Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9d2b040-bc6e-34f7-b2b6-02f30ee2a991.roa
File:                     c9d2b040-bc6e-34f7-b2b6-02f30ee2a991.roa (raw, json)
Hash identifier:          3jfaJeEmC9jszAgUuQX2DNEyIrBQE45Sl3sTY1di/ok=
Subject key identifier:   8D:CA:58:67:91:5E:5D:39:86:56:BF:AA:10:EC:A1:E8:9D:26:18:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EEAA6DD532A5742FBA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9d2b040-bc6e-34f7-b2b6-02f30ee2a991.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396604
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ee:aa:6d:d5:32:a5:74:2f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7f1839d8-3678-4ee5-ae1f-9d435415cb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:45:de:bb:cc:15:f9:44:98:25:02:6e:71:
                    b2:b2:49:1a:ab:70:81:b8:5a:87:4e:2f:34:86:c9:
                    a2:b8:db:2a:f0:ea:ff:96:cc:34:22:be:c1:ff:9b:
                    68:ed:f7:51:af:86:0c:b6:1f:8c:6b:93:ed:58:29:
                    44:7e:91:6c:c5:5d:81:37:b0:13:1c:e0:04:d5:74:
                    ca:f7:0c:27:f9:78:4a:ac:d6:8a:6d:c8:30:1f:05:
                    e0:a3:e7:e2:b5:20:10:00:59:07:c7:eb:b9:02:d4:
                    be:09:34:5e:62:3a:57:1a:3c:29:67:e2:4c:bd:ba:
                    ea:13:dd:04:88:8a:7d:c9:97:19:4e:ec:d4:51:54:
                    8a:70:b5:57:f2:cd:48:f7:48:c4:1b:c6:36:00:21:
                    c5:80:d5:4f:43:44:b2:7c:0b:99:4d:16:af:58:57:
                    78:e4:92:b5:13:ce:86:93:58:9c:c1:52:31:8d:e7:
                    18:c9:97:e6:65:8c:be:74:70:cd:f9:4b:cf:cd:5b:
                    4c:9c:ff:39:13:3e:7b:f7:0e:c4:f6:ab:d6:de:75:
                    f5:fe:41:59:3b:b9:68:0c:64:2b:cd:5a:d2:24:94:
                    bc:28:01:34:4d:36:61:d7:2d:e7:5b:9c:68:a6:81:
                    f0:8a:a5:87:5e:12:2a:da:e7:5d:92:de:8e:a5:7a:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:58:67:91:5E:5D:39:86:56:BF:AA:10:EC:A1:E8:9D:26:18:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c9d2b040-bc6e-34f7-b2b6-02f30ee2a991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:24:b0:0f:dd:54:bd:4b:13:4a:08:43:5a:50:61:99:a1:a7:
         fa:42:f7:60:5f:af:b1:a1:75:28:cd:c1:38:e2:43:14:75:28:
         a0:fb:58:31:a9:c7:7d:25:5c:5a:7d:87:28:ad:5b:69:4c:09:
         37:04:58:a6:10:ff:db:f3:f9:9c:b3:e6:07:8d:82:56:41:d7:
         4c:ac:a6:00:6c:bb:28:9e:5f:68:73:3a:a3:04:04:b6:23:09:
         1d:c7:aa:b5:a6:b2:72:03:e0:ee:f2:6f:7d:42:59:bb:ed:87:
         19:59:11:83:79:bc:4f:3d:94:99:ec:16:31:ef:fd:5f:a4:2d:
         af:97:b0:99:22:41:47:48:af:55:85:ae:13:a9:76:85:43:04:
         7e:20:5b:e7:b6:ba:54:52:7f:b0:54:5a:d8:17:74:b9:28:71:
         f2:75:01:47:8c:79:51:13:23:97:29:44:76:18:11:67:4c:d6:
         7c:57:09:09:64:9f:c9:50:cf:55:35:ba:b2:12:ca:53:fd:4e:
         f2:15:dd:66:26:dd:32:29:e0:ca:67:bc:a4:f5:5e:5f:13:56:
         39:be:1a:86:7e:20:5b:18:fe:a2:15:1b:af:c6:42:62:f3:f3:
         db:05:4c:43:f7:50:bc:d4:3d:b4:b7:de:fe:20:f4:32:6e:f8:
         c6:c7:9e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:15:37 2025 by rpki-client