Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79e40568-9839-3907-9344-b4896ca54bb5.roa
File:                     79e40568-9839-3907-9344-b4896ca54bb5.roa (raw, json)
Hash identifier:          2aOHhyZEmMvdeG2yzAFTU9ul1xGPeSbxcAA2cDpVj10=
Subject key identifier:   74:00:12:B2:2D:8A:7C:B1:10:11:00:10:29:8F:B4:11:FF:CE:F2:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7350BD2C4AD827E61F315440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79e40568-9839-3907-9344-b4896ca54bb5.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     211369
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bd:2c:4a:d8:27:e6:1f:31:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=5a8f779f-b47b-463e-855b-af7f5f6aeecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:e1:5e:db:04:1d:2b:29:d5:cb:7e:70:9c:
                    ba:ca:86:1d:b7:1e:fa:4b:01:82:a4:e1:6b:9e:99:
                    3d:c7:d9:48:bd:14:2d:a6:2f:e9:44:53:49:54:e3:
                    3d:d8:89:61:94:66:29:11:27:4e:13:a9:c2:1b:e9:
                    e6:15:c1:79:f6:ab:7c:9a:d6:f3:9d:4e:b2:84:81:
                    1b:8a:91:e0:47:f3:23:f1:a5:7c:5a:b5:72:a1:98:
                    b0:65:5e:19:c8:54:07:06:9d:e5:98:80:cb:08:cd:
                    46:98:a4:f4:65:17:98:2b:58:78:0b:9c:63:09:06:
                    ad:55:3d:1c:51:f7:65:15:82:ed:9e:c5:86:20:9e:
                    97:f5:e9:4c:97:e6:e0:e3:ba:3c:a8:b3:1a:ef:ff:
                    43:e2:f1:81:2c:fb:bc:46:15:22:7a:d8:25:5f:94:
                    86:eb:46:f8:93:04:78:aa:25:3e:64:87:a9:50:58:
                    36:d2:bd:f9:44:33:db:37:81:d1:2e:88:0a:b2:82:
                    c0:9c:b8:e5:a1:42:54:68:01:72:94:ce:4b:68:fb:
                    e5:92:a6:3d:eb:5f:4b:37:42:05:18:09:b8:1a:53:
                    a6:ae:62:5e:1b:fb:d0:7f:00:ac:40:6b:c7:f1:1b:
                    c5:0a:5c:3e:01:9f:bd:e8:c4:04:31:69:e5:84:51:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:00:12:B2:2D:8A:7C:B1:10:11:00:10:29:8F:B4:11:FF:CE:F2:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79e40568-9839-3907-9344-b4896ca54bb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:db:03:3f:8e:74:5b:7b:0b:20:80:5a:1c:85:b5:05:97:de:
         d0:00:66:52:85:fe:43:7a:bb:26:e4:e4:b4:5b:fd:a2:35:73:
         b4:dc:91:ce:56:49:50:f2:62:06:b7:30:1f:03:dc:97:f6:7b:
         b0:c7:67:13:e3:7b:cb:21:af:96:8a:fe:2f:f0:0a:d0:68:c5:
         62:34:72:78:ff:7e:3a:7a:42:96:f2:fa:35:56:53:88:0e:44:
         39:54:c5:00:d1:f4:2c:2f:65:1b:8d:1e:17:d9:a5:57:b5:10:
         a5:7e:0c:88:ae:14:a0:d1:0e:26:6f:23:10:d0:64:6e:42:3b:
         e7:ca:13:96:b9:0a:7e:51:e7:96:b6:ed:35:cd:27:46:a1:dc:
         5d:8c:bd:95:a3:a9:36:e5:29:78:e2:04:2a:dc:f2:31:70:b7:
         60:ed:cb:fa:00:57:2f:8f:c3:8b:e0:01:da:06:c3:57:32:9f:
         93:1c:99:84:c6:7d:a5:ac:f6:fa:73:2f:41:ee:4d:ec:f6:24:
         6d:6c:51:cd:2c:38:90:4d:15:7c:d6:e8:9f:06:cc:6d:a6:d4:
         95:43:a9:d0:f4:f7:e0:66:91:be:56:b5:3e:ce:66:b7:b3:42:
         e9:98:36:99:28:66:95:33:f5:57:7a:67:ef:a9:27:f7:48:fc:
         69:4c:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:28 2025 by rpki-client