Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec3b87fc-8a32-342f-ba03-763976160f4a.roa
File:                     ec3b87fc-8a32-342f-ba03-763976160f4a.roa (raw, json)
Hash identifier:          qKr40hCuqU1xzvNHC6YkNGAtqOU5ZuM3uRB3PQjKPM4=
Subject key identifier:   6E:E8:B8:81:EA:EF:F9:88:F8:98:31:C9:92:20:81:12:4B:BA:7F:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E8CE6B3F5FB73BD235C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec3b87fc-8a32-342f-ba03-763976160f4a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396596
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e8:ce:6b:3f:5f:b7:3b:d2:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=85ce407c-3ae1-43e4-af63-776e29978572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:6f:d4:30:9a:a5:81:5a:ff:e7:87:37:fa:
                    1d:40:2a:d9:6a:46:48:0f:82:f2:04:20:93:06:1d:
                    83:5a:97:37:8a:e9:fb:d9:3c:15:1d:28:ca:1d:b0:
                    b9:75:8c:79:8e:e7:87:96:dd:e5:bb:a1:f0:81:88:
                    dc:40:02:2a:0b:58:99:db:a1:46:4b:62:f4:8c:08:
                    95:7d:cd:cd:cf:86:e6:45:3d:fd:85:17:85:49:a1:
                    8c:f8:d0:66:4b:2f:fe:dc:b1:03:d5:a9:2b:2d:2d:
                    57:9e:a2:2a:99:ba:23:16:96:96:7d:cf:b4:c0:3c:
                    ac:76:44:3f:31:af:7e:dc:e7:7f:18:77:42:86:c9:
                    a7:c0:85:8d:84:d2:7a:84:75:82:c0:71:48:53:1d:
                    a7:7c:cf:95:63:02:da:12:25:68:e2:78:aa:c3:f2:
                    48:20:25:8b:22:fc:aa:e7:ff:36:b9:ce:81:9f:44:
                    14:fc:d7:38:23:05:18:11:cc:58:ca:a7:17:22:5c:
                    d8:90:fd:a9:34:58:b0:53:ce:31:c5:49:a0:6f:5b:
                    61:71:94:ca:26:0d:29:21:0b:c8:1b:d4:d9:d0:56:
                    0f:fe:7c:5b:10:55:98:58:8a:93:d7:cb:20:cb:3e:
                    ba:88:bd:87:6a:7c:fe:8e:c3:31:dc:9e:5f:b7:d1:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E8:B8:81:EA:EF:F9:88:F8:98:31:C9:92:20:81:12:4B:BA:7F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec3b87fc-8a32-342f-ba03-763976160f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:9b:50:f1:19:c3:a9:75:bc:df:f5:0c:83:f6:96:6b:e1:
         36:cc:71:a1:d0:53:3b:ea:71:76:c8:df:c1:28:55:a0:34:3a:
         61:ed:29:6d:1e:57:32:e1:03:f0:bc:31:d4:55:e6:a5:ad:f5:
         be:ea:79:69:cf:f5:40:03:df:96:08:8d:4c:25:fe:e5:0a:17:
         1c:ad:54:ce:8d:b8:65:37:4c:43:46:ac:fe:11:bb:84:f9:c0:
         fe:c4:41:14:39:c2:33:18:0c:60:04:16:51:d8:d4:5f:92:c7:
         af:e1:67:e0:62:ef:d4:74:0b:e3:c7:22:d1:9a:f6:eb:ab:d6:
         51:40:b2:e5:1d:05:e2:b0:50:b5:b8:48:c7:c2:39:30:c0:82:
         9e:cf:5f:85:88:8a:de:f8:60:7c:98:f9:ec:e8:44:63:2b:76:
         3d:b8:8d:89:a2:11:24:a6:eb:52:be:d9:01:0b:a3:86:fd:d0:
         97:6a:1e:ce:a3:ef:ab:fe:82:3a:93:c2:c5:d6:40:1e:6e:85:
         7e:ca:55:ec:2d:80:0f:9c:8b:bb:e8:a9:59:76:1e:ff:d0:aa:
         54:fb:4b:5f:82:2e:d7:e0:96:d2:75:2d:73:67:ca:58:1f:09:
         49:fe:f0:86:74:ca:fb:07:2e:52:26:eb:17:71:62:d0:72:dd:
         9d:ba:aa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:52 2025 by rpki-client