Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa
File:                     3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa (raw, json)
Hash identifier:          4b5WUnZFV85pg3UeBPO0eFD6nsNA4XCNZPmaMfmndaY=
Subject key identifier:   5F:41:64:96:1A:6E:03:F9:20:49:0C:B3:A0:54:E4:69:9E:2E:CB:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A89A62DD151A746FB85AAFF60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396585
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:2d:d1:51:a7:46:fb:85:aa:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=0f4f1559-3fee-4463-ba6e-37a0db01d3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:00:9b:22:2c:9f:88:68:f6:c7:c4:d5:f9:
                    bd:96:e4:1d:f1:24:de:e9:e9:8c:6c:34:f4:70:f8:
                    5b:c2:8f:fd:63:7f:1b:8e:e8:60:df:0c:45:8d:71:
                    72:99:b1:84:75:17:36:04:13:1e:63:81:a0:f2:0c:
                    af:58:0b:a8:e4:c4:8d:2a:d5:8b:da:85:d0:3d:2b:
                    30:df:29:58:a9:6b:2a:67:2d:23:56:fc:8d:f8:d7:
                    e4:c9:fd:f3:a1:63:5a:1b:f8:2b:be:a3:7a:5c:09:
                    5a:a7:40:25:48:08:95:cd:9e:d5:05:40:a8:49:16:
                    e9:df:14:78:e0:f2:7f:76:94:fb:ff:d0:c1:0a:e9:
                    c1:5f:dc:ed:bb:e4:e1:d9:a2:4e:bc:cf:60:8a:86:
                    3e:f4:d3:4d:ae:10:7c:4c:ac:d4:66:ec:09:fc:7d:
                    d6:ac:29:e3:1e:24:d6:c6:5a:86:fb:46:49:df:60:
                    ce:3b:91:3b:c9:58:c5:e1:7f:00:9f:ba:7c:28:62:
                    f4:79:cb:a0:de:25:c0:6c:d4:d5:b7:38:1b:57:a5:
                    2c:b8:91:a4:b8:a5:f5:a9:eb:02:d8:95:78:57:d1:
                    ec:97:e3:9b:d6:4f:46:7a:ed:fb:0c:40:a0:47:8c:
                    4a:47:8b:10:33:45:22:3a:2d:3c:86:9a:18:d8:63:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:41:64:96:1A:6E:03:F9:20:49:0C:B3:A0:54:E4:69:9E:2E:CB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:3c:d7:05:24:23:74:76:52:34:33:07:a7:1d:e1:86:c7:
         65:ea:09:2e:01:81:be:d0:0d:1f:fb:e5:9d:e8:f9:d6:da:52:
         1b:f8:2c:08:85:42:c2:ad:a7:bf:02:70:76:76:52:6f:b7:af:
         5d:ea:d1:23:88:14:84:56:33:66:1e:73:ea:87:20:3a:0b:99:
         b0:e4:89:e7:04:9e:39:6b:1b:6e:e6:35:6c:44:50:c2:3d:17:
         78:55:5d:0a:74:ef:66:db:d7:71:43:8c:58:73:0a:1e:cf:7d:
         5a:3c:89:63:21:7b:62:5c:40:40:eb:6d:5b:60:7e:11:0d:41:
         3e:a4:37:a3:59:60:26:b1:20:69:7d:30:f4:a7:8a:62:a4:cd:
         28:91:72:e4:a1:48:c6:e8:f2:db:33:4a:89:b9:d4:bd:68:2f:
         b3:9b:4b:1c:ba:95:55:95:f1:b9:98:0b:1d:9d:e8:d5:a4:4d:
         c8:ce:39:35:c4:41:64:0b:e1:87:f8:fb:4e:14:f8:58:f5:4d:
         61:a2:fd:08:7f:a6:a3:73:25:21:ee:ab:a9:05:7f:17:44:b6:
         9a:18:1e:1c:34:e0:eb:56:e7:35:1f:bc:59:db:5e:64:fa:a8:
         93:ef:c2:52:92:0a:01:d6:24:51:b9:f3:40:7a:d7:84:52:94:
         5f:0e:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:58:02 2025 by rpki-client