Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15adabe9-eb23-3176-ad33-4f1d7f216d71.roa
File:                     15adabe9-eb23-3176-ad33-4f1d7f216d71.roa (raw, json)
Hash identifier:          Ai8X8HqCf1QbvZ0YpeJOaFdtVa787XOGQX0RAe9+eAU=
Subject key identifier:   21:CB:D7:64:C6:E7:F9:A9:E5:77:83:CD:D1:D3:AC:6E:D7:D2:10:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A61743EDA02EF1FD2E9622
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15adabe9-eb23-3176-ad33-4f1d7f216d71.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     397194
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:17:43:ed:a0:2e:f1:fd:2e:96:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=6233709f-26cb-43a7-8300-53061eae4f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:36:b4:95:c9:37:88:76:9a:a2:e4:76:b3:
                    ee:fd:f2:5c:2d:e4:b8:2b:94:cf:7a:58:b8:d9:c0:
                    79:0b:22:1c:bc:ef:f9:21:46:06:89:74:a3:d0:ee:
                    24:2e:49:e6:f1:48:b8:97:57:ac:a0:55:aa:a3:bf:
                    fb:0d:33:49:2f:b8:c8:28:e4:64:0c:da:19:46:49:
                    5a:95:d2:5f:d0:64:bf:16:3b:23:01:8d:cc:45:e2:
                    dc:0b:30:1d:3a:73:1a:a2:9f:2d:3a:22:53:5a:05:
                    19:12:91:3b:30:1c:92:2e:8a:6e:2f:39:0d:3d:03:
                    cc:2e:7e:3b:60:40:9b:5e:0a:6b:f9:91:7e:3d:05:
                    51:35:81:26:78:e3:49:2f:4e:2c:bb:d9:85:5e:63:
                    98:74:cc:10:1c:99:df:a5:1f:42:40:ed:a4:cf:ce:
                    ec:82:97:42:a4:4a:21:89:fe:a7:3b:31:75:8e:55:
                    34:26:00:e2:42:05:db:09:21:ad:39:bf:47:31:5a:
                    61:df:35:aa:21:30:c7:50:75:de:8f:93:20:2f:30:
                    59:d9:ba:78:80:88:89:5d:a0:fe:b4:07:0c:b3:34:
                    57:42:8e:6b:bb:cb:42:da:2e:a0:da:a2:fd:24:9e:
                    94:88:6e:f1:b8:96:1d:10:8f:be:ed:71:83:2b:d3:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:D7:64:C6:E7:F9:A9:E5:77:83:CD:D1:D3:AC:6E:D7:D2:10:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15adabe9-eb23-3176-ad33-4f1d7f216d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:62:b8:85:70:15:7e:17:03:5b:ae:51:7a:4f:ed:9a:7a:e9:
         f6:e5:4a:46:ff:a3:43:a6:ad:54:d3:ce:85:2e:33:6a:e7:95:
         fb:f2:a5:68:61:d3:60:8e:07:40:be:6d:03:72:5f:a8:a6:ed:
         8c:2f:7e:8c:98:4d:aa:0e:23:59:a3:32:80:fc:e2:d3:e3:eb:
         34:42:6a:6d:4c:38:a9:db:53:69:80:b4:2f:a8:3c:08:df:4d:
         09:9e:d5:f5:77:d7:a6:2e:a4:a0:29:03:90:80:75:84:b9:54:
         e6:f0:dc:17:6f:0f:f7:35:6b:06:95:0a:f8:c1:80:b8:53:6e:
         8e:a6:d7:9f:c5:2f:5f:76:c5:5d:2a:54:34:2c:12:0f:58:ba:
         4f:c2:c2:5f:39:66:6f:40:fd:5a:dd:f5:ab:0f:5d:96:16:ce:
         87:0e:92:da:47:66:ec:45:58:eb:61:dd:21:99:c7:47:c9:5f:
         6d:43:6c:39:82:05:0d:bf:fb:5f:31:ef:4a:3e:b1:da:b7:ee:
         76:cf:da:cd:2b:c3:2b:60:2c:e9:7f:dd:cf:1f:29:4b:30:bd:
         2e:22:4b:cf:0c:65:cb:85:12:aa:0f:bf:5d:bd:c9:0a:b6:dc:
         2f:6a:39:6d:27:e5:fa:7b:bf:bc:1b:8b:06:85:f5:c5:40:59:
         ca:51:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:29 2025 by rpki-client