20 Aug 2025 14:36:58 +0000
ROA not after:            Tue 18 Nov 2025 15:36:58 +0000
asID:                     36628
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:96:01:85:06:dc:0a:ce:a0:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:58 2025 GMT
            Not After : Nov 18 15:36:58 2025 GMT
        Subject: CN=44e25035-532d-4896-8e4a-afc8f810839a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:30:16:5e:61:33:d5:74:a8:25:3b:ef:c3:
                    52:cf:82:8c:55:a0:34:13:58:4e:b4:8f:b8:9a:ef:
                    78:c3:c5:ed:02:f4:6e:1c:3a:28:30:c0:e3:81:3c:
                    63:76:ec:ba:17:fe:37:de:18:48:64:aa:70:10:e4:
                    a5:6e:20:94:99:bf:1f:c2:b2:5d:c1:fc:af:05:ed:
                    e4:02:88:5e:6e:9e:23:49:bf:3a:79:85:ca:c2:d6:
                    01:c8:6d:99:e8:13:27:f7:ca:89:ec:f4:16:76:63:
                    ff:7d:91:b8:ce:74:e8:e0:6f:87:91:90:45:37:36:
                    e6:e3:a6:52:ac:03:88:1c:d9:de:aa:12:8a:4f:93:
                    82:82:ba:cf:f7:fe:74:13:e3:7a:a5:c7:2f:8f:ef:
                    b1:e6:35:45:2f:94:a1:4c:aa:c9:b2:f0:46:29:1e:
                    db:d9:48:0f:a3:50:85:ce:46:32:b5:6f:7b:91:03:
                    e0:21:6a:55:bb:eb:d6:8d:07:a3:08:89:fd:fd:22:
                    33:13:19:7b:ec:30:84:1d:57:25:2b:d0:a1:08:56:
                    f0:65:17:a0:47:c9:ca:5c:0a:09:74:13:8c:3e:43:
                    dd:36:64:e3:e1:cc:c1:3c:d3:e9:2e:82:68:4c:90:
                    57:8e:42:8e:b7:99:3c:31:35:57:83:c1:34:b1:98:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:92:5B:71:20:D8:10:76:68:F4:7C:EF:57:BB:FE:F6:3B:EF:7C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bceece1d-e191-31b8-81cc-caf8c6bc28bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:2a:29:d8:70:98:f9:78:44:dd:b9:14:24:b4:12:a8:43:
         ad:24:65:c1:4e:0d:59:c1:84:f6:8d:e2:10:80:c0:08:5a:d4:
         3d:da:fa:25:8f:33:30:9c:9e:31:5e:4b:4d:d4:d2:85:d8:5d:
         77:a7:e6:03:df:79:27:62:e5:4f:35:5b:8a:46:01:3b:5f:34:
         ae:b4:d9:0f:b5:4e:93:cd:82:f2:95:51:bc:28:99:dc:12:85:
         c7:96:92:3a:ec:ea:1a:55:76:c1:e3:a9:c3:ff:17:7d:19:0b:
         51:94:b4:19:f0:cc:7c:d8:04:41:20:26:20:40:d7:60:1d:c7:
         e9:5b:51:61:b9:07:3f:19:e1:16:0e:26:40:89:2f:54:5c:ae:
         b6:ab:f2:03:23:45:5a:0d:21:e5:cf:84:c7:04:c3:c9:78:ea:
         e9:6e:b7:5b:46:81:9b:a2:f5:2b:32:3e:07:a5:df:f0:6b:e8:
         c6:da:cf:38:34:92:4e:c6:d5:55:a2:88:32:aa:09:d2:9d:f6:
         ce:86:f0:cf:67:56:e7:fc:2c:92:6b:6d:58:c2:c9:8c:5a:58:
         2d:dd:50:4e:c1:80:3b:a4:bd:e1:33:f8:09:d9:6e:58:d8:6a:
         ea:9a:05:f2:bf:73:4a:8e:58:5c:48:6c:4f:c1:d2:44:bf:2d:
         eb:3e:64:e4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri5YBhQbcCs6gLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzY1OFoXDTI1MTExODE1MzY1OFowLzEtMCsGA1UEAxMk
NDRlMjUwMzUtNTMyZC00ODk2LThlNGEtYWZjOGY4MTA4MzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IswFl5hM9V0qCU778NSz4KMVaA0E1hOtI+4
mu94w8XtAvRuHDooMMDjgTxjduy6F/433hhIZKpwEOSlbiCUmb8fwrJdwfyvBe3k
Aohebp4jSb86eYXKwtYByG2Z6BMn98qJ7PQWdmP/fZG4znTo4G+HkZBFNzbm46ZS
rAOIHNneqhKKT5OCgrrP9/50E+N6pccvj++x5jVFL5ShTKrJsvBGKR7b2UgPo1CF
zkYytW97kQPgIWpVu+vWjQejCIn9/SIzExl77DCEHVclK9ChCFbwZRegR8nKXAoJ
dBOMPkPdNmTj4czBPNPpLoJoTJBXjkKOt5k8MTVXg8E0sZjhFQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM2SW3Eg2BB2aPR871e7/vY773x8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmNlZWNlMWQtZTE5MS0z
MWI4LTgxY2MtY2FmOGM2YmMyOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDBPHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAPviop2HCY+XhE3bkUJLQSqEOtJGXBTg1ZwYT2jeIQgMAIWtQ92vol
jzMwnJ4xXktN1NKF2F13p+YD33knYuVPNVuKRgE7XzSutNkPtU6TzYLylVG8KJnc
EoXHlpI67OoaVXbB46nD/xd9GQtRlLQZ8Mx82ARBICYgQNdgHcfpW1FhuQc/GeEW
DiZAiS9UXK62q/IDI0VaDSHlz4THBMPJeOrpbrdbRoGbovUrMj4Hpd/wa+jG2s84
NJJOxtVVoogyqgnSnfbOhvDPZ1bn/CySa21YwsmMWlgt3VBOwYA7pL3hM/gJ2W5Y
2GrqmgXyv3NKjlhcSGxPwdJEvy3rPmTk
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:56 2025 by rpki-client