Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501f34f3-07e0-35cc-b2be-f3627373747a.roa
File:                     501f34f3-07e0-35cc-b2be-f3627373747a.roa (raw, json)
Hash identifier:          40N5lTPLMZqrnvVKCRuMIxoEir9W0dCFcU1H5HWG9ik=
Subject key identifier:   8A:9E:F4:40:0E:2D:EB:70:BD:53:8C:04:35:0E:51:D0:98:D2:74:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350B896A5D6BCF5DC66B580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501f34f3-07e0-35cc-b2be-f3627373747a.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     36631
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b8:96:a5:d6:bc:f5:dc:66:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=196aed36-2545-4951-a61b-ea38b8f24d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:71:e8:59:8c:0c:a3:3c:37:5f:12:08:a2:
                    90:1e:4b:f4:7e:52:2b:e1:5b:1f:d4:a2:3a:49:8b:
                    1d:c6:27:38:0f:36:a0:fe:b5:ad:c7:6b:77:f1:ee:
                    9c:7e:82:79:47:a9:b2:98:83:19:52:54:eb:7a:80:
                    d6:dc:ac:8b:97:20:3b:24:40:59:f2:7d:41:c7:24:
                    e8:10:37:a8:f2:ab:5a:7c:62:55:19:21:72:75:2f:
                    41:16:ab:5e:3a:99:90:bd:0c:d0:a7:89:71:a3:12:
                    88:28:5b:89:5e:6d:0c:65:8b:f6:b0:2d:20:6a:fb:
                    2d:43:11:ab:98:60:4d:23:df:0c:6e:75:f7:3a:72:
                    0d:95:45:53:35:01:c9:0d:a5:c6:e9:23:23:92:02:
                    1f:8c:12:11:3a:42:b7:3e:70:ae:ca:6b:fc:31:f9:
                    95:d7:05:da:04:d1:1f:3f:d0:82:f9:38:c8:9d:62:
                    31:92:7f:cd:c4:bc:b1:4c:bc:be:fd:1e:42:2b:c4:
                    d9:2a:2b:b9:99:ed:98:12:c3:a8:bd:0c:7a:cf:52:
                    34:33:66:17:50:78:25:d1:f5:bb:a5:64:f5:1f:09:
                    62:b6:45:fe:4a:34:3c:1b:c0:32:8b:21:b2:6d:30:
                    45:f2:5b:87:68:c1:05:c0:f5:86:fe:7c:96:bb:2e:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9E:F4:40:0E:2D:EB:70:BD:53:8C:04:35:0E:51:D0:98:D2:74:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501f34f3-07e0-35cc-b2be-f3627373747a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:74:fe:ff:e7:bc:ce:fa:6c:8b:67:0d:fc:cc:30:2c:be:2d:
         8d:d5:65:ba:68:10:7b:ab:80:64:c7:c5:7d:4a:3d:a5:56:13:
         97:45:2a:ef:89:48:a1:84:bd:d3:07:84:0c:2b:2a:04:50:90:
         d9:f4:65:cf:df:6b:33:58:3f:4a:82:be:e9:e2:ce:dc:c3:d3:
         2a:3b:82:f8:97:b0:1b:9a:be:a6:f6:13:5f:20:d6:cb:71:a4:
         88:03:2a:a0:b2:51:78:52:35:2b:ec:94:87:01:f3:f2:26:c0:
         ea:07:a8:d8:13:82:a3:69:c5:d1:b2:f2:2f:36:b4:76:23:08:
         1f:55:a1:37:a4:43:d4:46:df:3b:b6:74:a2:ed:e8:81:28:fe:
         13:60:63:07:a4:19:36:2a:15:6c:a5:56:f8:9b:d3:53:88:e5:
         9e:5f:e8:23:c2:ee:dd:db:ec:c4:85:17:54:0d:ff:39:e5:65:
         57:15:08:39:d1:cf:02:4e:a5:8f:2d:f0:ac:b2:3d:ca:10:15:
         64:1f:2e:31:3f:c7:06:76:bd:4d:08:f3:69:71:21:8e:e1:67:
         00:f2:47:7f:21:62:4b:a9:8e:76:4e:a6:08:ea:35:03:a9:ae:
         de:57:55:13:7a:74:85:26:c5:a6:a1:dc:b0:48:51:86:a1:07:
         08:88:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:28 2025 by rpki-client