Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/205e4e67-1de0-3018-8892-d236e33cf93e.roa
File:                     205e4e67-1de0-3018-8892-d236e33cf93e.roa (raw, json)
Hash identifier:          UnE3YJSGx493xvQcHNRASdWNiLMjbewycMft180qWEY=
Subject key identifier:   02:9D:F0:34:F3:00:DE:92:49:D0:6F:69:6C:8B:55:FF:5B:68:B6:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6DBB66CAB8C3B5D2F7803E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/205e4e67-1de0-3018-8892-d236e33cf93e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     36621
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:66:ca:b8:c3:b5:d2:f7:80:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=5d607eff-3c0d-4fb3-ad7d-15e84f104982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:76:f4:0e:60:12:8d:95:68:50:32:92:da:
                    5f:de:1c:21:18:56:de:e7:2d:1e:85:7a:76:eb:b7:
                    84:07:fb:55:9a:f0:15:0c:a0:91:65:85:08:cd:e8:
                    fe:23:4b:2f:14:a6:77:0e:55:65:b5:71:26:38:85:
                    d3:13:d5:19:b7:1e:63:a2:a5:d3:e1:64:5f:67:76:
                    e9:06:8e:c2:fc:a0:49:f5:3d:94:fe:b7:46:c4:06:
                    42:47:b7:d6:d2:13:53:74:2a:7a:02:36:36:d6:c8:
                    06:4b:13:8f:ca:3e:6e:a1:d3:86:0e:ad:25:97:62:
                    c0:22:28:e3:e4:32:70:c8:6c:58:39:cb:ae:70:7f:
                    29:78:fe:25:8c:ac:24:33:0c:48:cf:da:1c:ce:be:
                    50:c4:f1:9d:16:24:be:74:c0:ee:0f:90:15:28:2f:
                    50:5a:98:77:02:51:df:a3:50:dc:6a:ab:90:7a:59:
                    a6:5a:e4:ff:8c:7d:ca:15:ad:0c:d0:29:da:8c:96:
                    a2:71:33:5b:31:db:70:42:16:b4:0d:59:e9:51:2a:
                    cd:08:bd:35:33:49:32:ce:df:3d:2c:c5:70:a2:68:
                    2f:e5:d8:9a:36:60:5c:22:f5:36:be:d3:41:30:89:
                    e5:a5:47:83:2e:9d:c3:a1:ac:67:6a:2c:ed:4b:6f:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:F0:34:F3:00:DE:92:49:D0:6F:69:6C:8B:55:FF:5B:68:B6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/205e4e67-1de0-3018-8892-d236e33cf93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:8b:f0:97:71:cb:82:2e:19:37:01:16:2f:2e:91:21:b3:
         df:09:14:f7:4c:6d:32:ae:2b:2e:ce:e6:23:b0:cf:6c:ee:1e:
         d0:be:e1:62:b5:1c:7f:2a:aa:8a:b5:2a:82:58:f7:66:e6:20:
         dc:95:46:af:37:ae:42:1c:ff:6e:88:c2:b4:0c:a8:99:6e:dd:
         54:8b:11:36:a3:c1:ff:30:be:8f:8a:3f:b5:62:b8:ee:e1:0f:
         e3:9e:e1:45:36:20:91:c0:f2:a5:57:57:cb:f7:71:66:3f:f7:
         32:56:5d:f8:6c:95:cf:86:a0:6b:31:dc:91:2f:e1:45:28:a3:
         f8:7d:7e:7e:d7:a9:92:48:35:06:b4:98:28:ad:ab:1f:39:e6:
         77:c0:26:89:36:57:57:90:ba:e4:9b:cc:c4:d9:b2:09:2d:cf:
         03:35:e4:17:49:22:8c:51:96:df:e4:a6:57:d8:db:c1:72:6a:
         d3:53:75:da:f9:39:bb:8e:01:e6:40:a6:57:82:57:14:98:f1:
         af:9e:e3:22:e5:77:9f:d6:a7:46:cc:77:0e:dc:7e:d8:e3:5e:
         02:91:02:68:e1:c7:6c:07:8b:59:d4:23:cb:f4:23:36:d1:d1:
         b4:2d:b6:66:e4:cb:ab:41:c5:5c:3b:6c:93:4b:ab:53:f4:a7:
         45:c9:ea:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:28 2025 by rpki-client