Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d556e3-b522-33e0-ade3-41634eb6f71c.roa
File:                     f4d556e3-b522-33e0-ade3-41634eb6f71c.roa (raw, json)
Hash identifier:          UQVhbVcSP394ufSeua3AotKRr//L5fH0hrbjPvyeQfY=
Subject key identifier:   AB:29:55:AD:07:93:80:33:EF:8B:5F:92:05:AB:BB:57:30:AE:E8:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C86A72D9643B3B5BDB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d556e3-b522-33e0-ade3-41634eb6f71c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396567
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c8:6a:72:d9:64:3b:3b:5b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=af1fa3f6-8921-460a-96da-248e645fa15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:ae:2e:15:c7:14:16:aa:81:09:5a:70:8e:
                    44:9f:83:83:ae:8e:25:ab:28:b7:c0:49:56:d6:b8:
                    ce:3e:31:de:b6:5d:f4:ad:23:ce:2d:8f:bf:76:b6:
                    a1:8b:0e:ae:56:c2:62:6f:ea:b7:b4:f5:b2:9e:66:
                    8e:46:d7:9d:ac:b7:72:7e:d1:18:ec:c8:57:b7:92:
                    2d:66:ff:65:b0:ec:90:b5:cc:cf:54:ee:9e:87:4b:
                    c6:16:f5:74:80:dc:7f:df:16:24:e6:c5:12:42:94:
                    94:81:b2:2b:6c:12:87:72:b8:91:bc:48:0f:9f:c5:
                    3d:30:7d:c9:bb:a1:ae:99:dd:08:f7:33:a1:c4:32:
                    14:76:e0:cb:ad:8c:c7:7e:6a:44:45:9d:d0:43:5f:
                    26:a4:65:64:96:92:a7:54:2b:f9:19:f5:7f:5f:db:
                    ee:21:5b:19:e7:41:6c:63:5a:4b:ce:f5:af:68:04:
                    99:b6:39:b6:8c:ee:61:ac:29:af:14:c5:f8:96:ab:
                    ab:0d:af:c0:44:55:17:cb:a7:e6:76:1c:79:88:32:
                    9b:5c:ab:29:43:e3:10:55:f1:4e:4d:e9:5f:24:b7:
                    c1:7b:7d:35:da:31:0e:76:4b:a3:83:19:5b:5d:56:
                    c1:67:77:87:d0:39:ef:3e:8c:cc:7e:6a:d4:fa:ff:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:55:AD:07:93:80:33:EF:8B:5F:92:05:AB:BB:57:30:AE:E8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4d556e3-b522-33e0-ade3-41634eb6f71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:75:d2:a2:02:2c:b1:2e:dd:8b:a8:bd:9d:07:df:52:c2:
         03:eb:6d:48:89:86:ba:b2:e2:48:24:07:5e:83:dc:1c:2d:18:
         a1:bc:d4:07:66:41:9a:40:29:0f:5d:2c:f1:d1:6a:75:a9:68:
         c0:f1:1f:05:4e:94:ea:23:c3:5b:63:72:51:12:f7:d3:26:05:
         55:c4:c9:32:7b:9e:4f:45:b9:55:90:f5:54:71:f2:2b:26:75:
         a4:27:2e:9a:32:63:08:73:b5:80:a1:b5:ee:1c:a1:d9:73:7d:
         6f:e4:5b:6f:18:f4:0f:a3:f7:27:88:7d:e9:1c:bb:33:ed:aa:
         27:ef:18:06:24:ab:b9:1b:19:65:80:a1:3e:a4:5a:32:d4:01:
         b1:1d:f2:2c:c3:60:40:9b:2c:d1:6f:26:c3:c4:f6:81:5f:07:
         5e:3c:0f:e8:7a:e9:62:b3:9b:11:5e:e5:c1:d1:86:3d:ae:a3:
         c2:55:5f:de:08:e2:c1:38:93:65:92:b1:eb:5e:74:e5:36:e1:
         76:86:2e:df:18:21:4a:ca:85:a9:db:65:21:4d:5d:f4:63:84:
         52:af:50:2d:ec:ad:af:f6:51:b6:2f:66:44:89:5f:30:d7:46:
         17:26:d0:a2:d9:f9:b0:18:f7:18:4b:47:e3:6e:c1:05:e9:eb:
         91:86:2a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:02 2025 by rpki-client